Security & Privacy Practices
At Pinhire, candidate privacy and platform integrity are core design requirements.
Optional Anonymous Applying
Candidates can apply directly to companies via external ATS links or direct HR emails without creating an account or storing sensitive personal profile data.
Obfuscated Secret Admin Routes
Admin operations are isolated on randomized, non-guessable environment routes (never standard /admin or /dashboard paths), protected by passcode auth and rate limiting.
Rate Limiting & Bot Protection
Public API routes, resume uploads, and contact forms are protected by Redis token bucket rate limiting and invisible honeypots to prevent automated scraping & abuse.
Encrypted Resume Processing
Uploaded resumes are parsed transiently in memory for skill extraction and job matching, with zero tracking cookies or data broker sharing.