Privacy Policy

1. Introduction

GitHub HR ("we," "us," or "our") operates a SaaS platform that helps recruiters find and evaluate software developers using publicly available GitHub data. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

This policy applies to all users of our platform, including recruiters who create accounts and developers whose public GitHub profiles are indexed by our service.

2. Data We Collect

Developer Data (from Public GitHub)

We collect publicly available information from GitHub profiles through GitHub's official API. This includes:

• Username, display name, bio, and location
• Public repository names, descriptions, and primary languages
• Contribution activity (commit counts, recent push dates)
• Follower and following counts
• Public email address (only if the developer has made it public on GitHub)

We do not access private repositories, private profile information, or any data requiring GitHub authentication on behalf of indexed developers. All developer data is sourced exclusively from publicly available GitHub API endpoints.

Recruiter Account Data

When you create an account, we collect the information you provide through our authentication provider Clerk, including:

• Email address
• Full name
• Company name (if provided)
• Authentication credentials (managed securely by Clerk)

Payment Data

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive payment information on our servers. Stripe provides us with limited transaction data (plan type, subscription status, billing dates) necessary to manage your account.

3. How We Use Data

We use the data we collect for the following purposes:

• AI-Powered Scoring: We analyze public GitHub activity using artificial intelligence to generate code quality scores across multiple dimensions (code quality, activity level, project diversity, documentation, community engagement, and technical breadth).
• Candidate Matching: We match developer profiles against job descriptions or search criteria provided by recruiters.
• Ranked Leaderboards: We present scored and ranked developer profiles to recruiters through our dashboard.
• Account Management: We use recruiter data to manage accounts, process subscriptions, and provide customer support.

4. Data Storage & Security

Your data is stored and processed using the following infrastructure providers:

• Convex (United States) — Primary database for developer profiles, task data, and application state
• Clerk (managed service) — Authentication and user account management
• Stripe (managed service) — Payment processing and subscription management
• Vercel (global CDN) — Application hosting and delivery

All data is transmitted over encrypted connections (TLS/HTTPS). We rely on the security practices of our infrastructure providers, all of which maintain industry-standard security certifications.

5. Data Retention

• Developer profiles are retained until a deletion request is received from the developer. Profiles may be refreshed periodically with updated public GitHub data.
• Recruiter accounts are retained for the duration of the active subscription and in accordance with Clerk's data retention policies.
• Payment records are retained as required by applicable tax and accounting regulations, managed by Stripe.
• Pipeline logs (internal processing records) are retained for up to 90 days for debugging and operational purposes.

6. Third-Party Sharing

We do not sell, rent, or share personal data with third parties for marketing purposes. Data is shared only with our infrastructure providers (Convex, Clerk, Stripe, Vercel) as necessary to operate the service. These providers act as data processors on our behalf and are contractually obligated to protect your data.

7. Your Rights

You have the right to:

• Access — Request a copy of the data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data from our systems
• Portability — Request your data in a machine-readable format
• Objection — Object to the processing of your data

Developers: If your public GitHub profile has been indexed by our service and you would like it removed, please contact us at the email below. We will process removal requests within 30 days.

Recruiters: You can manage your account data through your dashboard settings. For account deletion, contact us at the email below.

8. Contact

For any privacy-related requests or questions, contact us at: email.vlad.vrinceanu@gmail.com

9. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users via email and update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.