Privacy Policy

Hireley ("Hireley," "we," "our," or "us") provides an AI-powered sales automation platform, including lead discovery, cold email outreach, AI voice calling, and related tools available at hireley.io (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (hashed) when you sign up.
• Connected email account data: if you connect a Gmail account via Google Sign-In, we access it strictly to send outreach emails on your behalf and to detect replies to your campaigns (see Section 3, "Google User Data").
• Lead and campaign data: business contact information you collect through our lead-generation tools (e.g. business names, public contact details, addresses) and the content of email campaigns you create.
• Payment information: processed by our third-party payment providers (Razorpay, Lemon Squeezy). We do not store full card or bank details on our own servers.
• Usage data: log data such as IP address, browser type, pages visited, and timestamps, collected automatically to operate and secure the Service.

2. How We Use Information

• To provide, operate, and maintain the Service (e.g. sending your campaigns, generating AI email drafts, running AI voice calls).
• To detect replies to outreach emails and update your campaign dashboard accordingly.
• To process payments and manage subscriptions.
• To communicate with you about your account, updates, or support requests.
• To monitor, secure, and improve the Service, including detecting abuse or fraud.

We do not sell your personal information or your connected account data to third parties.

3. Google User Data

When you connect your Gmail account, Hireley requests the following access:

Scope	What it's used for
Send email	To send outreach emails you compose or approve, from your own connected Gmail address, to leads in your campaigns.
Read email	To detect replies to your outreach campaigns so we can update your dashboard and stop follow-up sequences automatically when a lead responds.

Gmail data is used solely to provide these outreach and reply-detection features inside your own account. We do not use Gmail content to train AI models, and we do not share Gmail content with third parties except the AI providers strictly necessary to generate your email drafts (Section 4), acting on our instructions.

You can disconnect your Gmail account at any time from Email Center in the Hireley dashboard, or by revoking access directly at Google Account permissions. Disconnecting immediately stops all further access.

4. Third-Party Service Providers

We share limited data with the following categories of service providers, solely to operate the Service on our behalf:

• AI content generation: providers such as NVIDIA NIM, Google Gemini, and Groq process campaign and lead text to draft email content and power the AI voice agent (Vapi.ai). They do not retain this data beyond what is needed to generate a response.
• Infrastructure: Railway (application hosting), Supabase (database), and Vercel (static assets) store and process data on our behalf under their own security controls.
• Payments: Razorpay and Lemon Squeezy process subscription payments; we do not access your full payment card details.

We do not permit these providers to use your data for any purpose other than providing services to Hireley.

5. Data Retention

We retain your account, campaign, and lead data for as long as your account remains active, so the Service can continue to function as expected. If you delete your account, we delete or anonymize your personal data and disconnect any linked Gmail account within 30 days, except where we are required to retain limited records for legal, tax, or fraud-prevention purposes.

6. Your Rights and Choices

• You can access, update, or export your account data from within the Hireley dashboard.
• You can disconnect any connected Gmail account at any time.
• You can request deletion of your account and associated data by emailing contact@hireley.io.
• If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to object to or restrict certain processing.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls on our infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, notify you by email or through the Service.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at contact@hireley.io.