Privacy Policy

Account data: email, name, hashed password, sign-in time and IP.

Resume & interview content: the PDF/DOCX you upload, parsed structured fields (skills, experience, projects), generated interview questions, your answers and code, and AI-produced scores and feedback.

Payment data: handled by Creem. We never see your full card number or bank account. We only store the customer ID, subscription ID, plan, cycle and payment status returned by Creem.

Operational logs: standard web logs (request path, status, user-agent) for troubleshooting and abuse prevention.

• Provide the core service: parse resumes, generate questions, score, produce reports.
• Account management and authentication.
• Subscription and payment processing (via Creem).
• Bug triage, product improvement, abuse and fraud prevention.
• Service notifications (password reset, subscription renewals, security alerts).

• We do not use your resume or answer data to train our or any third-party LLMs.
• We do not sell or share personal data with ad networks.
• We do not make your resume or report public without your consent.

The following processors run our infrastructure under data-processing agreements:

• Supabase: database, file storage, auth (US / Singapore regions).
• OpenAI / DeepSeek: LLM inference. We send only the minimum data needed to generate the current interview.
• Creem: payments, tax, and refunds as Merchant of Record.

Resume and interview content is retained only while your account is active. You can delete any individual resume or report from the dashboard at any time.

After account deletion, we erase your resumes, questions, answers and reports within 30 days. Transaction records required for legal/financial compliance are kept for the required period (typically up to 7 years) and then destroyed.

• Access your personal information (visible in Settings).
• Correct inaccurate information.
• Export your resume and interview data (contact us).
• Delete your account and all related content at any time.
• Raise a complaint about how we handle your data.

All traffic uses HTTPS. Passwords are bcrypt-hashed. Sensitive secrets (e.g. Supabase service-role keys) live only on the server. We monitor for abuse and brute-force attempts and update dependencies following industry best practice.

Our servers are hosted in Supabase regions outside your country (typically Singapore or the US). By using the Service you consent to your data being transferred there for processing.

This Service is intended for users aged 16 or older. Do not register or upload personal information if you are younger.

Updates to this policy are published here. Material changes are communicated by email or in-app notice.

For data-related questions email fixedx666@gmail.com.