Privacy Policy
How we collect, use, and protect your information.
Last updated: March 25, 2026
Information We Collect
Account information
When you create a KiteHR account, we collect your name, email address, and password. If you upgrade to Pro, we also collect billing information via Stripe — we do not store your full card number.
Usage data
We collect information about how you use KiteHR, including pages visited, features used, and actions taken within the app. This helps us improve the product.
Candidate data
When you use KiteHR to manage hiring, you may upload candidate resumes, notes, and other information. You are the data controller for this information — we process it on your behalf.
Cookies and analytics
We use cookies and third-party analytics tools (including Google Analytics, Amplitude, and Vercel Analytics) to understand how visitors use our site and improve our service.
How We Use Your Information
To provide the service
We use your information to operate KiteHR, including authenticating you, processing payments, and storing your hiring data.
To improve the product
Aggregated and anonymized usage data helps us understand which features are valuable and where to invest in improvements.
To communicate with you
We may send you transactional emails (password resets, billing receipts) and occasional product updates. You can opt out of marketing emails at any time.
AI features
If you use Pro AI features, resume and job data you submit is sent to Google's Generative AI API for processing. We do not use your data to train third-party AI models.
Data Storage and Security
Where data is stored
Your data is stored in a PostgreSQL database hosted on Supabase, with infrastructure in the United States. Resume files are stored in AWS S3.
Security measures
We use industry-standard security practices including encrypted connections (TLS), hashed passwords, and access controls. We regularly review our security posture.
Data retention
We retain your account data as long as your account is active. If you delete your account, we will delete your data within 30 days, except where required by law.
Sharing Your Information
We do not sell your data
We will never sell your personal information or candidate data to third parties.
Service providers
We share data with trusted service providers who help us operate KiteHR, including Supabase (database), AWS (file storage), Stripe (payments), Resend (email), and Google (AI features). Each provider is bound by data processing agreements.
Legal requirements
We may disclose your information if required by law, court order, or to protect the rights and safety of KiteHR and its users.
Your Rights
Access and portability
You can export your data at any time from your account settings. You have the right to request a copy of all personal data we hold about you.
Correction and deletion
You can update your account information at any time. To delete your account and all associated data, contact us at privacy@kitehr.com.
GDPR and CCPA
If you are located in the European Economic Area or California, you have additional rights including the right to object to processing and the right to restrict processing. Contact us to exercise these rights.
Cookies
Essential cookies
We use cookies necessary to operate the service, such as authentication tokens that keep you logged in.
Analytics cookies
We use analytics cookies to understand how visitors use KiteHR. You can opt out of analytics by using browser privacy settings or tools like uBlock Origin.
Changes to This Policy
Updates
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. The date of the last update is shown at the top of this page.
Contact Us
Questions or requests
If you have any questions about this Privacy Policy or want to exercise your data rights, contact us at privacy@kitehr.com.
Have questions? privacy@kitehr.com