Privacy Policy

What we collect

• Account: your name, email address, and a hashed password. We never store the password itself.
• Profile: the target role, description, locations and optional details you type in.
• Resume: the file you upload and the text extracted from it.
• Board activity: the roles matched to you, your status on each, and your private notes.
• Billing: handled by Stripe. We store a Stripe customer and subscription identifier and your subscription status. We never see your card number.
• Technical: ordinary server logs, and a session cookie so you stay logged in. No advertising trackers, no analytics that follow you off this site.

Your resume goes to an AI provider

This is the disclosure that matters most, so it gets its own heading. The text of your resume, along with your profile and the job postings we are judging, is sent to Google's Gemini API so it can decide which roles fit you and draft cover letters. That is how the service works; there is no version of it that does not do this.

We send the extracted text, never the original file. We do not use your data to train any model, and we do not sell it, rent it, or share it with employers, recruiters, data brokers or advertisers. Google processes it under its own API terms as our processor.

How your resume is stored

Uploaded files are written outside the public web directory, readable only by the application user, under a directory keyed to your account. There is no public URL for them. They are served only through a route that checks the file belongs to the account asking for it.

How long we keep it

For as long as your account exists, plus up to 30 days in encrypted off-site backups. Delete your account and the live data goes immediately; the backup copies age out within 30 days. Old resumes you have replaced are kept while your account is open, so you can go back to one.

Your rights

You can export everything we hold about you as a JSON file, and delete your account and all of it, both from your settings page, without emailing anyone. Deletion removes your profile, resumes and files, board, notes and cover letters, and cancels your subscription.

If you are in the EU or UK, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. If you are in California, the CCPA gives you rights to know, delete, correct and opt out of sale (we do not sell data). Exercise any of them by using the buttons in settings or by emailing [email protected]. We answer within 30 days and we do not charge for it.

Email

We send account email (verification, password resets, billing) which you cannot opt out of while you have an account, and at most one job notification per day, which you can turn off in settings or with the unsubscribe link in any of them.

Cookies

One session cookie, marked secure, HTTP-only and same-site, so that being logged in works. One preference stored in your browser for which board filter you last used. Nothing else, and no third-party cookies.

Sub-processors

• Google (Gemini API) — matching and cover letter drafting.
• Stripe — payments and billing.
• DigitalOcean — server hosting.
• Cloudflare — DNS and TLS in front of the site.

Security and breaches

Passwords are hashed with argon2id. Traffic is encrypted in transit. Resumes sit outside the web root. Backups are encrypted. If we ever suffer a breach affecting your personal data we will tell you by email without undue delay, and within 72 hours where the law requires it.

Children

The service is not for anyone under 16, and we do not knowingly collect their data.

Contact

LogicTree, Inc.
15 Main Street, Suite 12A, Franklin, MA 02038
[email protected]