Privacy Policy

Last updated: September 2026

1. What we collect

  • Account data: name, email, hashed password, and OAuth identifiers if you sign in with Google.
  • Profile data: location, target roles, salary expectations, remote preference, work authorization status and sponsorship needs.
  • CV data: the files you upload and the structured content extracted from them (experience, education, skills, projects).
  • Usage data: jobs you save, matches you run, applications you track, and AI requests you make (for metering and abuse prevention).

2. How we use it

  • To operate the core product: matching, the Should I Apply verdict, CV tailoring, cover letters and interview prep.
  • To enforce plan limits and prevent abuse.
  • To communicate with you about your account (verification, password resets, service notices).

3. AI processing

Depending on configuration, portions of your profile, CV content and job descriptions may be sent to a third-party AI provider (e.g. Anthropic or OpenAI) to generate analysis and text. Only the data needed for the specific feature is sent. We do not use your data to train third-party models, and prompts instruct the provider not to retain content beyond the request where such controls are available.

4. Storage & security

  • Uploaded CV files are stored in private storage and are only served through short-lived signed links.
  • We do not log the contents of your CV or full personal-information payloads.
  • Passwords are hashed with bcrypt. Sessions use signed, http-only cookies.
  • Access to your data is restricted to your account; every request is authorization-checked.

5. Retention

We keep your data for as long as your account is active. When you delete your account, your personal data, CV files, applications and AI results are erased immediately.

6. Your rights

You can access, correct, export (Settings → Danger zone → Export) and delete your data at any time. If you are in the UK/EU you have rights under UK GDPR / GDPR; if you are in California you have rights under the CCPA/CPRA. Contact us to exercise any right not self-service in the product.

7. Cookies

We use strictly necessary cookies for authentication and security. See our Cookie Policy.

8. Contact

Questions about privacy: contact us.


This document is a plain-language template provided for transparency about how the product works. It is not legal advice. Consult a qualified professional before relying on it for compliance purposes.