Trust & Security

Hire Hub OS runs on the Lovable platform. Lovable provides the underlying hosting, managed database, authentication, storage, and serverless runtime. Hire Hub Consultants is responsible for application-level access rules, user provisioning, and the data entered into the platform by recruiters, candidates, and client companies.

Access requires an account. Email/password sign-in is provided by the managed auth service, with optional social sign-in. Sessions are issued as short-lived tokens and refreshed automatically; users can sign out from any device.

Roles (admin, super admin, team leader, recruiter, candidate, company) are stored server-side and enforced through row-level security policies on the database — not through client-side checks alone.

The platform stores the data needed to operate a recruitment workflow: user profiles, candidate records (including resumes and contact details submitted via referral or registration links), jobs, applications, interviews, placements, and related operational metadata. This data is used to deliver the recruitment service to Hire Hub Consultants and is not sold to third parties.

Tables that contain user, candidate, or company data have row-level security enabled. Policies scope reads and writes to the authenticated user, their team, or an authorized role. Privileged server functions verify the caller before performing elevated actions.

Resumes and other uploaded files are stored in the managed object storage layer. Uploads go through server endpoints that validate file type and size and associate the file with the correct candidate record.

Traffic to the application is served over HTTPS. Data at rest is stored on the managed Lovable Cloud backend, which encrypts database and storage volumes at the infrastructure layer.

The platform relies on the Lovable Cloud backend for database, authentication, storage, and serverless functions, and on the Lovable AI Gateway for AI-assisted features such as resume parsing. Additional integrations (for example email or calendar) are only active when the app owner connects them.

Operational records are retained while the account is active so recruiters can manage ongoing pipelines. Candidates and account holders can contact Hire Hub Consultants to request correction or deletion of their personal data; requests are handled by the app owner.

If you believe you have found a security vulnerability in Hire Hub OS, please contact Hire Hub Consultants directly so the team can investigate and respond. Please avoid testing that could affect the availability or integrity of production data.