Privacy Policy

BidHub ("we", "our", or "us") provides tools that help users manage and complete online job applications. This Privacy Policy explains how we collect, use, share, and protect data when users access our web app, use the BidHub browser extension, and optionally connect a supported mailbox for verification-code autofill.

1. Data We Collect

We collect data necessary to deliver core product features, including:

• Account and profile information (such as sign-in data, selected profile details, and job application preferences).
• Job application context from supported pages (for example job title, company, application questions, and workflow status).
• User-submitted content and assistant interactions used to generate autofill and answer suggestions.
• Optional mailbox-connection data when a user chooses to connect Gmail or Outlook, including the mailbox address, provider account details returned by the provider, encrypted OAuth tokens, and connection-status metadata.
• Limited email data from verification messages relevant to supported job-application flows, including message sender, subject, message identifiers, received timestamp, and the verification code or link extracted to help complete a requested verification step.
• Technical and diagnostic data (such as extension version, error logs, and operational telemetry needed to maintain service reliability).
• Screenshots and page snapshots only when required for active assisted-application workflows or user-initiated support and troubleshooting.

2. How We Use Data

• To authenticate users and keep profile and sign-in state available across browser tabs and extension service worker restarts.
• To provide BidHub's core features, including job-page detection, application workflow guidance, autofill support, and AI-generated answer assistance.
• If a user chooses to connect a supported mailbox, to monitor provider notifications, read relevant verification messages, and return verification codes or links inside the product so the user can complete a supported verification step more quickly.
• To support collaboration with dedicated assistants selected by the user, including monitoring of active assisted applications.
• To improve product quality, safety, and performance, including debugging, reliability monitoring, and abuse prevention.
• To comply with legal obligations and enforce our terms, policies, and security requirements.

3. How and With Whom We Share Data

We share data only as needed to operate the service and provide the requested features:

• Dedicated assistants chosen by the user: profile and application activity data can be shared so they can support and monitor active job application workflows.
• Service providers and infrastructure partners: hosting, analytics, logging, authentication, AI-processing, and email-platform providers that help us deliver features a user chooses to enable, each acting under contractual or technical obligations applicable to their role.
• Legal/compliance disclosures: when required by law, regulation, legal process, or to protect the rights, safety, and security of users and our platform.

We do not sell personal data for third-party advertising, and we do not use connected mailbox data for advertising or unrelated profiling.

4. Browser Extension Permissions and Connected Mailbox Access

The BidHub extension requests browser permissions only for features tied to job-application assistance (for example: detecting supported application pages, updating in-page UI, persisting profile state, copying generated answers, and capturing screenshots during active assisted applications).

If a user chooses to connect Gmail or Outlook, BidHub requests mailbox read access that is limited to supporting user-facing verification workflows inside the product. This mailbox access is optional, user-initiated, and tied to a mailbox that must match the profile email saved in BidHub. BidHub requests read access only for this feature and does not request permission to send email or modify mailbox contents.

5. Data Retention

We retain data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and operational need.

For the optional mailbox connection feature, stored connection tokens and provider-side connection state are removed when a user disconnects the mailbox. Previously extracted verification records and related operational logs may continue to be retained for a limited period to support product functionality, security, fraud prevention, dispute resolution, and legal/compliance needs.

6. Security

We use reasonable technical and organizational safeguards to protect user data, including access controls, monitoring, and encryption of stored mailbox tokens for the optional mailbox-connection feature. No method of transmission or storage is 100% secure, but we continuously work to improve protection measures.

7. User Choices and Rights

Users may update account and profile information through the product. Connecting a mailbox is optional and is not required to use BidHub's general job-application features.

• Profile owners may connect, replace, reauthorize, or disconnect a supported mailbox from product settings.
• Disconnecting a mailbox stops future mailbox monitoring and removes the stored connection tokens needed to maintain the live mailbox connection.
• Users may request account-related privacy support, including questions about connected mailbox data and deletion requests, by contacting us.

8. Policy Updates

We may update this Privacy Policy from time to time. We will post the latest version on this page and update the "Last updated" date.

9. Contact

For privacy questions or requests, contact us at:  support@bidhub.tech