Privacy Policy

What we store

• Account: username, email address, a salted hash of your password (never the password itself), and sign-in sessions.
• Candidate profile: the contact details, education, work-authorization and other facts you enter, and your answer preferences.
• Résumés: the files you upload, their extracted text, detected skills and experience, and (if you enable AI answers) a structured summary of your résumé.
• Job activity: saved jobs, applications you track, alerts, Autopilot settings, application queue items, and the field-by-field record and screenshots of each automated application.
• Autopilot agreement: if you sign it, the agreement text, version, your typed name, the time, your IP address and browser.
• Notifications: your Pushover user key (if you add one) and a log of deliveries.

How we use it

To show and rank jobs for you, fill in and submit applications you ask for (or that Autopilot submits under your signed agreement), send the alerts you set up, keep the service secure, and fix problems. We do not sell your data or use it for advertising.

Who receives it

• Employers you apply to. When you or Autopilot apply, your profile answers and résumé are submitted to that employer's application system (for example Greenhouse or Lever), under that employer's own privacy policy.
• OpenAI, only if you turn on AI answers: relevant parts of your résumé text and professional profile are sent to draft and check answers to application questions and to build your résumé summary. Legal, demographic and eligibility questions are never sent.
• Pushover and our email provider, to deliver the notifications and alerts you set up.
• Our hosting provider, which stores the service's data on our behalf.

Administrators can see account metadata and service health. The admin console does not show résumé contents, profile answers, or notification secrets.

Cookies

We use only two cookies: a sign-in session cookie and a security token that protects your account against cross-site requests. No analytics or advertising cookies.

How long we keep it

As long as your account exists. When you delete your account, your account, profile, résumés, application history, alerts and screenshots are deleted immediately. Copies may remain in encrypted backups until those backups are rotated out.

One exception: if you signed the Autopilot agreement, the record of that signature (name, date, version, IP address and the text you agreed to) is kept, separated from your account, for up to three years after deletion, so that questions about applications submitted on your behalf can be resolved. It is then deleted automatically.

Your choices

• Download your data: Account → Download my data.
• Delete your account: Account → Delete my account.
• Turn off AI answers or Autopilot at any time from your profile and the Auto-Apply page.

Security

Connections are encrypted with HTTPS, passwords are hashed with scrypt, sessions expire and can be revoked, and résumé files and screenshots are stored with owner-only file permissions. No system is perfectly secure; tell us right away if you suspect a problem with your account.

Changes

We will update this page when our practices change and note the date at the top.