Your data, protected
Your career data is sensitive. We treat it that way - encrypted, locked down, and never sold.
Security practices
Here's how we keep your information locked down at every step.
Encryption in Transit
Everything between your browser and our servers goes through TLS 1.2+. Sensitive config lives server-side in environment variables and never touches the client.
Encryption at Rest
Your resumes, cover letters, and account data are encrypted at rest in the database. Even if someone got the raw storage, your data would be unreadable.
Infrastructure Security
Hosted on SOC 2 compliant cloud infrastructure. Database connections are encrypted, backups are stored securely, and every access is logged.
Access Controls
Production access is role-based and restricted to the people who need it. Every admin action gets logged and audited.
Authentication
Passwords are hashed with bcrypt before storage - never stored in plain text. Sessions are signed and expire automatically. Multi-factor authentication is available for the extra layer.
Data Minimization
We only collect what we need to run the product. AI content is generated on demand, you own it, and we don't sell your data. Ever.
What we guarantee
- All data encrypted in transit via TLS
- No API keys or secrets ever touch the client
- Role-based access controls on all infrastructure
- Regular security audits across systems and processes
- Your data, your call - export or delete anytime
- Fast response to reported vulnerabilities
Responsible disclosure
Found a vulnerability? We take reports seriously and respond fast. Reach out and we'll work with you to fix it.
Report a VulnerabilitySecurity questions, answered
The things people want to know before trusting us with their career data.
Yes. All data is encrypted in transit via TLS and at rest. We use row-level security so your data is only accessible to your account. We do not sell or share your information with third parties.
Yes, securely in your account so you can access them later. You own your data. You can export everything or delete your account and all associated data at any time from your settings.
Only you and our core team with role-based access controls. Production access is restricted, logged, and audited. We never give third parties access to your personal career documents.
No. We do not sell your data to anyone - recruiters, employers, data brokers, or advertisers. Your resume, cover letters, and job search activity stay private.
Everything is removed. Resumes, cover letters, job applications, account info - all of it. One request from your settings page is all it takes. No retention period, no archived copies.
Yes. We process data lawfully, give you full access and deletion rights, and never use your data beyond what is needed to run the product. If you have a specific compliance question, reach out through the contact page.
Your data is safe. Your next job is waiting.
Everything encrypted. Nothing sold. Full control, always. Free to start - no credit card.