Privacy Policy
Last updated: 16 August 2026
1. What we collect
- Account information: email, name, and password (stored as a one-way hash, never in plain text) — or, if you sign in with Google/GitHub, your name, email, and profile picture from that provider.
- Resume data: the resume file you upload, and information extracted from it (name, skills, work history, contact details) to power job matching, AI cover letters, and AI-drafted answers to application form questions.
- Job preferences: role, location, and other criteria you set to get matched to relevant jobs, and used as context when AI-drafting answers to application questions.
- Application activity: which jobs you’ve applied to, their status, any AI-generated cover letters saved against them, and answers saved to your Answer Library (including ones the AI drafted, so they can be reused without asking the AI again).
- Payment metadata: which credit packs you’ve purchased and when. We never see or store your card, UPI, or bank details — those are handled entirely by Razorpay.
- Technical data: IP address and browser user-agent, recorded against security-relevant actions (login, password changes, payments) for fraud prevention and account security.
2. How we use it
To match you with relevant job postings, autofill and track your applications, generate tailored AI cover letters, AI-draft answers to application questions we don’t already have on file for you, process payments, and keep your account secure. We do not sell your personal data to anyone.
3. Who we share it with
We share the minimum data necessary with the following services to operate:
- Anthropic — the job description and your resume’s extracted skills are sent to generate an AI cover letter when you request one. Separately, when an application form asks a question we have no saved answer for, your resume details (skills, work history, experience) and job preferences are sent to Anthropic to draft a suggested answer during autofill — capped at a daily limit per account, and never submitted without it first being filled into the form for you to review.
- Razorpay — processes payments; we never receive your full card or bank details.
- Google / GitHub — only if you choose to sign in with them.
- Cloudflare R2 — stores your uploaded resume files.
- Our email provider — sends account and notification emails (e.g. password resets).
We don’t share your data with anyone else, and we don’t use it for advertising or sell it to third parties.
4. Cookies
We use a single essential cookie to keep you signed in (an httpOnly refresh token — not readable by JavaScript, not used for tracking or advertising). We don’t use third-party analytics or ad-tracking cookies.
5. Your rights
You can update your profile at any time from your account settings. You can request a full export of your data or permanent deletion of your account — deleting your account removes your resumes, applications, preferences, and all associated data. Contact us (Section 7) to exercise either right.
6. Data retention
We keep your data for as long as your account is active. If you delete your account, your personal data is removed except where we’re legally required to retain payment records for a limited period.
7. Contact
For any privacy questions, data export, or deletion requests, raise it through the in the bottom-right corner — we reply within 24 hours.
8. Changes to this policy
If we make material changes to this policy, we’ll update the “Last updated” date above and, where appropriate, notify you directly.