Encrypted when sent and stored
Your connection and stored data are encrypted, with extra protection for selected sensitive information.
Data security and privacy
Protect your practice. Keep client data secure.
Your data is encrypted when sent and stored, and access is checked before anyone can view protected records. Your content is not used to train AI models through our providers’ business services by default. Clients also control what they share with their coach.
The 30-second answer
Protection first. Control over sharing, too.
Access checked before sharing
Coaches can access only their connected clients and the information those clients share with them.
Your content is not AI training material
Our AI providers’ business-service terms do not use your content to train models by default. Requests may be kept briefly to detect misuse.
You control your sharing
Clients can change what they share. Private coach notes stay separate, and account owners can download their data.
How the system protects data
How we protect your information.
Your connection is encrypted to protect information as it travels between your browser and HiringCoachAI.
Google Cloud encrypts stored data. We add another layer of encryption to selected sensitive information.
The system blocks access unless a person has permission. Protected coaching records require sign-in and access checks.
We check who is signed in, which client they are connected to, and what that client has shared.
Error reports limit personal information and remove common sign-in secrets before they are sent to our monitoring service.
The Trust Center publishes documented controls, policies, providers, limitations, and reporting paths.
Who can see what
You choose what your connected coach can see.
Before showing protected data, HiringCoachAI checks who is signed in and whether they are connected to that client. Turning off a sharing category removes the coach’s access to it.
The client
Manages their account and chooses which types of career information to share.
The relationship
Connects a specific client and coach and records what the client has agreed to share.
The coach
Sees the shared workspace and only the career categories the relationship allows.
Core coaching workspaceGoals, assignments, sessions, intake, and shared coaching activity
- Applications
- Career profile
- Networking
- Interview preparation
- Writing
Sharing starts on for the supported categories in existing and default connections. Clients can change all six sharing choices after accepting, including access to the coaching workspace.
Private notes and context
What a coach writes about a client, and where it can go.
Whenever notes or client details are opened or saved, we check that the signed-in coach has access to that client.
Clients cannot open private coach notes or private client details in the app. These are kept separate from shared activity.
Private notes are not included in emails, notifications, or the client’s data download. Coaches can download their own notes before ending a coaching relationship.
Private client details have the same access checks as notes and are left out of the client’s download. A saved detail may appear in a reminder the coach sends to themselves, but not to the client.
Coaches can keep full written notes or choose a simpler mode with short, organized details.
When coaching ends, the coach can download their notes, then delete them now, set a deletion date, or keep them.
Your data over time
Safety also means knowing what happens at the end.
- 1
Connect
A client accepts a coaching connection and reviews the available sharing choices.
- 2
Work
Coach and client work together using shared records. Private coach notes stay separate.
- 3
Export
After signing in, you can download your account data. Coaches can download their notes before ending a coaching relationship.
- 4
Close or delete
You can end a coaching connection, stop sharing, choose how long to keep notes, or delete your account.
Deleting an account removes its data from the app. Some billing, security, contract, and legal records must be kept longer, and backup copies take time to expire.
When another service is involved
Know what information each service receives.
Only for a feature that needs it
AI features send the information needed to help with your request. Session AI can include private coach notes; a transcript is included only after the coach confirms client consent. Your content is not used to train AI models by default under our providers’ business-service terms. Providers may keep requests for a limited time to detect misuse.
See how AI uses informationStripe handles sensitive payment details
Stripe collects card numbers and the banking, identity, and tax details needed to pay coaches. HiringCoachAI keeps payment records such as amounts, fees, payment status, and refunds.
Open payments helpOne marked folder, not the whole Drive
HiringCoachAI uses one clearly marked folder. Its file-management service can access that folder and its contents, without access to the rest of your Drive.
See service providersMore about your data
Clear information, whenever you need it.
- Security documentation. Our Trust Center explains our safeguards and our providers’ certifications.
- AI requests. Providers may keep requests for a limited time to detect misuse. This is separate from training models.
- Account deletion. Some records must be kept for legal or financial reasons, and backup copies take time to expire.
- Career coaching only. Do not use this service to store medical records or protected health information.
Questions coaches hear
Clear answers you can explain to a client.
Yes. HTTPS protects data while it moves between the browser and HiringCoachAI. Google Cloud encrypts stored data, and selected sensitive fields receive another layer of encryption before storage. HiringCoachAI does not describe the service as end-to-end encrypted.
HiringCoachAI uses email sign-in links or selected sign-in providers. A second security check through an authenticator app is available when the Account Security screen shows that it is enabled.
HiringCoachAI uses its providers' business APIs. Their standard terms say API data is not used to train models by default. HiringCoachAI does not have special zero-retention agreements, so a provider may keep a request for a limited time to detect abuse under its standard terms.
The client and the coach connected to that specific relationship can access the shared workspace within their roles and permissions. Authorized HiringCoachAI personnel or providers may access limited data when needed for support, security, fraud, legal, or policy work.
Existing and default coach relationships begin with the supported content categories shared. During scoped acceptance, the core workspace starts on. After acceptance, the client can change any of the six categories, including workspace access.
No. Coach-private notes and private context are separated from shared records and are intentionally excluded from the client's account export. The coach can use the relationship close-out export before choosing a retention action.
Yes. When a coach starts Session AI, the request can include session content and private coach notes so the model can draft the requested output. A transcript is included only when the coach confirms client consent. This does not make the notes visible to the client.
HiringCoachAI is based in the United States and stores data in the US by default. Connected providers may process data under their own documented locations and transfer safeguards.
A signed-in user can download a broad snapshot of their account data. Passwords and similar secrets are removed, and the user may need to sign in again or complete a second security check. Some restricted legal or signed-out transaction records require an identity-verified request to [email protected].
Yes. Self-service deletion requires recent reauthentication and typed confirmation. It removes the account from active product systems, while limited billing, audit, contract, legal, and backup-window records may remain under the published retention policy.
HiringCoachAI follows a documented process to investigate, contain affected access or services where possible, address the cause, restore service, and monitor for recurrence. Notifications are made when required by law or contract. Major service updates can appear on the status page, and a public-safe summary may be added to the Trust Center when appropriate.
No. HiringCoachAI does not currently claim its own SOC 2 attestation or a recent independent penetration test. Some infrastructure providers have their own attestations. Those vendor controls do not make HiringCoachAI itself SOC 2 certified.
Email [email protected] for a vulnerability or security concern. Email [email protected] for a privacy or data-rights request. Do not include sensitive client content in the first message unless the support team asks for a secure follow-up.
A client asks a question you cannot answer?
Do not guess. Bring it to us.
Security concerns go to [email protected]. Privacy and data-rights questions go to [email protected].