Privacy Policy
This document is a draft and is not in force. It has not been reviewed by the owner or by legal counsel. Items in [brackets] are placeholders.
Operator: [LEGAL ENTITY NAME] ("we"). Governing jurisdiction: [JURISDICTION]. Contact: [CONTACT EMAIL / POSTAL ADDRESS]. Last updated: [DATE].
1. What we collect
Candidate personal information. Information you provide or confirm, such as your name, contact details, work history, education, skills, preferences, notes and the claims in your profile.
Resumes and assets. Files you upload (for example resumes) and documents generated for you (tailored resumes, letters, application drafts).
Account data. Identifier and email from sign-in, invitation status, and per-user AI usage counts used to apply caps.
Operational data. Logs needed to run and secure the service. [Owner to confirm log contents and retention.]
2. How we use it
To run the features you ask for: building your profile, discovering and triaging openings, preparing applications, and keeping the service secure and within usage caps. Nothing is sent to an employer without your explicit approval for that specific application.
3. AI processing by third-party model providers
To generate and analyze content, relevant parts of your profile, resumes and job descriptions are sent to third-party AI model providers acting as our processors. [Owner to list providers, regions and their data-use terms, including whether content is used for training.] We pay for this usage during the beta.
4. Sign-in (OIDC)
You sign in with OpenID Connect through [IDENTITY PROVIDER]. We receive the identity claims needed to create your account; we do not receive your password.
5. Storage and retention
Data is stored in our hosted database and object storage at [HOSTING LOCATION], with access limited to what operating the service requires. Backups are kept for [BACKUP PERIOD]. We keep your data while your account is active, and delete it as described below.
6. Export and deletion
You can export your data and delete your account and data. This capability is in development and is a condition of opening the beta. Deletion removes your profile, files and generated documents from live systems, and from backups within [BACKUP PERIOD]. [Owner and counsel to confirm.]
7. We do not sell your data
We do not sell your personal information or share it for advertising.
8. Human approval before employer submission
Applications are submitted to employers only after you explicitly approve each one. Employers then handle your information under their own policies.
9. Sharing
Only with the processors needed to run the service (hosting, storage, AI providers, identity), when required by law, or with your direction. [Owner to list processors.]
10. Your rights and contact
Depending on where you live you may have additional rights (access, correction, objection). [Counsel to complete for [JURISDICTION].] Contact: [CONTACT EMAIL / POSTAL ADDRESS].
11. Changes
We will tell beta users about material changes to this policy.