Privacy Policy

This policy applies to visitors, account holders, and customers who access or use the Service. If you upload a resume or provide a GitHub username for analysis, you should only do so if you have a lawful basis to share that information with us—for example, because you are evaluating a candidate as part of your hiring process or you are analyzing your own profile.

Depending on how you use Signal, we may collect:

• Account information: name and work email address when you create an account or sign in. We require a work email address and do not support personal or disposable email providers for signup, except where a domain has been explicitly allowlisted for testing.
• Authentication data: one-time passcodes, magic-link tokens, and related verification records needed to confirm your email address and maintain your session.
• Session and device information: session identifiers stored in cookies, IP address, browser type, and user agent string. We use this information to keep you signed in, secure the Service, and troubleshoot issues.
• Login history: records of sign-in and sign-up events, including the authentication method used, approximate network information, and timestamps.
• Resume and candidate data: PDF resumes you upload, information extracted from those resumes (such as name, work history, skills, and public profile links), GitHub usernames you provide, and analysis outputs generated from that material.
• Public online footprint data: publicly available information we retrieve to verify resume claims, such as GitHub profile metadata, repository activity, and other public sources referenced during analysis.
• Sales and support inquiries: if you request a bulk trial or contact us, we collect the details you submit (for example, name, company, email, expected resume volume, and message content).
• Technical logs: server logs, error reports, and operational metadata such as request timestamps, API route names, and file sizes. We do not intentionally log full resume contents in application logs.

We use the information we collect to:

• provide, operate, and improve the Service;
• authenticate users and protect accounts from unauthorized access;
• parse resumes, extract public profile links, and generate integrity and verification reports;
• communicate with you about authentication, product updates, support requests, and sales inquiries;
• monitor performance, debug failures, and maintain the security and reliability of our infrastructure;
• comply with law and enforce our terms and policies.

We do not use third-party advertising trackers on the Signal web application, and we do not sell your personal information.

When you upload a resume, the file is transmitted to our servers for processing. We use automated systems, including large language models, to extract structured information and compare resume claims against publicly available evidence.

Resume PDFs are processed to deliver your analysis and are not stored as permanent user files in our application database. Parsed outputs and analysis results are returned to your browser session. Any retention of reports on your side is under your control.

Because analysis relies on third-party AI providers, resume content may be transmitted to those providers solely to perform the requested processing, subject to their terms and our contractual safeguards where applicable.

We use essential cookies and similar technologies to maintain authenticated sessions and protect the Service. These cookies are required for core functionality such as keeping you signed in after email verification.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using authenticated features of the Service.

We may share information with:

• Service providers that help us run Signal, including hosting providers, database services, email delivery providers (such as Resend for authentication messages), and AI infrastructure providers (such as Google Gemini through our processing stack).
• Observability providers when operational tracing is enabled. In that case, we send technical metadata about processing jobs. Resume PDF content is not intentionally included in trace payloads—only metadata such as file size and request identifiers.
• Public data sources such as the GitHub API when you provide a username or when we retrieve public footprint data for verification.
• Professional advisors and authorities when required to comply with law, respond to lawful requests, protect our rights, or investigate fraud or security issues.
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality obligations.

We do not share your information with third parties for their independent marketing purposes.

We retain account, session, and login history information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Authentication tokens and verification codes are kept only for the period necessary to complete sign-in and then deleted or expired according to our security practices.

Resume files submitted for trial analysis are processed transiently and are not retained as standing records in our application database after processing completes, except where retention is required for security investigation or legal compliance.

Server logs are retained for a limited period appropriate for operations and security monitoring, then deleted or aggregated.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may process and store information in countries other than where you are located, including the United States, where our infrastructure and service providers may operate. When we transfer personal information internationally, we take steps designed to ensure an appropriate level of protection consistent with applicable law.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive a portable copy of information you provided to us.

You may update account details by signing in and contacting us if you need help. You may delete your account or request deletion of personal information by emailing us at hello@dodoxhq.com. We may retain limited information where required by law or for legitimate business purposes such as fraud prevention.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may also lodge a complaint with your local data protection authority.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion, subject to certain exceptions. We do not sell personal information.

Signal is a business hiring tool and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

DodoxHQ
Email: hello@dodoxhq.com