Hiraxia
Terms of Use & Privacy Policy
Last updated: August 2026
Hiraxia ("we," "our," "the app") is an AI-powered job search assistant for job seekers, with a focus on Lebanon and the wider MENA region. This page explains what information Hiraxia collects, how it's used, and the choices you have — including specific detail on how Hiraxia uses Google account access, since that's held to a higher standard than most of what's below.
1. What Hiraxia does
Hiraxia helps you search for real, current job listings, evaluates how well your CV matches a given posting, drafts application messages, and — if you choose to connect your Gmail account — helps you send those applications with your CV attached, entirely under your review and control.
2. Information we collect
If you create an account
- Email address and, optionally, your name
- A securely hashed password (if you sign up manually) — we never store your actual password, and we cannot see it
- Your CV text, your recent search history, and your logged applications — saved so they follow you across devices
If you sign in with Google
- Your name, email address, and profile picture, as provided by Google — used only to create and identify your Hiraxia account
If you use the app without an account
- Your CV text and search history are kept only in your browser's local storage, on your own device. We never see or receive this data.
3. Gmail access — exactly what it does and doesn't do
If you choose to tap "Connect Gmail" in Hiraxia's settings, you'll be sent to Google's own consent screen, where Google — not Hiraxia — asks you to approve a specific, limited permission: gmail.send.
What this permission allows: when you review a specific job's application and tap "Approve," Hiraxia sends that email directly from your Gmail account — addressed to the recruiter, with your CV attached and the message you've reviewed. This happens immediately upon your approval; there is no separate manual "send" step in Gmail afterward.
What this permission does NOT allow:
- Hiraxia cannot read any of your existing emails, contacts, calendar, or any other Google data — gmail.send is a write-only permission
- Hiraxia never sends anything without you personally reviewing the recipient, subject, message, and attachment and tapping Approve for that specific job first
- Hiraxia's own servers never see, store, or transmit the contents of the email, your CV attachment, or your Gmail access token — this entire process happens directly in your browser, between you and Google. Hiraxia's backend is never in that path.
You can revoke this access at any time from your Google Account's Security & permissions page, or by disconnecting inside Hiraxia's settings.
4. How we use your information
- To match your CV against live job listings and rank results
- To draft application messages and, if you choose to connect Gmail, send them on your explicit per-job approval
- To save your progress (CV, searches, applications) so it's there when you come back or switch devices, if you have an account
- To send a one-time email verification code if you sign up manually with an email and password
We do not sell your data. We do not use your CV or job search activity for advertising. We do not share your data with employers or third parties without your explicit action (for example, when you personally approve and send an application).
5. Data storage and security
Account data is stored on MongoDB Atlas, a managed database provider, and access to it is protected by authentication. Passwords are hashed and never stored in plain text. Session tokens expire automatically. You can permanently delete your account and all associated data at any time from the account menu inside the app — this is immediate and cannot be undone.
6. Third-party services Hiraxia relies on
- Google — for Sign-In and, optionally, sending your approved application emails via Gmail
- MongoDB Atlas — for account and application data storage
- Resend — for sending the one-time email verification code during manual signup
- Various public job listing sources (job boards and aggregator APIs) — queried to find live job postings; no personal data is sent to these sources beyond your search terms
- OpenAI — used to discover additional job listings via web search, and to research a company's publicly available contact information to find a real application email
- Serper — a search API used across several job-discovery and research features
- Prospeo, Gamalogic, and other public lookup/verification services — used to find or verify a company's publicly available application email address
None of the above AI/ML or lookup services ever receive any Gmail, Google Workspace, or Google Photos user data — Hiraxia's Google integration is write-only (see section 3) and has no read access to any Google account data to begin with. The only personal document these services may help process is your own CV, which you uploaded directly to Hiraxia yourself.
Limited Use compliance: The use of raw or derived user data received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Your choices
- You can use Hiraxia without ever creating an account
- You can disconnect Gmail access at any time
- You can download a copy of your saved data from the account menu
- You can permanently delete your account and all data from the account menu
8. Contact
Questions about this policy or your data can be sent to contact@hiraxia.com.
9. Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page.