1.Who is responsible for your data
GoHighr is the controller of the personal data described in this policy. This policy covers the GoHighr website at gohighr.app and the Service described in our Terms of Service.
For any privacy question or data-rights request, contact privacy@gohighr.app.
2.Summary
3.Personal data we collect
Resumes, supporting documents, and job descriptions
The resume you upload, any supporting documents (such as certificates or transcripts), the job description you paste, and the file names of your uploads. Resumes typically contain your name, contact details, employment and education history, skills, and anything else you choose to include. We extract the text of your documents to process them; the extracted text is used during processing and not stored separately.
Skill confirmations
Skills you confirm or dismiss on your scan page.
Scan results and generated resumes
Your Role Match Score and ATS Readiness Score, the findings from your scan, the content of your generated resume, notes about what changed and missing evidence, and the generated PDF, DOCX, and LaTeX files. When a resume is generated, we also score the original and the optimized resume against the same job to show a comparison.
Account information
If you create an account: a unique account identifier from our authentication service, your email address, and your credit balance. Our authentication service also holds the sign-in details it needs, such as your email address and a securely hashed password, or the link to a third-party sign-in provider if you use one.
Guest access
When you use GoHighr as a guest, we create a random access token for your job and store it in a cookie in your browser. We keep only a one-way hash of that token, not the token itself.
Orders and payments
The plan purchased, amount, currency, order status, payment references from our payment provider, dates, and a record of the acknowledgment you gave before checkout (including the version of our terms and the time). Card details are entered on our payment provider's page. GoHighr does not receive or store your full card number.
Usage and technical data
First-party usage events such as page views, scans, purchases, and downloads, linked to a random browser identifier, a job ID, or your account ID. These events never contain document content or job descriptions. Our servers and hosting infrastructure also process technical data such as IP addresses, browser information, and request logs to deliver and secure the Service. Our application logs contain IDs and error codes, not document content.
Support communications
The emails you send us and our replies.
4.Sensitive information
GoHighr does not need sensitive information such as health data, religious or political beliefs, or ethnic origin, and we ask you not to include it in documents you upload. If your documents do contain such information, we do not use it for any purpose other than processing the document you asked us to process, and it is deleted with the rest of the job content.
5.How we use your data and our legal bases
- Providing the free scan and paid optimization, including generating, storing, and delivering your files: to take steps at your request and to perform our contract with you.
- Accounts, credits, and your job history: to perform our contract with you.
- Payments, invoicing, and accounting: to perform our contract and to comply with legal obligations, such as tax and accounting law.
- Security, abuse prevention, and fraud and duplicate-charge checks: our legitimate interest in keeping the Service and our customers safe.
- First-party usage statistics to understand and improve the Service: our legitimate interest in operating and improving a small product, using events that contain no document content.
- Support and handling requests, disputes, and legal claims: to perform our contract and our legitimate interest in resolving issues.
6.AI processing
GoHighr uses third-party artificial intelligence and machine-learning service providers to provide resume analysis, scoring, recommendations, and generation. Relevant portions of your resume, supporting documents, job description, and related content, such as your skill confirmations, may be transmitted to these providers for processing. The providers and underlying models used by GoHighr may change over time based on quality, availability, performance, reliability, security, and cost.
We choose providers with their security and data-protection terms in mind and send only what is needed for each step. Providers process this content under their applicable terms, which may include keeping data for a limited time for purposes such as abuse monitoring. GoHighr does not use your documents to train its own AI models.
7.Automated decision-making
GoHighr analyzes and scores your resume for you. The Role Match Score, the ATS Readiness Score, and the findings are informational tools to support your own decisions about your application.
GoHighr does not hire or reject candidates, does not make decisions on behalf of employers, does not share scores with employers, and cannot determine how an applicant tracking system will treat your resume. No decision producing legal or similarly significant effects on you is made by GoHighr through automated processing.
9.International transfers
Some of our service providers, including AI service providers, may process data outside your country and outside the European Economic Area, including in countries that the European Commission has not recognized as providing an adequate level of data protection. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses or other legal transfer mechanisms. You can contact privacy@gohighr.app for more information.
10.How long we keep data
We keep your documents only for as long as they are useful for your job. Deletion is automatic: a cleanup process runs several times a day and deletes expired files and content, so data is removed shortly after its retention period ends. Legitimate technical or legal exceptions, for example data we must keep to handle an ongoing dispute, are kept only as long as necessary.
Uploaded resume and supporting documents
Deleted 30 days after the job was last updated
Unpaid guest scans are deleted sooner, once their 24-hour access window has ended.
Generated PDF, DOCX, and LaTeX files
Deleted 30 days after the job was last updated
For a purchased job, the last update is normally when your resume was generated. Paid guest access ends at the latest 30 days after payment.
Job description, scan findings, generated resume content, skill confirmations, and uploaded file names
Deleted at the same time as the files
These are cleared from our database together with the files, so the job no longer contains your document content.
Minimal job record
Kept while your account exists, or as long as needed for the purposes below
Job ID, dates, status, the two scores, and how the job was paid for. It contains no document content and keeps your dashboard history, billing records, and fraud and duplicate-charge checks consistent.
Orders and payment records
Kept for the period required by tax and accounting law
Plan, amount, currency, status, payment reference, dates, and your checkout acknowledgment.
Account
Kept until you ask us to delete it
Your account identifier, email address, and credit balance.
Usage events and technical logs
Kept only as long as needed for security, troubleshooting, and product statistics
These never contain document content.
“Last updated” means the last time the job changed: when it was scanned, paid for or unlocked with a credit, or when your resume was generated. Viewing or downloading files does not extend the period. After deletion, a job appears in your dashboard without its files, and its documents can no longer be viewed, downloaded, or regenerated.
11.Backups
Where our systems are backed up, deleted information may remain in those backups for a limited period until they are overwritten. We do not restore deleted documents from backups for normal use of the Service.
12.Your rights
Under data-protection law, including the GDPR, you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate or incomplete data;
- erasure of your data, where the law allows;
- restriction of processing in certain circumstances;
- data portability: receive data you provided in a structured, machine-readable format;
- object to processing based on our legitimate interests; and
- withdraw consent at any time where we rely on consent, without affecting processing that took place before.
To exercise any of these rights, email privacy@gohighr.app. We will respond within one month, which may be extended where the law allows. We may ask for information to confirm your identity, for example that you write from your account's email address or, for a guest job, that you can open the job's link in your browser. You do not need to send us your resume to make a request.
13.Deleting your data
Your documents and generated files are deleted automatically as described above. You can also ask us to delete a specific job or your whole account earlier by emailing privacy@gohighr.app with the job link or ID, or from the email address linked to your account.
When we delete an account, we delete your account and job content. We keep order and payment records for as long as tax and accounting law requires, and the minimal records needed to prevent duplicate charges and fraud. Unused credits cannot be restored once an account is deleted.
14.Complaints
If you have a concern, please contact us first so we can try to help. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU country where you live or work or where an alleged infringement occurred. In Greece, this is the Hellenic Data Protection Authority (www.dpa.gr).
16.Security
We use technical and organizational measures appropriate to the data we handle, including encrypted connections, private file storage that is never publicly accessible, authorization checks on every download, hashed guest access tokens, and logs that exclude document content. No system is completely secure, and we cannot guarantee absolute security. If a breach affecting your data occurs, we will act and notify you and the authorities where the law requires.
17.Age requirement
GoHighr is only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has used the Service, contact privacy@gohighr.app and we will delete their data.
18.Changes to this policy
We may update this policy when the Service, our providers, or the law change. The date at the top of this page shows the latest version. Where a change is significant, we will highlight it on the website.
19.Contact
Privacy questions and data-rights requests: privacy@gohighr.app. Other questions: support@gohighr.app.