Privacy Policy

What we collect

• Your email address and whether you are a student or an employer. For students, your school comes from your email domain.
• Short lived sign in codes, and a session cookie that keeps you signed in for up to 30 days.
• Student profiles. Name, major, graduation year, headline, where you want to work, your answer to the fear question, skills, experience, education, projects and links.
• Resumes. Text you paste or the text we pull out of a PDF you upload (we keep the text, not the PDF file), your base resume, and every tailored resume, gap plan and interview prep we make for you.
• Swipes. Which jobs you like, pass on or super like, and when. For employers, which candidates you like or pass on, plus any optional reason you pick.
• Matches and messages. Match status, reply deadlines, status history, decline reasons and the messages in each thread.
• Employer details. Company name, website, description, industry, the schools you recruit at, your job posts and your verification status.
• Your email notification choices.
• Employer billing details. If an employer buys a plan or a Featured Job week, we keep the plan, its status, the Stripe customer and subscription ids and what was bought. Stripe collects and stores the card details. Heard Back never sees or stores card numbers.
• Basic technical data. Your IP address is used briefly in memory to limit abuse, and server logs can include your IP address and email.

How we use it

To run the job market at your school. That means showing jobs, building decks, making matches, tracking reply deadlines, showing company response scores and sending you sign in codes and notification emails.

We do not sell your data, and Heard Back has no ad trackers or analytics scripts.

How AI is used

When AI is turned on, Heard Back sends data to Anthropic's API so a Claude model can do the work. This includes your resume text and profile (which can include your name, contact email, school, experience and skills) along with the job details, so it can build your base resume, tailor it to jobs you like, write gap plans and prep you for interviews. When an employer imports a job posting, the posting text is sent the same way.

The AI is told to never invent experience, titles, dates or numbers. Always read your tailored resume before you rely on it.

If AI is turned off, Heard Back uses simple rules on our own server instead and nothing is sent to Anthropic.

Who sees what

• Employers only see students at schools they recruit at. They see your name, major, graduation year, headline, skills, school and your resume, including the contact details on it. If you liked their job they see the version tailored to it.
• If you pass on a job, you are left out of that job's candidate list.
• Students see job posts, company names and each company's response score.
• Anyone can see a school's Responsive Employers page. It shows company names and reply numbers only, never anything about students.
• When an employer passes on you with a reason, you see the reason but never the company. You only see the job title when enough candidates were reviewed for it to stay anonymous.
• After you match, both sides see the messages in that thread and the match status.
• Career center staff at your school can see totals and trends for the school, never your name or resume.
• Heard Back admins can see employer accounts so they can verify companies.

Services we rely on

• Our hosting provider ([hosting provider]) runs the server and stores the database.
• An email provider ([email provider]) delivers sign in codes and notifications.
• Anthropic processes the AI requests described above, when AI is on.
• Stripe processes employer payments on its own checkout and billing pages. Students never pay and never deal with Stripe.
• Google Fonts serves the font this site uses, so your browser connects to Google when the page loads.

Deleting your data

You can delete your account any time from your Profile page. That removes your account, profile, resumes, swipes, interview prep and sign in sessions right away.

Messages you already sent stay in the other person's thread and show as written by [deleted user]. Match records stay without your profile so company response scores stay accurate. Open matches are closed.

You can also ask us to delete your data by emailing [contact email]. Backup copies may take up to [backup retention period] to clear.

Contact

Questions or requests go to [contact email].