Your privacy is a promise.
AptiCore is built on transparency. This policy explains exactly how your data is collected, processed, and protected — no fine print, no surprises.
Last updated — April 15, 2026
Three principles that protect your data
PII Removal Before Analysis
Names, emails, phone numbers, addresses, and institution names are stripped before any AI scoring occurs. Candidates become anonymous identifiers like "Candidate Alpha-1."
No Training on Your Data
Your resume data is never used to train or fine-tune any AI models. It is processed in real-time and used solely to generate your batch results.
Temporary Processing
AI processing is performed in-memory during pipeline execution. Raw resume text is not persisted after structured data extraction is complete.
The details, plainly stated
Information We Collect
Account Information
When you create an account, we collect the information you provide, including:
- Email address
- Display name
- Authentication credentials (managed securely by Firebase Authentication)
- Google profile information (if you sign in with Google)
Hiring Batch Data
When you create a hiring batch, we process:
- Job descriptions you provide
- Resume files uploaded by you (PDF, DOCX, or TXT format)
- Structured data extracted from resumes (skills, experience, education)
Automatically Collected Data
We may automatically collect:
- IP address (used for rate limiting and security, not stored long-term)
- Browser type and device information
- Usage patterns and feature interactions
How We Use Your Information
We use the collected information exclusively for:
- Providing our core service — parsing resumes, matching candidates, and generating bias reports
- Anonymizing candidate data — removing PII before AI evaluation
- Detecting and measuring bias — running dual-pipeline comparisons
- Authenticating and securing — verifying identity and preventing unauthorized access
- Improving the platform — understanding usage to enhance functionality
Data Storage & Security
Your data is stored using Google's Firebase infrastructure with enterprise-grade security:
- Firestore — Batch data and user profiles stored with owner-based access rules
- Cloud Storage — Resumes stored with strict file-type and 5MB size restrictions
- Firebase Authentication — Credentials managed by Google; we never store passwords
- Encryption — All data encrypted in transit (TLS) and at rest (AES-256) via Google Cloud
Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing. Data may only be shared in these limited cases:
- Google Cloud Services — Firebase and Gemini AI process your data, subject to Google's Privacy Policy
- Legal Requirements — If required by law, regulation, or legal process
- Safety — To protect the rights, property, or safety of AptiCore, our users, or the public
Your Rights
You have the right to:
- Access — View all data associated with your account through the dashboard
- Delete — Remove individual batches and all associated candidate data at any time
- Portability — Export your batch results and bias reports
- Account Deletion — Request complete deletion of your account and all data
- Withdraw Consent — Stop using the platform; no further data will be collected
Cookies & Tracking
AptiCore uses minimal cookies strictly necessary for functionality:
- Authentication cookies — Managed by Firebase to maintain your login session
- No advertising cookies — We do not use any advertising or tracking cookies
- No third-party trackers — We do not embed third-party analytics scripts
Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Account data — Retained until you delete your account
- Batch data — Retained until you explicitly delete the batch
- Uploaded resumes — Stored until the associated batch is deleted
- Rate limiting data — Held in memory only, never persisted to disk
Children's Privacy
AptiCore is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.
We're here to help
If you have any questions about this Privacy Policy or how AptiCore handles your data, please reach out to us. Transparency is one of our core values — we'll always give you a straight answer.
AptiCore is open-source under the MIT License. You can review all data handling and processing logic on GitHub.
