Privacy Policy

Data we collect

Account data: your name, email, and authentication credentials (passwords are hashed). Report data: the role details you submit (job title, location, proposed salary, notes) and the generated reports. Billing: PayPal handles payments; we store credit balances and purchase records, not card details.

How we use it

To authenticate you, generate and store your reports, process credit purchases, send transactional email (verification, password reset), and prevent abuse. Report inputs are sent to AI/research providers solely to generate your report.

Subprocessors

We use Amazon Web Services (hosting, database, email via SES), OpenRouter and Amazon Bedrock (AI generation), and PayPal (payments). Report generation may transmit your inputs to these providers to produce the report.

Cookies & analytics

We use strictly necessary cookies to keep you signed in and to secure your session — these are required for the service to work. We also use Google Analytics to understand how the site is used (for example, which pages are visited); it sets cookies and shares usage data with Google as an analytics provider.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Disabling strictly necessary cookies may prevent sign-in from working.

International data transfers

Our infrastructure and AI providers are based in the United States, so your data — including report inputs you submit — is processed in the US and may be processed in other countries where our subprocessors operate. Where data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the providers' Standard Contractual Clauses.

Legal basis (EEA/UK)

Where the GDPR or UK GDPR applies, we process your data to perform our contract with you (providing the service), to comply with legal obligations, and for our legitimate interests in operating and securing the service. Account and report data is retained until you request deletion or for as long as needed to meet legal and accounting obligations.

Data security & retention

Data is encrypted in transit and at rest. We retain your account and reports until you request deletion. You can request export or deletion of your data at any time.

Your rights

You may access, correct, export, or delete your personal data. Submit a request through the Contact page on our site (linked in the footer) and we will respond.