Privacy Policy

Last updated: October 2026

Not legal advice. GDPR/CCPA and other regimes may require additional notices, DPAs, and counsel review.

What we collect

Account email and password (hashed), OAuth identifiers when you use Google/GitHub sign-in, onboarding profile (occupation, skills, preferences, country of residence), resumes you upload, application tracker data, notification preferences, and payment/subscription status via Stripe (we do not store full card numbers).

How we use it

To recommend jobs, tailor resumes and cover letters when requested, send optional email alerts, verify account ownership, prevent abuse, and manage your subscription.

Email and notification preferences

If you enable alerts, we may send job digests and weekly summaries. You can change preferences in the app and unsubscribe via links in emails. Transactional messages (verification, password reset, billing) may still be sent when required to operate the account.

Third parties

We use Stripe for payments. We may use Resend or SMTP providers to send email. We may use OpenAI (or similar) to generate tailored content when configured. Job data comes from public job board APIs and listings. Those providers process data under their own terms.

AI-assisted recommendations

Matching and generated text may use automated systems. Results can be incomplete or wrong; review before relying on them for applications.

Data retention and deletion

Account data is kept while your account is active. To request deletion or export, use the support contact shown in the app once it is configured, and send it from your account email. We will verify ownership before acting.

Security

Passwords are bcrypt-hashed. Production deployments use HTTPS and environment-stored secrets. No method of transmission or storage is perfectly secure.

Children

The service is not directed at children under 16 (or the age of digital consent in your region).

Contact

A support contact is published here only after the address is verified.