Privacy Policy

1. What we collect

• Account information: email, name, and password (stored as a one-way hash, never in plain text) — or, if you sign in with Google/GitHub, your name, email, and profile picture from that provider.
• Resume data: the resume file you upload, and information extracted from it (name, skills, work history, contact details) to power job matching and AI cover letters.
• Job preferences: role, location, and other criteria you set to get matched to relevant jobs.
• Application activity: which jobs you’ve applied to, their status, and any AI-generated cover letters saved against them.
• Payment metadata: which credit packs you’ve purchased and when. We never see or store your card, UPI, or bank details — those are handled entirely by Razorpay.
• Technical data: IP address and browser user-agent, recorded against security-relevant actions (login, password changes, payments) for fraud prevention and account security.

2. How we use it

To match you with relevant job postings, autofill and track your applications, generate tailored AI cover letters, process payments, and keep your account secure. We do not sell your personal data to anyone.

3. Who we share it with

We share the minimum data necessary with the following services to operate:

• Anthropic — the job description and your resume’s extracted skills are sent to generate an AI cover letter, only when you request one.
• Razorpay — processes payments; we never receive your full card or bank details.
• Google / GitHub — only if you choose to sign in with them.
• Cloudflare R2 — stores your uploaded resume files.
• Our email provider — sends account and notification emails (e.g. password resets).

We don’t share your data with anyone else, and we don’t use it for advertising or sell it to third parties.

4. Cookies

We use a single essential cookie to keep you signed in (an httpOnly refresh token — not readable by JavaScript, not used for tracking or advertising). We don’t use third-party analytics or ad-tracking cookies.

5. Your rights

You can update your profile at any time from your account settings. You can request a full export of your data or permanent deletion of your account — deleting your account removes your resumes, applications, preferences, and all associated data. Contact us (Section 7) to exercise either right.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed except where we’re legally required to retain payment records for a limited period.

7. Contact

For any privacy questions, data export, or deletion requests, contact us at privacy@wonzo.in.

8. Changes to this policy

If we make material changes to this policy, we’ll update the “Last updated” date above and, where appropriate, notify you directly.