Security and Privacy Policy
Last updated: 10 August 2026
1. Data We Collect
- Account details — name, email, and authentication data.
- Career profile data — your master CV, work history, achievements, education, and qualifications.
- Job-tracking data — roles you save, application status, interview prep notes, and follow-up reminders.
- AI-generated outputs — tailored CVs, cover letters, and fit analyses.
2. How We Use It
We use your data to operate the Service: authenticating you, storing your career profile, generating tailored CVs and application materials, and tracking your job search progress.
3. AI Processing & Third-Party Sharing
When you use an AI-assisted feature (CV tailoring, cover letter drafting, interview prep, fit scoring), relevant excerpts of your career profile and the target job description are sent to Google's Gemini API to generate the output. This is necessary to provide those features and happens only when you initiate them.
Authentication (sign in, registration, password reset) is handled by a shared login platform that also serves other products from the same operator. We do not sell your personal data to third parties.
4. Cookies
We use necessary cookies to keep you signed in, and — only with your consent — functional, analytics, and marketing cookies. See our Cookie Policy for the full list and to manage your preferences at any time.
5. Security Measures
Session cookies are signed and HTTP-only. Access to your account requires a valid session or access token, and tokens are refreshed automatically rather than stored in a readable form. Traffic to the Service is encrypted in transit.
6. Your Rights
You can request access to, export of, correction of, or deletion of your personal data at any time via the Contact Us page. Depending on your jurisdiction, you may have additional rights under laws such as the UK/EU GDPR.
7. Data Retention
We retain your account and career data for as long as your account is active, or as needed to provide the Service. You can request deletion at any time.
8. International Transfers
Our AI provider and shared authentication platform may process data outside your home country. Where this happens, we rely on the safeguards required by applicable data protection law.
9. Children's Privacy
The Service is not directed at children under 16, and we do not knowingly collect their personal data.
10. Contact
Questions about this policy? Reach us via the Contact Us page.