Privacy Policy

HyredFast is operated by Arpit Abhyankar, sole proprietor, trading as Webease Tech, registered at Vardhman Nagar A, Ajmer Road, Jaipur, Rajasthan 302019, India. For the data you give us about yourself, we are the data fiduciary. Write to contact@webease.tech with any question or request in this policy.

HyredFast sends your emails through your own Gmail. You connect it with Google, and we ask for one permission: send email on your behalf, plus your email address so we know which mailbox it is. That permission cannot read, change or delete any of your mail.

• We use it only to send the emails you write or schedule in the product (your campaigns and your Inbox replies), and to send you a note in your own Gmail when one of your contacts replies.
• We store the access Google grants us, encrypted at rest with AES-256-GCM. It is decrypted only in memory, at the moment an email is sent, and is never shown back to you, logged or included in error reports.
• You can withdraw it at any time: remove the mailbox in Settings, or remove HyredFast from the third-party apps in your Google Account. Sending from that mailbox stops at once.

HyredFast's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, do not sell it, do not use it to train AI models, and do not let anyone read it except where you ask us to, for security, or as the law requires.

So that replies reach you in HyredFast, the emails you send carry a reply address on our domain, mail.hyredfast.com, unless you turn on full tracking (below). Every email you send also includes a hidden copy to that domain, which is how we learn the identifier Gmail gives it, so a reply can be matched to the right conversation.

• We store the replies to your emails, with their attachments, so the conversation is visible in your Inbox.
• The hidden copy is used only to read that identifier, and is deleted once it has been read.

Full tracking is optional. If you turn it on with an app password, we periodically read your inbox to match replies and bounces against the emails you sent through HyredFast. That is what stops a sequence chasing someone who already answered. The app password only reads; it is never used to send.

• We look at messages that arrive after full tracking was turned on, and match them to emails you sent.
• We store the message identifier and the reply content for the emails we matched, so the conversation is visible in the app.
• We do not read, index or store your unrelated mail, and we do not use anything found there for any other purpose.
• The app password is encrypted at rest like the access above, and you can revoke it from your Google Account at any time. Removing the mailbox deletes it.

Adding a resume is optional, and nothing else in the product depends on it. If you add one, we store the file so you can use it inside the product. It is held in our own storage, on your account. We do not send it to the people you contact, we do not share it with other users, and we do not use it to train models.

Deleting your account deletes the file along with everything else on it.

You can view, replace or remove it at any time under Settings, Job preferences. Removing it deletes the file.

The free cover letter page works without an account. What you type there stays in your browser until you create an account to download it, at which point the letter is saved to your account.

• A signature image you upload is stored in our own storage straight away, so the preview can show it. If no saved letter uses it, it is deleted after 30 days.
• Signing out clears the draft from the browser.
• Deleting a letter deletes it. Deleting your account deletes every letter and signature image on it.

For the people you contact, the roles are the other way round from the rest of this policy. You are the controllerof their data, the data fiduciary under India's DPDP Act, and HyredFast is your processor. You decide who is contacted and what is said; we hold that data because you put it here and act only on your instructions.

In practice we store the names, addresses and details you provide, send what you ask us to send, and record whether a message was delivered, opened where you enabled it, replied to or bounced. It also means a request from one of your contacts is yours to answer, and the two tools below are how you carry it out.

We do not sell contact data, do not build a shared contact database across accounts, and do not use one user's contacts for another.

If a recipient unsubscribes, we record it against your account and block further sending to that address from any of your campaigns. That suppression is specific to you as the sender; it does not affect any other user of HyredFast.

If someone asks you to delete their data, erase them under Settings, Account. That deletes every lead, message, reply, unsent sheet row, revealed contact and CRM card you hold for the address, across all your campaigns, and adds it to your block list so no campaign writes to them again. Emails already sent cannot be recalled from their inbox or yours, and anything saved in your own Hunter.io account has to be deleted there.

Finding contacts and checking addresses run on keys you supply, and neither happens unless you connect one. When you search, we send the company's domain and the filters you picked to Hunter.io. When you check an address, we send that one address to MillionVerifier. Nothing else about you, your campaigns or your other contacts goes with either request, and because the key is yours, so is the account those searches are billed to.

We keep a record of every address you reveal, which is what stops revealing the same person twice costing you a second credit. That record deliberately outlives the lead, the campaign and the sheet it came from. You can read and delete it under Settings, Integrations, on the page for the provider it came from, and deleting your account deletes it with everything else.

Syncing from Hunter.iocopies contacts the other way. If you reveal someone in Hunter's own dashboard rather than here, pressing Sync on the Hunter page brings those contacts into your account, so the app can see what you have already paid Hunter for. The copy is held under your account alone, on the same terms as everything else here: it is never pooled with another user's, you can delete any of it under Settings, Integrations, and deleting your account deletes all of it. The two sides are separate after that, so deleting a contact here does not delete it in Hunter.io, and deleting it in Hunter.io does not remove the copy here.

• Account details: name, email address, avatar and time zone from Google sign-in.
• Onboarding answers: the roles you want, your experience level, location preferences and search status.
• Your campaigns, email templates and sending schedule.
• Billing records: what you bought and when. Card details are handled by Razorpay and never reach us.
• Product usage: which features are used and where people get stuck, so we can fix the parts that do not work.

Campaigns do not track opens by default. If you enable it, a small invisible image is added to your emails and we record when it loads. You can turn it off per campaign at any time. We recommend leaving it off: it can affect deliverability, and modern mail clients pre-load images, so the numbers are unreliable anyway.

These are every company outside Webease Tech that handles data on our behalf. Each one only receives what it needs for its purpose.

Error reports and analytics are scrubbed before they leave: passwords and access tokens are removed, and email addresses are masked.

• We do not sell your data, or your contacts' data, to anyone.
• We do not record your screen. There is no session replay, deliberately, because the mailbox form contains password fields.
• We do not send marketing to the people in your contact list. Only you write to them.
• We do not use your emails or contacts to train AI models.

• Account and campaign data: while your account is open.
• Your resume: while your account is open. Deleting the account deletes the file.
• Cover letters: while your account is open. A signature image that no saved letter uses is deleted after 30 days.
• Revealed and synced contacts: until you delete them, so that revealing the same person again does not spend a second credit. Delete them at any time under Settings, Integrations.
• Unsubscribe and block records: kept while your account is open, including after you erase a contact, because forgetting that someone opted out would let them be contacted again. Deleting your account deletes them.
• Billing records: kept as long as tax and accounting law requires.

Under India's Digital Personal Data Protection Act, and equivalent law where it applies to you, you can ask us to:

• Show you the personal data we hold about you.
• Correct anything that is wrong.
• Delete your account and the data in it.
• Withdraw consent, which for most of this means closing your account.
• Nominate someone to exercise these rights if you are unable to.

Email contact@webease.tech and we will respond within 30 days. If you are not satisfied with how we handle it, you can complain to the Data Protection Board of India.

Gmail access and app passwords are encrypted at rest. Traffic is encrypted in transit. Access to production systems is limited to the people who run the service. No system is perfectly secure, and if a breach affects your data we will tell you and the relevant authority as the law requires.

HyredFast is not for anyone under 18, and we do not knowingly collect data from children.

If we change this policy in a way that materially affects you, we will email you before it takes effect.