Privacy · prototype notice

What happens to your information

This notice describes how this prototype actually behaves. It is not the final privacy policy, which needs legal review before any public launch. Do not enter real personal information into this prototype.

What we store

All personal items are encrypted in our database and tied to your private session. We never ask for or use age, race, ethnicity, sex or gender, pregnancy, disability, religion, national origin, marital status or visa status.

Your CV

On this device (the default): a PDF you import is read inside your browser. The file and its text are not uploaded, and only the facts you tick are saved.

On our server (only if you choose it): when the on-device read finds nothing, you can ask for server parsing. Then the text of your CV, with the name line at the top, contact details and lines that mention personal characteristics removed first, is sent to our server, which passes it to a third-party service provider that processes the text on our behalf to find the professional facts in it. Under our terms with that provider the text is not kept and is not used for its own purposes. The PDF file itself is never sent. Neither our server nor the service keeps the text; only the facts you tick are saved. That filter is rule-based and cannot recognise every personal detail, so use the paste box to remove anything else first if you're unsure. In this prototype, server parsing is switched off unless the operator enables it.

Checks about your employer

If you name an employer, our server may look it up in public sources: state WARN notice lists, and, if you confirm the employer as a public company, its filings at the SEC. Public labor-market statistics for your state and industry are fetched for everyone and are not about you. Those requests come from our server and identify our service, not you; the sources see the company looked up, never your name, answers or session. The retrieved public records are stored for reuse; nothing about you is attached to them. These checks run only when the operator has switched live sources on.

Who sees it

Nobody else. There are no ads, trackers, analytics services or third-party scripts. We do not sell or share your information, and we never provide scores or profiles to employers, recruiters, lenders, landlords or insurers. No third party receives anything unless you choose server parsing for your CV, as described above.

How long, and deleting it

Your private session and everything in it is removed after 30 days without activity. Delete my data removes it immediately; we keep only a record, with no personal content, that a deletion happened. The session is tied to this browser: it is not an account and can't be recovered elsewhere.

Planned, not yet verified: removal from backups within 30 days of deletion.

Email

Giving an email address records your consent for the purposes you chose. This prototype sends no email at all; delivery needs a separately approved provider. You can withdraw consent at any time on Email updates.

Intended operator: Shipalu LLC (formation pending verification). Contact details will be published before any public launch.