Privacy Policy

Account information. Your name, email address, and password (stored as a salted hash by our authentication provider). If you sign in with Google, we receive your name and email from Google.

Career profile data. The work experience, education, skills, certifications, projects, achievements, and any resume files you upload or import. You provide this so the Service can score your fit against job descriptions and generate tailored resumes and cover letters.

Job descriptions. The job postings you paste in, and the match scores, gap analyses, resumes, and cover letters generated from them.

Payment information. Payments are handled by Stripe. We never see or store your full card number — we keep only your Stripe customer reference, subscription status, and plan.

Usage data. Basic logs (timestamps, feature usage such as generation counts) needed to operate quotas, prevent abuse, and improve the Service.

We use your information solely to provide the Service: authenticate you, compute match scores, generate resumes and cover letters from your own profile content, store your application history, enforce plan limits, and process subscription payments.

We do not sell your personal information, and we do not use your profile data or documents for advertising.

Generating match scores, resumes, and cover letters requires sending relevant parts of your profile and the job description to AI providers acting as our data processors: Anthropic (language model), Hugging Face (text embeddings), and OpenAI (backup language model used only if our primary provider is unavailable). These providers process the data to return results to us; under our API agreements with them, data submitted via API is not used to train their models.

Generated content is built only from information you provided. We run automated checks designed to prevent the AI from inventing accomplishments, but you should always review generated documents before sending them to an employer.

Your data is stored with Supabase (PostgreSQL database and file storage, hosted on AWS) and our application is hosted on Vercel. Generated documents are kept in private storage and served only through short-lived signed links tied to your account. All data is protected by row-level access controls so only your account can read your records.

We share data only with the processors needed to run the Service:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Stripe — payment processing and billing
• Anthropic — AI text generation
• OpenAI — backup AI text generation
• Hugging Face — text embeddings for matching

We may also disclose information if required by law. We never sell or rent your data to third parties.

Your profile and generated documents are kept while your account is active. You can delete individual applications (including their generated files) at any time from the Applications page. To delete your entire account and all associated data, email us at maisamshah57@gmail.com and we will complete the deletion within 30 days.

We use industry-standard safeguards: encrypted connections (TLS), encrypted storage at rest, scoped API keys, row-level security on every table, and signed, expiring URLs for file access. No system is perfectly secure, so we encourage a strong, unique password.

You can access and update your profile data directly in the app at any time. Depending on where you live, you may also have rights to request a copy of your data, correct it, delete it, or restrict its processing. Contact us at maisamshah57@gmail.com to exercise any of these rights.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

We may update this policy as the Service evolves. Material changes will be reflected by the “Last updated” date above, and continued use of the Service after changes take effect constitutes acceptance.

Bitficial LLC
Email: maisamshah57@gmail.com