Privacy notice

Your account: your email address and sign-in details, handled by our sign-in provider.

What you give us: résumé files and every version you upload, entries you add by hand, and your corrections and review decisions.

From GitHub, if you connect it: for the repositories you choose, names, dates, languages, topics, stars, and your weekly commit counts. For public repositories, and private ones where you opt in, also the description and README. We never read source code, diffs, or commit contents.

Usage records: which processing step ran, how long it took, and what it cost. These don't contain your content.

Only to build and show your professional record: your timeline, your skills and their evidence, and suggestions for duplicates you can accept or reject. We don't sell your data, share it with recruiters, or use it for advertising.

With your consent, résumé text and the GitHub information described above are sent to an AI model to find roles, projects, skills, and dates. Before anything is sent, we remove email addresses, phone numbers, street addresses, and secrets.

Our AI provider is DeepInfra. It processes requests in memory, doesn't write them to disk, and doesn't use them to train models. We don't store the text of AI requests and responses unless you turn on debug traces in Settings, which keeps them for 14 days.

• Clerk for sign-in and account email.
• Railway for hosting, our database, and encrypted file storage.
• DeepInfra for AI processing, as described above.
• GitHub, only if you connect it, as the source of repository information.

Files are encrypted with a key unique to your account.

Your sources, the facts drawn from them, and their history are kept for as long as you have an account, unless you delete them. Usage records without content are kept for 13 months. Application logs contain no content and are kept for 30 days. Backups roll over every 30 days.

• Hide anything from your profile, and undo it later.
• Permanently delete a single source, such as one résumé version or one GitHub repository, along with everything derived from it.
• Choose per private repository whether its description and README may be read.
• Disconnect GitHub and choose to keep or delete what was imported.
• Delete your account. Everything is removed from our live systems right away and from backups within 30 days.

All of this is in Settings.

A contact address for privacy requests will be published here before public launch.