Privacy Policy

What we collect

We collect the data you give us directly: your email address (for passwordless authentication), the resume text and resume files you upload, the job descriptions you paste in, and the outputs our AI produces on your behalf. We also record per-feature usage counters so we can enforce monthly limits on the free tier.

What we don’t collect

We do not collect payment-card details — Stripe handles payments and we receive only the metadata necessary to recognise your subscription (customer id, plan, status, billing period). We do not run third-party analytics or advertising trackers.

Who else processes your data

We rely on a small set of sub-processors to deliver the product. The current list is maintained at /legal/sub-processors and is updated when the stack changes.

Your rights

You can export every piece of data we hold about you, or permanently delete your account, at any time from your account page. Deletion is immediate and irreversible — once the request completes, we cannot restore your data.

Retention

Active accounts: we retain your data while your account is open. Deleted accounts: we remove your data within 24 hours of you initiating account deletion. Stripe retains your customer record on its side per their own audit requirements; we have no control over that retention period.

AI-generated content

We use large language models from OpenAI and (optionally) Google Gemini to process your resume and job descriptions. We send those providers the minimum necessary input to generate the requested output. We do not opt those providers into training on your data; see their respective data-handling policies for details.

You are responsible for reviewing AI-generated content before using it in real applications. Our tailoring pipeline includes verification against your stored resume, but the burden of factual accuracy in any document you send to an employer rests with you.

Security

See /security for our security posture and vulnerability-disclosure contact.