PRIVACY_POLICY.EXE

When you choose features that require server or AI processing:

• CV content is sent through our server to the configured external AI provider for processing. Provider handling depends on its own policies.
• AI Optimize: In the standard editor flow, structured name, email, phone and profile-link fields are masked in the browser before transmission. Identifiers in free-text CV fields or chat messages may still be sent.
• PDF Import & ATS analysis: The PDF is uploaded to our server for text extraction. Import sends up to 15,000 characters of extracted text to the configured provider. ATS checks run on the full extracted text and filename; up to 15,000 characters may be sent for AI review when available. Neither flow masks that text, and neither sends the original PDF to the AI provider.
• Job descriptions: When supplied for keyword analysis or ATS review, job-description text is sent to the configured provider without PII masking.
• Generate TL;DR: The selected entry's title, role, description and CV language are sent to the provider without PII masking. This flow does not use AI Optimize's patch-grounding checks.
• Storage and retention: The application does not save uploaded PDFs or AI request content to a central CV database. Aggregate usage and token counters are saved server-side. Connection identifiers and request timestamps are held in memory for rate limiting. Error logs can include provider errors or response excerpts; their retention depends on deployment logging. External AI and analytics services handle data under their own policies; we do not promise zero retention by those services.