Privacy Policy
Controller: Runhat Labs LLP, India. This is a placeholder until the final text is reviewed.
What we keep
- Your account: email address and a hash of your password (never the password).
- What you enter: profile, applications, documents, notes, settings and saved job postings.
- If you bring your own AI key: the key, stored encrypted and never shown again.
- For security: counters of sign-in and sign-up attempts by address, and a one-way hash of a deleted account's email so the free trial can't be used again.
Where your data goes
- Our model: your text is processed on our own server and goes nowhere else.
- Your own key: what the task needs (the posting, your profile without contact details, your messages) is sent to the provider you chose (OpenAI, Anthropic or OpenRouter), under their terms.
- Job search and fetching a posting: if you use them, the search or the posting address is sent from our server to the job source or the posting's website. Nothing from your profile is sent.
- Payments: Stripe handles card details; we never see them. Email: Resend sends our messages.
Backups, logs and who can see your data
- Nightly database backups are kept on our server for up to 8 weeks, so data you delete can remain in a backup until it ages out.
- Server logs record errors without your documents, prompts or email address. Sign-in and sign-up attempts are counted by IP address for abuse protection.
- Other users cannot see your data. Our own staff do not browse accounts; an administrator can manage plans and delete accounts but the app has no screen for reading your content.
No tracking
No analytics, advertising or usage pings. The only cookie is the one that keeps you signed in.
Your rights
Export your data and delete your data or your whole account in Settings. Deleting the account removes everything we hold about your content.