Your data and the AI providers that process it

This article summarizes the AI-related parts of our privacy policy. Where they differ, the privacy policy is the authoritative document. We would rather tell you plainly than imply a guarantee we do not hold.

Which providers see your data

AI features route your content to external model providers. The providers we route to are Google Gemini, DeepSeek, Anthropic Claude, OpenAI, and Groq. Each processes your data under its own published API terms.

Two things we state directly because they matter:

• DeepSeek is domiciled in the People's Republic of China and is the first-choice provider for resume tailoring and section rewriting. Resume content you run through those features is transferred there.
• We have not contracted zero-retention or no-training terms with every provider. That is why we list all of them rather than imply a guarantee we do not hold.

What gets sent

Resume features send your full resume text, including the contact details it contains, to the provider handling that request. Interview coaching and content generation send the prompts and answers involved. The Chrome extension sends job descriptions for match scoring, and its tailoring features also send your saved resume content, including the name, email, and phone in it.

Uploaded PDFs may also be processed by PageIndex (VectifyAI) for structured text extraction; documents are deleted from that service immediately after extraction.

What gets saved to your account

Some AI results are saved automatically rather than only on request: running an ATS or resume analysis writes a score record, and a LinkedIn analysis stores both the result and the profile text you submitted. Saved AI results are retained for the life of your account; there is no automatic per-session purge. Deleting your account removes them; see Deleting your account.

The non-AI services involved

Beyond model providers: Razorpay processes payments, Resend delivers transactional email, Firebase (Google) handles phone verification SMS when you opt in, Upstash Redis handles rate limiting with hashed identifiers, and Vercel and Neon host the application and database. The full subprocessor list lives in the privacy policy.