Security at HireBridgeJobs.com
Job hunting means sharing sensitive things: your resume, your location, sometimes your payment details. This page explains, in plain language, the measures we have in place to protect that information — and what you can do to keep your account safe.
Every page and request is served over HTTPS with TLS. That is the padlock you see next to the address bar: everything travelling between your device and us — sign-in details, applications, resumes — is encrypted so it cannot be read or altered in transit. Certificates are issued and renewed automatically, and insecure requests are redirected to the secure address.
Passwords are hashed by our authentication provider and are never stored in readable form — not even we can see them. You can also sign in with Google instead of a password. Sessions are token-based and can be ended at any time by signing out.
Access rules are enforced at the database level, not just in the app. A signed-in user can read and change only their own profile, applications, saved jobs, and offers. Employers can see applications submitted to jobs they own, and nothing else.
Resumes are kept in a private storage area that is not publicly browsable. They are opened through short-lived links generated on demand, and only for you and the employer whose job you applied to. Uploads are limited in size and file type.
Card payments are processed by Stripe. Card numbers are entered on Stripe's checkout and never pass through or get stored on our servers or database. We keep only the payment status and receipt reference needed to unlock what you paid for.
Public pages show only what needs to be public: job listings and company profiles. Personal contact details, billing records, and reviewer identities are not exposed on public pages or public data queries.
What the padlock does and does not mean
The padlock icon in your browser’s address bar confirms one specific thing: the connection to this site is encrypted and the security certificate matches our domain. It is not, on its own, a rating of how trustworthy a website is — any site can obtain a certificate. The protections that actually keep your information private are the storage, access, and payment measures described above.
How you can protect your account
- Use a unique, strong password, or sign in with Google.
- Sign out on shared or public computers.
- We will never email or message you asking for your password.
- Only ever enter card details on the Stripe checkout screen.
- Be cautious of any employer asking for payment, government ID, or bank details before a formal offer — report them to us.
Reporting a security concern
If you believe you have found a vulnerability, a suspicious job posting, or any misuse of personal data, email us at hello@hirebridgejobs.com with the details and steps to reproduce. Please give us a reasonable window to investigate and respond before disclosing an issue publicly. We appreciate responsible reports and will keep you updated on what we find.
This page describes our current security practices and is provided for information. It is not a certification, audit result, or guarantee, and practices may be updated as the platform evolves. No online service can promise absolute security.