The Short Version
- We collect only what's needed: your email (via Google sign-in or email registration) and the resume/job data you provide.
- You own everything you create — your CVs, cover letters, and career data.
- We send your resume content to our AI provider (Anthropic) solely to generate your tailored documents — it is not used for AI model training.
- We do not sell your personal data to anyone.
- You can delete your account and all data at any time.
Information We Collect
Information You Provide
- Account info: Name and email address (collected via Google OAuth or email registration through Supabase Auth). We do not store or have access to your Google password.
- Career data: Work history, skills, education, resume content, job descriptions you paste, and any cover letters or documents generated.
- Billing information: Payment details are collected by our payment processor (Stripe). We never see or store full card numbers.
Information Collected Automatically
- Usage data: Pages visited, features used, button clicks — aggregated and used to improve the product.
- Device info: Browser type, operating system, screen size — for ensuring the site works correctly.
- Cookies: Minimal, functional cookies for authentication session management (see Cookies section below).
How We Use Your Information
- Provide the core service: generate tailored CVs and cover letters using AI.
- Authenticate you and manage your account.
- Process payments.
- Improve the product through anonymised usage analytics.
- Communicate essential service updates (not marketing).
- Comply with legal obligations.
AI and Your Data
When you use our AI features, we send the relevant content (your resume data and the job description) to Anthropic's Claude API to generate your tailored documents.
- This data is sent solely to perform the requested task. Anthropic's API usage policy states that API inputs and outputs are not used to train their models.
- We do not use your data to train our own AI models.
- Generated outputs are returned to you and stored in your account. You can delete them at any time.
For more detail, see Anthropic's data usage policy.
Third-Party Services
We share data only with services that help us operate the platform:
| Category | Provider | Purpose |
|---|
| Authentication | Supabase (Google OAuth) | Account sign-in |
| Database & Hosting | Supabase / Cloudflare | Application hosting, data storage |
| AI Processing | Anthropic (Claude API) | CV/cover letter generation |
| Payments | Stripe | Payment processing |
Each provider is bound by their own privacy policies and data processing agreements. We do not sell or share your data with advertisers or data brokers.
Cookies
We use only essential cookies required for authentication. We do not use advertising or tracking cookies.
Data Security
- Industry-standard encryption in transit (TLS/HTTPS) and at rest.
- Authentication handled by Supabase with secure session management.
- Access to production systems restricted to the site operator.
- No system is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
International Data Transfers
- Supabase and Cloudflare may store data in regions outside Australia (likely US).
- Anthropic API processes data in the United States.
- By using the service, you acknowledge data may be transferred to and processed in countries outside your country of residence.
- Where required (e.g., EU users), standard contractual clauses or equivalent mechanisms apply.
Your Rights
Under Australian Privacy Principles and (where applicable) GDPR:
- Access: You can view all your data through your account dashboard.
- Correction: You can edit your data at any time.
- Deletion: You can permanently delete your account and all associated data from your account settings. Deletion is permanent and cannot be undone.
- Complaint: You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
For GDPR-covered users: you also have the right to withdraw consent, object to processing, and lodge a complaint with your local supervisory authority.
Data Retention
- Account data: Retained for the life of your account.
- Career data: CVs, cover letters, and job data are retained until you delete them or close your account.
- Backups: Purged within 30 days of primary deletion.
- Analytics data: Aggregated and anonymised, retained indefinitely.
Children's Privacy
The service is not directed at anyone under 18. We do not knowingly collect personal information from minors. If we learn we have collected data from a minor, we will delete it promptly.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notification. The “Last Updated” date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.