Privacy Policy

Overview

Verif_Hire ("we," "our," or "the Service") is a Chrome extension and accompanying website (verif-hire.com) that helps recruiters and hiring teams verify candidate-provided contact information. This Privacy Policy explains what data we collect, how we use it, and your rights. It covers both the extension and the website.

Data We Collect (Extension)

Data you provide manually

When you use Verif_Hire to verify a candidate, you may input a candidate's name, phone number, and email address into the extension. You may also upload a candidate's resume (PDF or DOCX) to auto-fill these fields. Resume files are parsed entirely within your browser - they are never uploaded to, transmitted to, or stored on our servers. Only the extracted contact details (name, phone, email) are used to populate the verification form.

Data read from the active tab (Auto-fill from page)

If you click the "Auto-fill from page" button while viewing a candidate record in an applicant tracking system (ATS) such as Workday, Greenhouse, Lever, or a careers portal, Verif_Hire uses the activeTab and scripting Chrome permissions to run a one-time script in the active tab that reads the candidate's name, email, and phone number from the page. This action is initiated only by you, only on the tab you are currently viewing, and only when you explicitly click the auto-fill button. We do not read page content in the background, on tabs you are not viewing, or without your explicit click. The extracted name, email, and phone are placed into the verification form on your device; no other page content (HTML, cookies, browsing history, screenshots, keystrokes) is read, transmitted, or stored.

Extension storage

Verif_Hire uses chrome.storage.local on your device to store the following, and only the following:

• Your work email address (used to register your free install)
• Your current plan tier (Free, Starter, Pro, Teams, or admin-issued) and verifications remaining in the current refill period
• Your license key after activation
• A locally generated device identifier for license binding
• Cached license validation status for offline use

No candidate data is ever written to local storage.

License and billing data

When you purchase a Verif_Hire paid plan (Starter, Pro, or Teams), payment is processed by Stripe. We receive your email address, the plan you purchased, and the resulting subscription status from Stripe so we can issue and maintain your license key. We do not receive or store credit card numbers, bank account details, or other payment instrument data. Stripe's handling of payment data is governed by Stripe's Privacy Policy.

Server-side data

Our license management server (hosted on Cloudflare Workers) stores: your license key, associated email address, device identifier(s), plan tier, credits remaining, trial expiry date, Stripe customer and subscription IDs, and a short usage history of verification counts. To prevent fraudulent duplicate trial signups, the server also stores: the IP address your /start-trial request originated from, and a hash of your browser's user agent, timezone, and language settings (together, a "device fingerprint hash"). This anti-abuse data is used solely to rate-limit new-trial signups; it is not shared with advertisers, not used for behavioral profiling, and not linked to any individual candidate record.

Data the Extension Does NOT Collect

• Browsing history
• Page content from tabs you have not explicitly invoked auto-fill on
• Candidate verification results or observations (these are rendered in-popup and discarded)
• Screenshots, keystrokes, or clipboard data
• Personally identifiable information of candidates beyond the duration of a single API request
• Telemetry, usage analytics, or tracking from inside the extension popup

How Verification Works

When you click "Verify," the extension sends the candidate's information to our server, which forwards it to an FCRA-compliant infrastructure data provider for real-time verification. The email domain is also checked client-side against a known list of high-risk email providers. These requests are transient - data is processed in-flight and not persisted by our infrastructure. Results are rendered locally in the extension popup and are not transmitted to or stored on our servers.

Third-Party Data Sources and Subprocessors

All verification data used by Verif_Hire is provided by FCRA-compliant sources. Verif_Hire packages and presents this data in a format designed for recruiting workflows, but does not originate, generate, or editorially alter the underlying data. Our subprocessors are:

• Infrastructure data provider - FCRA-compliant metadata lookup (data is not retained beyond request processing)
• Stripe - payment processing and subscription management
• Cloudflare - server infrastructure and license key storage
• Resend - transactional email delivery (license keys, receipts)
• Netlify - hosting for the verif-hire.com marketing website

Data Retention

Candidate data submitted for verification is not stored after the API response is returned. No candidate names, phone numbers, email addresses, or verification results are ever written to a database or retained on our servers. License and subscription data is retained for the duration of an active subscription and deleted within 30 days of cancellation. Install registration records (work email + verification count) are retained for up to 12 months for anti-abuse purposes, then deleted.

Website Analytics and Cookies

The verif-hire.com website (separate from the extension itself) uses Google Tag Manager and Google Analytics to measure aggregate site traffic and improve the marketing site. These tools set first-party cookies in your browser when you visit our website and may collect IP address, user agent, referrer, and pages viewed. This collection applies only to visits to the verif-hire.com website and does not occur inside the extension popup or as a result of any extension activity. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by enabling Do Not Track / similar privacy controls in your browser.

Security

All communication between the Verif_Hire extension and our backend is transmitted over HTTPS (TLS 1.2+). License keys and subscription records are stored in Cloudflare KV with access restricted to the Verif_Hire Worker via Cloudflare's account-level access controls. API keys for third-party services (Stripe, Resend, the verification data provider) are stored as Cloudflare Worker secrets and are never exposed to the extension client. We follow industry-standard practices to protect against unauthorized access, but no method of electronic transmission or storage is 100% secure.

International Data Transfers

Verif_Hire is operated from the United States. If you access the Service from outside the United States, you understand that information you provide may be processed and stored in the United States and other jurisdictions where our subprocessors operate. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) for international data transfers.

Your Rights (GDPR, CCPA/CPRA, and Similar Laws)

Depending on where you reside, you may have the following rights regarding personal data we hold about you:

• Access - request a copy of the personal data we hold about you
• Correction - request that inaccurate or incomplete data be corrected
• Deletion - request that we delete your personal data
• Portability - request a copy of your data in a structured, machine-readable format
• Objection / restriction - object to or restrict certain processing activities
• Withdrawal of consent - withdraw consent at any time where processing is based on consent
• Non-discrimination - we will not discriminate against you for exercising any of these rights

To exercise any of these rights, email admin@verif-hire.com. We will respond within 30 days. If you uninstall the extension, all locally stored data (verification count, license key, device ID) is automatically removed by Chrome.

For California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined under the CCPA/CPRA. The categories of personal information we collect are described above under "Data We Collect."

Children's Privacy

Verif_Hire is designed for professional use by recruiters and hiring teams. We do not knowingly collect data from individuals under 16 years of age. If you believe we have collected data from a minor, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date and, where appropriate, communicated via email to active subscribers. Continued use of the Service after changes constitutes acceptance of the revised policy.