1. What we collect
Account data: when you sign up we store your email and an authentication identifier via Supabase, plus your operating system, browser type and version, and approximate geographic location (country and city, looked up from your IP). These help us with support and abuse-prevention.
Usage data: we keep an aggregate count of generations on your profile and a per-generation record (target role, target company, ATS score, and the contact details extracted from the resume — name, email, phone, location, links). Anonymous generations are stored against a random identifier in a signed HTTP-only cookie until you sign up, at which point they are attached to your account.
Resume content: the resume file and job description text are processed in-memory by our AI provider (Groq) and discarded after the response is returned — we do not retain the raw files. Only the structured fields above are persisted.
2. What we don't collect
We do not sell or rent your data. We do not run analytics scripts that fingerprint you. We do not store your payment credentials — crypto payments go directly to our wallet on Tron (TRC-20) or Ethereum (ERC-20).
3. Cookies
We use two signed HTTP-only cookies for anonymous visitors: one tracks free-tier generation counts, the other carries a random identifier so the resumes you generate before signing up can be attached to your account when you sign up. Both expire after one year. Signed-in users additionally receive standard authentication cookies issued by Supabase.
4. Third parties
We use Groq (LLM provider) to generate content, Supabase to host the database and authentication, ipapi.co for approximate geo-IP lookup at signup, and TronGrid (Tron) plus Etherscan V2 (Ethereum) to verify USDT transactions on TRC-20 and ERC-20. These providers have their own privacy policies.
5. Data deletion
You can delete your account and all associated profile and generation records at any time by contacting us. Anonymous generation records are attached to your account when you sign up; otherwise they remain tied to the random cookie identifier and are discarded along with the cookie when it expires (one year) or when you clear your browser data.
6. Contact
For privacy questions, contact us via the email address listed on our website.