Privacy Policy

1. Information we collect

We collect the following types of information:

• Account information. Email address and password you provide when creating an account or signing in.
• Profile and CV data. Details you enter into your CV profile, such as work history, skills, and education, as well as job descriptions you paste into the Service.
• Usage information. Information about how you use the Service, such as generated documents, generation counts (including feature-specific generation counters, where applicable), approximate timestamps, page events, and basic device and browser information.
• Payment information. For paid plans, billing details are processed by our payment provider. We do not store full payment card numbers on our servers.

2. How we use your information

We use your information to:

• provide, operate, and maintain the Service;
• generate resumes and cover letters based on your profile and job descriptions;
• personalize your experience and remember your preferences;
• monitor usage, improve quality, and develop new features;
• prevent abuse, fraud, and security incidents; and
• send you service‑related communications, such as account or billing notices.

3. AI models and generated content

We use third‑party AI models to generate content from your inputs. When doing so, we send only the data necessary for each request. Generated content may be retained by us for a limited time to operate, secure, and improve the Service, including quality evaluation and abuse detection.

Our current generation provider is OpenRouter (which routes requests to selected AI models). Payment subscriptions are processed via Lemon Squeezy.

4. Cookies and local storage

We use browser storage technologies to run the Service, including `localStorage` (for auth session token) and IndexedDB/Dexie (for local cache of profile, subscription state, and resume cards). We may also use essential cookies required by the hosting platform and security features. You can clear local browser storage in your browser settings, but doing so may log you out and remove local cached data.

Some AI helper features in profile forms (for example, field-level generation) rely on your currently entered form data to validate required fields and generate suggested text. This processing is part of core Service functionality.

5. How we share information

We do not sell your personal information. We may share limited information with third parties in these situations:

• Service providers. Trusted vendors that help us operate the Service (for example, hosting, OpenRouter for AI generation, Lemon Squeezy for payment processing, Google Analytics for aggregated usage analytics, and email delivery) under contracts that protect your data.
• Legal or safety reasons. When required by law or in response to valid legal requests, or when we believe disclosure is necessary to protect our rights, users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of the transaction.

6. Data retention

We keep account, profile, resume, subscription, and generation records on our servers for as long as your account is active. We may retain limited records after account deletion where required for legal, accounting, fraud prevention, or security purposes. Local browser cache (IndexedDB/localStorage) is controlled by your browser and can be cleared at any time from browser settings.

7. Your rights and choices

Depending on your location, you may have certain rights over your personal data, such as the right to:

• access a copy of your personal data we hold;
• request correction of inaccurate or incomplete data;
• request deletion of your account and associated data, subject to legal obligations; and
• object to or restrict certain types of processing.

You can delete your account and most associated data from the Settings page in the app. For other requests, please contact us via our Contact page.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. However, no online service can be completely secure. You are responsible for choosing a strong password and keeping your account credentials confidential.

9. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. International data transfers

Your information may be processed on servers located in countries other than your own. Where required, we implement safeguards to protect personal data transferred across borders, such as contractual protections.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, for example by updating the date at the top of this page or by in‑app notification. Your continued use of the Service after the changes become effective constitutes your acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us via our Contact page.

For information about terms of use, please see our Terms of Service.