PLAIN-LANGUAGE PRIVACY NOTE · SEPTEMBER 26, 2026

A small page.
A small footprint.

This note describes the HireZero website, launch-update list, starter brief builder, and private website administration tools. It does not describe a future marketing-employee service.

Your starter brief

The brief builder runs in your browser. The website does not send the answers you type to a server or AI provider. It does not save them in cookies or local storage. Refreshing or leaving the page clears this page’s copy. Your browser may independently offer form recovery or autofill based on its own settings.

When you choose Download, your browser saves a text file to your device. When you choose Copy, the brief is placed on your device’s clipboard. Those copies remain under your control.

Launch-update requests

If you choose to sign up, we store your email address, signup time, consent wording version, and a one-way hash of a private removal token in a database on our exe.dev server. We use the address only for HireZero launch updates you requested. The signup service does not store your IP address. It does not send email yet, and no email delivery provider currently receives this list.

After signup, save your receipt: it contains a private link you can use to remove the entry at any time. Treat that link as private, since anyone with it can remove your signup. Opening the link does not delete anything until you press Remove. Records expire after 365 days. Duplicate signups keep the original record and removal link.

Any future email will include an unsubscribe option. We will update this note before connecting an email delivery provider. Signup addresses are currently unverified; the list is not an authenticated customer directory.

Visits to this website

The public site uses its own cookie-free page-view analytics, with no advertising pixels or third-party analytics service. It records the page path, time, referring hostname, and campaign tags. The server uses connection address and browser information to derive a daily visitor identifier; it does not store the raw address or browser string in the analytics table. Identifiers change daily. Records older than 90 days are removed as new visits are processed. The page script skips collection when Global Privacy Control is enabled. Its fonts, styles, and scripts are served with the website.

Website administration

Authorized administrators sign in to manage drafts and publication. Administrator records include a username, display name, role, a salted password hash, session records, and content revision history. The admin uses a secure, HttpOnly session cookie that expires after 14 days. The public landing page does not require an account. Google and Microsoft sign-in are optional and are not configured for this deployment.

AI employee keys, when an owner creates them, are stored as hashes and permit reading website content and analytics, saving drafts, and requesting review. A key cannot publish. No employee key is created by deployment.

Hosting

The page is hosted on exe.dev. The hosting service necessarily handles connection information, such as your IP address and requested pages, to deliver the site. Its handling of that information is covered by exe.dev’s privacy policy. Application access logging is disabled; the host may retain its own operational logs.

Future changes

If we connect an email delivery provider, enable third-party sign-in, or add a marketing-employee service, this note will need to be updated before those features are enabled.