Privacy Policy

1. What we collect

• Account data: Email address, name, encrypted password
• CV data: The text content of your uploaded CV (PDF or DOCX)
• Preferences: Target roles, locations, sectors, languages
• Job matches: Records of jobs found and scored for you
• Billing data: Managed by Stripe — we never store card details

2. How your CV is used

Your CV text is sent to Anthropic's API (Claude) for two purposes: parsing it into structured data when you upload, and scoring and tailoring it for job matches. Anthropic processes this as an API request only — they do not store or train on API data beyond the immediate request. See Anthropic's privacy policy for details.

3. Data storage and security

All data is stored in Supabase (EU region) with row-level security. CV files are stored in private Supabase Storage buckets. All data in transit is encrypted via TLS.

4. Data retention

We retain your data for as long as your account is active. Job match records older than 12 months may be archived. You can delete your account and all associated data at any time from your profile settings.

5. Your rights (GDPR)

• Right to access: Email us and we'll provide a data export
• Right to rectification: Update your data from the dashboard
• Right to erasure: Delete your account from Profile → Delete account
• Right to portability: Email us for a machine-readable export

6. Cookies

We use one essential cookie for authentication (your session token). We do not use tracking, analytics, or advertising cookies. We don't use Google Analytics.

7. Contact

For privacy questions or data requests: privacy@exactrole.co