Draft — replace with your reviewed legal text before launch.
Your account email, your job-search preferences, and — if you upload one — your CV. Your CV and any API keys are encrypted at rest (AES-256-GCM). Because we let you recover your account if you forget your password, encryption keys are managed by our servers, which means our operators can technically access stored CVs; we access them only to run the features you request.
We use cookieless, first-party analytics and a self-hosted, cookieless page counter. We do not set tracking cookies, do not store your IP address, and do not share data with advertising networks. No consent banner is required because nothing we collect identifies you across sites.
Card payments are handled entirely by Stripe. We never see or store your card details.
You can export or delete your data at any time; deleting your account erases your CV, keys and history. Contact us to exercise any GDPR right.