Privacy Policy

1. Overview

Hackats (“we”, “us”) helps you tailor your resume to specific job descriptions. This policy explains what data we collect, how we use it, who we share it with, and the choices you have.

2. Data we collect

• Google account information. When you sign in with Google we receive your email address, name, and profile picture.
• Resume content. The master resume you upload or paste, including the parsed structured fields (contact details, experience, education, skills, projects).
• Job descriptions. The job descriptions you submit in order to generate tailored resumes.
• Transaction metadata. If you make a purchase, we store the plan or credit pack, amount, currency, status, and timestamps (see Payments below).

3. How we use your data

We use your resume and the job descriptions you submit to generate tailored resumes. Generating a tailored resume involves sending your resume content and the job description text to third-party large language model (LLM) providers — for example Google Gemini and DeepSeek — who process this text to produce the tailored output. We also use your account information to authenticate you and provide the service.

4. Payments

Hackats uses Dodo Payments, a third-party merchant of record, to process payments. We do not collect or store your full card/payment details — those are handled directly by Dodo Payments under their privacy policy. We store only transaction metadata (plan or credit pack, amount, currency, status, timestamps) linked to your account.

5. Data storage & retention

We store your account information, master resume, submitted job descriptions, and generated tailored resumes for as long as your account is active so you can access and reuse them. You may request deletion at any time (see “Your rights”). After a deletion request we remove your data within a reasonable period, except where we are required to retain certain records (e.g. transaction records) for legal or accounting purposes.

6. Third-party processors / sub-processors

We share data with the following service providers:

• Google Gemini (LLM provider) — resume and job description text for tailoring.
• DeepSeek (LLM provider) — resume and job description text for tailoring.
• Google (authentication) — sign-in and basic profile information.
• Dodo Payments (merchant of record / payment processing) — handles payment details directly; we receive only transaction metadata.

7. Your rights

You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at contact@hackats.com. We will respond within a reasonable timeframe.

8. How to request deletion

To delete your account and associated data, email contact@hackats.com from the email address associated with your account. We will remove your master resume, submitted job descriptions, and generated resumes, subject to any legally required retention.

9. Cookies & local storage

We use browser localStorage to store authentication tokens (JWT access and refresh tokens) so you stay signed in. These tokens are used solely to authenticate your requests to our API. We do not use third-party advertising cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

11. Contact

Questions about this policy? Contact us at contact@hackats.com.