Privacy Policy

Hudson Signals | Effective: June 11, 2026

This privacy policy describes how Hudson Signals ("we", "us", "our") collects, uses, and protects your information when you use our website, mobile applications, and related services (collectively, "the Services").

1. What We Do

Hudson Signals provides AI-powered recruitment intelligence services including talent sourcing, automated interviewing, candidate pipeline management, and marketplace placement for employers and job seekers.

2. Data We Collect

Data	Purpose	Stored?
Email and password	Account authentication	Email stored. Password stored as a salted hash (never in plain text).
Name, phone, location	Profile and communication	Stored with your account.
Resume/CV text	AI-powered job matching and interview preparation	Stored with your profile.
Interview recordings (audio & transcript)	AI scoring, recruiter review	Stored for the lifecycle of the application.
AI-generated scores and analysis	Candidate evaluation and feedback	Stored with interview records.
Identity verification (face photo, government ID)	Interview integrity via Veriff and AWS Rekognition	Retained only for verification duration; deleted upon request.
GitHub account (username, public profile data)	Developer profile verification	Stored if you link your GitHub account.
LinkedIn account (name, profile URL, picture)	Professional profile verification	Stored if you link your LinkedIn account.
IP address	Security, rate limiting, abuse prevention	Stored in server logs.

3. Third-Party OAuth Integrations

When you link a third-party account (GitHub, LinkedIn), we access only the data you explicitly authorize:

GitHub: Username, public profile URL, avatar, bio, location, public repos count, followers/following counts. Scope: read:user.
LinkedIn: Name, profile picture, email address, and member ID via OpenID Connect. Scopes: openid profile email.

We do not post on your behalf, access private repositories, or read your connections. You can unlink these accounts at any time from your Profile Settings.

4. Data We Do Not Collect

We do not access your private code repositories, LinkedIn connections, or social media posts.
We do not collect device identifiers, advertising IDs, or telemetry beyond standard web server logs.
We do not track your location beyond what you voluntarily provide in your profile.
We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. How Data Is Transmitted

All communication between our apps and servers occurs over HTTPS (TLS 1.2+). Our infrastructure is hosted on AWS (US-East-1) with encryption at rest (AES-256).

6. Data Sharing

We do not sell personal data. Candidate information may be shared with:

Recruiters/Employers: Who have active job listings that you applied to, or who have claimed your marketplace listing.
Service Providers: AWS (hosting, AI), Veriff (identity verification), Stripe (payments) — under strict data processing agreements.

7. Candidate Marketplace

If you complete an AI interview, an anonymized listing (score, recommendation, duration — no name or contact details) may appear in our candidate marketplace. Your identity is revealed only after a recruiter pays to claim your listing. You may opt out by contacting support.

8. Data Retention

Account data: Retained until you delete your account.
Interview recordings and transcripts: Retained for the lifecycle of the recruitment pipeline or until the recruiter deletes them.
Biometric data: Retained only for the duration necessary to complete verification; deleted upon request.
Linked accounts (GitHub, LinkedIn): Retained until you unlink them.

9. Account Deletion

You may delete your account at any time from Profile Settings. Upon deletion:

All personal data (name, email, phone, resume, linked accounts) is permanently removed.
Interview recordings and transcripts are deleted.
Third-party OAuth links are revoked.
Active sessions are terminated immediately.
Aggregate, non-identifiable data (e.g., anonymized marketplace scores) may be retained.

10. Security

Passwords are hashed using industry-standard algorithms and never stored in plain text.
All API communication is encrypted via HTTPS.
Access tokens are short-lived and stored securely.
Infrastructure includes access controls, audit logging, and regular security assessments.

11. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect personal information from children.

12. Your Rights

Under applicable data protection laws (including GDPR, CCPA, and BIPA), you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Withdraw consent for biometric processing at any time.
Export your interview transcripts and performance data.
Object to processing of your data.

13. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be posted at this URL with a revised effective date. Continued use of the Services after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this privacy policy or wish to exercise your data rights, contact us at:

Hudson Signals
Email: [email protected]
Web: https://hudsonsignals.com