Privacy Policy

HyredFast is operated by Arpit Abhyankar, sole proprietor, trading as Webease Tech, trading as Webease.tech, registered at Vardhman Nagar A, Ajmer Road, Jaipur, Rajasthan 302019, India. For the data you give us about yourself, we are the data fiduciary. Write to contact@webease.tech with any question or request in this policy.

To send as you, we store the SMTP and IMAP details you connect, including the password or app password.

• Passwords are encrypted at rest with AES-256-GCM. They are decrypted only in memory, at the moment a message is sent or your inbox is checked.
• They are never shown back to you, never logged, and never included in error reports.
• Use an app password rather than your main account password wherever your provider offers one. You can revoke it at any time without changing your own password.
• Disconnecting a mailbox deletes the stored credentials.

When you connect IMAP, we periodically read your inbox to match replies and bounces against the emails you sent through HyredFast. That is what stops a sequence chasing someone who already answered.

• We look at messages that arrive after the mailbox was connected, and match them to campaigns you are running.
• We store the message identifier and the reply content for the emails we matched, so the conversation is visible in the app.
• We do not read, index or store your unrelated mail, and we do not use anything found there for any other purpose.
• Turn it off by removing the IMAP details. Sending continues; reply detection stops.

If you upload a résumé during onboarding, we send it to OpenAI to extract structured details such as your skills, roles and experience. We keep those extracted fields. We do not keep the file. It is discarded once parsing finishes, which is what the onboarding screen tells you and what the code does.

You add contacts and we process them for you. For that data you are the controller and we act on your instructions: we store the names, addresses and details you provide, send what you ask us to send, and record whether a message was delivered, opened where you enabled it, replied to or bounced.

We do not sell contact data, do not build a shared contact database across accounts, and do not use one user's contacts for another.

If a recipient unsubscribes, we record it against your account and block further sending to that address from any of your campaigns. That suppression is specific to you as the sender; it does not affect any other user of HyredFast.

• Account details: name, email address, avatar and time zone from Google sign-in.
• Onboarding answers: the roles you want, your experience level, location preferences and search status.
• Your campaigns, email templates and sending schedule.
• Billing records: what you bought and when. Card details are handled by Razorpay and never reach us.
• Product usage: which features are used and where people get stuck, so we can fix the parts that do not work.

Campaigns do not track opens by default. If you enable it, a small invisible image is added to your emails and we record when it loads. You can turn it off per campaign at any time. We recommend leaving it off: it can affect deliverability, and modern mail clients pre-load images, so the numbers are unreliable anyway.

These are every company outside Webease.tech that handles data on our behalf. Each one only receives what it needs for its purpose.

Error reports and analytics are scrubbed before they leave: passwords and access tokens are removed, and email addresses are masked.

• We do not sell your data, or your contacts' data, to anyone.
• We do not record your screen. There is no session replay, deliberately, because the mailbox form contains password fields.
• We do not send marketing to the people in your contact list. Only you write to them.
• We do not use your emails or contacts to train AI models.

• Account and campaign data: while your account is open.
• Uploaded résumé files: discarded immediately after parsing.
• Unsubscribe records: kept after account deletion, because forgetting that someone opted out would let them be contacted again.
• Billing records: kept as long as tax and accounting law requires.

Under India's Digital Personal Data Protection Act, and equivalent law where it applies to you, you can ask us to:

• Show you the personal data we hold about you.
• Correct anything that is wrong.
• Delete your account and the data in it.
• Withdraw consent, which for most of this means closing your account.
• Nominate someone to exercise these rights if you are unable to.

Email contact@webease.tech and we will respond within 30 days. If you are not satisfied with how we handle it, you can complain to the Data Protection Board of India.

Mailbox passwords are encrypted at rest. Traffic is encrypted in transit. Access to production systems is limited to the people who run the service. No system is perfectly secure, and if a breach affects your data we will tell you and the relevant authority as the law requires.

HyredFast is not for anyone under 18, and we do not knowingly collect data from children.

If we change this policy in a way that materially affects you, we will email you before it takes effect.