What we collect
- Email address and password (argon2id hashed — never stored in plain text).
- Your resume file and extracted text (encrypted at rest, AES-256-GCM).
- Your job-search profile: titles, keywords, thresholds.
- Notification channel webhooks and addresses (webhooks encrypted at rest).
- Scoring results: which jobs were scored, tier, rationale.
- Application tracker state: which jobs you applied to, interview stage, outcome.
What we don't collect
- We don't track you across sites.
- We don't sell your data to third parties.
- We don't store your credit card — Stripe handles payment data directly.
Data retention
Account data is retained until you delete your account. After deletion, a 7-day grace period applies before hard deletion. Resume files are hard-deleted (not soft-deleted) at account termination.