Your data.
What we keep about you, why, who else receives it and for how long. You can take a copy of everything, or delete your account, from your account page at any time.
What we keep
- Your account
- Your email, name, home area (postal code and city, and a street only if you add one), what you are looking for, your preferences, your resumes, your saved answers and the consents you gave, each with the wording and version you saw.
- Your applications
- What was sent, to which employer, when and through which channel, the exact resume file, the answers sent, every request and response, and the replies employers sent to your application address.
- What you choose to tell us about yourself
- Optional and self-declared. Used only for the chance-of-a-reply range you see, never for which jobs you see or their order, and never sent to an employer.
- Your answers to employers' voluntary surveys
- Optional. Sent only to an employer's own voluntary self-identification survey, in its wording, when you chose an answer for that question; each send is logged on that application.
Optional: what you tell us about yourself
These answers change only the chance-of-a-reply estimate you see. They never change which jobs we show you or their order and never go on an application. We use them only to compute your estimate and, in aggregate with others' and never per person, to publish our annual fairness audit. If you choose to answer an employer's voluntary self-identification survey, that is a separate choice you make on your answers page, and we show you the employer's wording first. Remove these any time.
Who else receives it
Employers receive the applications you send them. These services receive what they need to run the product, and nothing more. By default only the postal code and city of your home are sent to the geocoder, and only the center of the 550-meter cell you live in is sent to the transit router, never your address.
| Service | What it receives | Where |
|---|---|---|
| Supabase | hosting and the database | United States |
| Vercel | hosting | United States |
| Resend | your application email and product mail | United States |
| The model provider for tailoring, classification and prep (Anthropic, Google or OpenAI, whichever is configured) | the text of your resume, a posting and a reply, when a feature needs a model | United States |
| The embeddings provider (Google, Voyage through MongoDB, or OpenAI, whichever is configured) | the text of your resume and of postings, to compare them | United States |
| komoot's Photon geocoder | your postal code and city, or your street if you add one, and posting addresses | Germany |
| The US Census Bureau geocoder | the same, for US addresses only | United States |
| The Transitous community transit router | the 550-meter cell you live in and the posting's cell, never your address | European Union |
| CareerOneStop (U.S. Department of Labor), once its agreement is signed | the job titles or kinds of work you are looking for, your five-digit postal code and how far you commute in miles, to find postings near you; never your name, email or street | United States |
How long we keep it
- Sign-in and invite links that were used
- Until the link would have expired, then deleted.
- Posting sightings and liveness checks
- 180 days.
- Postings
- 30 days after a posting stops being live its description, form schema and vector are removed; 180 days after that the row is deleted unless one of your applications points at it, in which case it stays, purged, as long as the application does. Postings from a source whose agreement ends are deleted within 7 days.
- Geocoded addresses and commute times
- Kept. They hold addresses and 550-meter cells, never a person.
- The text of replies to your application address
- 180 days; after that the reply keeps its class, dates and the application it belongs to.
- Attachments on those replies
- 90 days.
- Resume uploads, page photos and rendered PDFs of a deleted account
- Removed within 30 days of deletion.
- Your account
- Deleted on request from your account page, and after 12 months without a sign-in (we write to you at 11). Profile, preferences, declared traits, self-identification answers, saved answers, consents, your application address, push subscriptions, notifications, feedback, vectors, recommendations, resumes, variants, prep and project rows are deleted. What survives for 24 months: Which employer received which application and when, through which channel, the SHA-256 of the PDF that was sent, the HTTP status, and the reply classes and dates. Nothing that names you: no name, email, phone, street, coordinates, alias, answer text or resume content.
- Declared traits and self-identification answers
- Deleted at once when you remove them; your reply estimate is recomputed.
- Source run records
- 90 days.
- Employer system responses in the evidence log
- 180 days, then truncated to status and timing.
Schedule as of October 18, 2026.
After you delete your account
Kept for 24 months, so a question about what was sent in your name can be answered without your data:
Which employer received which application and when, through which channel, the SHA-256 of the PDF that was sent, the HTTP status, and the reply classes and dates. Nothing that names you: no name, email, phone, street, coordinates, alias, answer text or resume content.
Your deletion receipt, emailed when the deletion runs, prints this same text. For the rest of the company's products, see the privacy policy.