Security at HypeUp

Your career data is sensitive. We treat it that way. Here is how we protect your information.

Encryption Everywhere

All data is encrypted in transit with TLS 1.2+ and at rest using AES-256. Your career data is protected at every layer.

Cloud Infrastructure

HypeUp runs on Google Cloud Platform with automatic security patches, DDoS protection, and infrastructure monitoring.

No Data Selling

We never sell your data. Your career information is used solely to provide the HypeUp service. Period.

Regular Security Reviews

We conduct regular security audits of our application code and infrastructure to identify and address vulnerabilities.

Access Controls

Internal access to customer data is strictly limited on a need-to-know basis with role-based permissions and audit logging.

Secure Authentication

Authentication is handled by FusionAuth with industry-standard protocols including bcrypt password hashing and JWT tokens.

AI Data Handling

When you generate a resume, your career data is sent to our AI providers (OpenAI and Anthropic) to create tailored content. This data is used exclusively for your resume generation request and is not stored by or used to train AI models.

We send only the data necessary for generation — your relevant job history, accomplishments, and the target role context. We do not send your account email, payment information, or other personal identifiers to AI providers.

Data Deletion

You can delete your account at any time from your account settings. When you do, all your data — job history, accomplishments, generated resumes, and account information — is permanently removed from our systems within 30 days.

You can also selectively delete individual jobs, accomplishments, or resumes at any time without deleting your entire account.

Questions?

If you have security concerns or want to report a vulnerability, contact us at security@gethypeup.com.