Privacy

Resume and AI processing

Uploads are stored privately outside the web root. Direct identifiers are removed from extracted text before it is sent to DeepSeek for an expert report, and the raw file is not sent. External AI processing requires explicit consent.

Retention

Temporary extracted text is deleted after report completion or failure. Unreferenced resume versions are deleted when you delete them. A resume attached to an application remains private until 90 days after the job closes. An accepted account-deletion request instead queues asynchronous removal as described below.

Account access and active sessions are disabled as soon as a password-confirmed deletion request is accepted. A privacy worker asynchronously deletes private objects and associated profile, report, and direct-identifier data. Retained application records are anonymized. Completion depends on storage availability and retries, so no fixed completion time is promised. Non-content operational metadata is retained for 30 days; aggregate anonymized product metrics may remain.