Privacy Policy

When you sign in with GitHub or Google, we receive your email address and store it together with the provider you used ("github" or "google") so we can identify your account and enforce the daily search limit below. We do not receive or store your OAuth password - authentication is handled entirely by GitHub/Google.

When you upload a resume or paste a job description, that text is processed to produce a match score. See "How your resume and job data are handled" below for exactly where that text goes and how long it lives.

Your resume file is parsed on our server to extract its text and that text is returned to your browser - it is not written to a database. When you start a search, your resume text and the job posting text (fetched from public GitHub repositories, or pasted by you) are sent through a message queue to a worker process, which forwards both to Google's Gemini API to generate a match score.

The resulting scores are cached in Redis under a random per-search session id and automatically expire after 2 hours. The queue message itself is deleted once the worker has processed it. We do not keep your resume text or the job postings you searched against in permanent storage.

Depending on what you do, your data passes through:

• GitHub and Google, for sign-in and (for GitHub) fetching public job postings.
• Google's Gemini API, to score your resume against a job posting.
• Neon (Postgres), to store your account email/provider and daily search count.
• Upstash Redis and RabbitMQ, to move and temporarily cache data during a search.
• Vercel Analytics, for aggregate, cookie-less page-view statistics.

Each of these processors has its own privacy policy governing how it handles data.

We set one cookie: the session cookie used to keep you signed in. It is required for the app to work and is not used for tracking or advertising. Vercel Analytics does not use cookies.

You can ask us to delete your account data (email, provider, and search count history) at any time by contacting us at the address below. Since resume and job text are not stored permanently, there is nothing further to delete there once your search session expires.

Data in transit to and from this app is encrypted (HTTPS/WSS). Access to the database and cache is restricted to the app's own backend services.

If this policy changes in a way that affects how your data is handled, we will update this page and change the date below.

Questions or deletion requests: reach out via the contact details on github.com/jonsuguiyama.