Privacy

What we hold

Your CV and the profile you build from it; the job postings we match you against; the applications we prepare and send, including the answers put on each form; and any recruiter replies you ask us to read. If you connect an email account, we store the credentials you provide and the messages that match your applications.

How credentials are protected

Anything secret you give us. An email app password for reply tracking, or an OpenAI, Anthropic or Google API key if you choose to bring your own. Is encrypted with a key derived for your account alone. The API never returns it; it reports only whether one is set. It is never shown again, never written to our logs, and cannot be read back out of the dashboard by anyone, including us. By default the AI runs on our account and there is no key of yours to hold at all.

Where applications are sent from

Applications are submitted by a browser extension running on your own computer, on your own connection, under your own identity. We do not apply on your behalf from our servers, and we never sign in to an employer's site pretending to be you.

Equal-opportunity questions, and what we do with your answer

Forms often ask about race, gender, disability or veteran status. Answering is always optional — to the employer, and to us. If you have recorded an answer in your profile, we put that answer on the form, because it is yours to give. If you chose “Prefer not to say”, we select the form’s own decline option. If you never answered, we decline rather than guess, and we never infer these details from anything else you have given us.

You can change or clear any of these at any time in your profile, and you can delete your account entirely. We do not ask about sexual orientation at all. For any other question your profile cannot truthfully answer, we stop and ask you rather than guess.

Who else sees it

Employers see what any applicant sends them: your CV, your cover letter, your form answers. We use OpenAI to score matches and write CV drafts, so the relevant parts of your profile and the job description are sent there. If you choose a Claude or Gemini model in Settings and add your own Anthropic or Google key, those CV drafts go to that provider instead, under your own account with them. We do not sell your data, and we do not share it with recruiters or advertisers.

Cookies

We do not set any. Your session is held in your own browser's local storage and sent only to us, so there is nothing to track you with across other sites and no consent banner to dismiss. We run no advertising or third-party analytics scripts.

Deleting it

You can export everything we hold, and you can delete your account from Settings. Deletion removes your profile, CV files, applications and stored credentials. Records an employer already received are theirs and cannot be recalled by us.