Privacy Policy
Last updated: May 25, 2026
Nexahire ("we", "us", or "our") operates the website at nexahire.co and the Nexahire Chrome Extension. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.
By using Nexahire you agree to this policy. If you do not agree, please discontinue use.
1. Information We Collect
1.1 Profile data (Chrome Extension — stored locally)
When you use the Nexahire Chrome Extension, the following information is stored exclusively on your deviceusing Chrome's local storage (chrome.storage.local). It is never uploaded to our servers except as described in Section 1.2:
- Full name, email address, phone number, and location
- Current job title and company
- LinkedIn, GitHub, and portfolio URLs
- Professional summary, skills list, and resume text
- Work authorization status
- Application history (jobs applied to, dates, statuses)
1.2 Data sent to our servers during application generation
When you click "Generate Application", the extension sends your profile data and the job listing details to our server at nexahire.co/api/generate-application so we can generate a tailored cover letter and application on your behalf. This data is transmitted securely over HTTPS and is not stored on our servers after the response is returned.
1.3 IP address (rate limiting)
To prevent abuse, we temporarily record your IP address in a rate-limiting cache (Upstash Redis) with a 24-hour retention window. We track only a request count per IP — no other data is stored. This information is automatically deleted after 24 hours and is never shared with third parties.
1.4 Contact form
If you contact us via the form on nexahire.co, we collect your name, email address, and message. This is used solely to respond to your inquiry and is processed via Resend (our email delivery provider).
1.5 Information we do NOT collect
- Passwords or financial information of any kind
- Browser history or activity outside supported job platforms
- Any data from tabs not matching the supported job listing URLs
- Cookies, tracking pixels, or advertising identifiers
2. How We Use Your Information
- Application generation:Your profile and job data are passed to Google's Gemini AI to generate tailored cover letters and form answers.
- Abuse prevention: IP addresses are used only to enforce the daily request rate limit (25 requests per day).
- Customer support: Contact form submissions are used to respond to your messages.
- Service improvement: Aggregate, anonymous usage metrics (e.g., number of applications generated) may be used to improve Nexahire. No personally identifiable information is included.
3. Third-Party Services
We use the following third-party services. Each is governed by its own privacy policy:
Google Gemini API
AI generation of cover letters and application content
Your profile and job data are sent to Gemini for processing. Google's data usage policies apply.
Upstash Redis
Rate limiting (IP-based request counting)
Only a hashed request count is stored per IP. No personal data is retained beyond 24 hours.
Resend
Contact form email delivery
Used only to deliver messages submitted via the contact form.
Vercel
Website hosting and serverless functions
Our infrastructure provider. Standard hosting logs (request timestamps, IP) may be retained per Vercel's policy.
4. Data Retention
- Local extension data: Stored indefinitely on your device until you uninstall the extension or clear it manually via the extension settings.
- Application generation requests: Not stored on our servers. Processed in memory and discarded immediately after the response.
- Rate-limit records (IP): Automatically deleted after 24 hours.
- Contact form messages: Retained for up to 12 months for customer support purposes, then deleted.
5. Data Security
All data in transit is encrypted via HTTPS/TLS. Profile data is stored locally on your device and is subject to Chrome's security model. We do not operate a user account database and therefore do not store credentials or payment information.
While we take reasonable precautions, no internet transmission is 100% secure. Use the extension on trusted devices.
6. Your Rights
You have the right to:
- Access: Request a copy of any personal data we hold about you.
- Delete: Request deletion of any personal data we hold (contact form data). Extension data can be deleted by you directly at any time from the extension.
- Correct: Request correction of inaccurate personal data.
- Opt out: Stop using the extension at any time. Uninstalling removes all locally stored data.
To exercise these rights, email us at privacy@nexahire.co. We will respond within 30 days.
7. Children's Privacy
Nexahire is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Nexahire after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: