Privacy Policy

1. Introduction

Postulis ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our AI-powered job application assistant.

2. Information We Collect

2.1 Information You Provide

• Account Data: Full name, email address, and password when you create an account.
• CV / Profile Data: Resume text, work experience, education, skills, and other professional information you provide for AI generation.
• Job Descriptions: Text of job postings you submit for analysis.
• Preferences: Language, tone, output format, and other settings.

2.2 Automatically Collected Data

• Usage Data: Pages visited, features used, generation counts, and interaction patterns.
• Device Data: Browser type, operating system, screen resolution, and IP address.
• Cookies: Authentication tokens and session cookies necessary for the Service to function.

3. How We Use Your Data

• Service Delivery: To generate tailored CVs, cover letters, interview prep, and skill gap analyses.
• Account Management: To authenticate you, manage your subscription, and provide customer support.
• Improvement: To analyze usage patterns and improve the Service (aggregated, anonymized data only).
• Communication: To send transactional emails (confirmations, billing) and, with your consent, product updates.

4. AI Processing & Third-Party Services

We also use the following third-party services:

• Supabase: Authentication and database (hosted in the EU/US).
• Dodo Payments: Payment processing. We do not store your credit card details.
• Vercel: Hosting and infrastructure.

5. Data Storage & Security

• Account data is stored securely on Supabase with encryption at rest and in transit.
• Application data (CVs, generated content) is stored locally in your browser (localStorage) and is not transmitted to our servers unless you explicitly generate content.
• We use HTTPS/TLS encryption for all data transmissions.
• We implement industry-standard security measures including access controls, monitoring, and regular security reviews.

6. Data Retention

• Account Data: Retained for as long as your account is active. Deleted within 30 days of account deletion.
• Generated Content: Stored locally in your browser. You can clear it at any time from Settings.
• AI Processing: CV text and job descriptions sent to the AI are not stored by us after generation is complete. They are processed in memory only.
• Payment Records: Retained for 7 years as required by financial regulations.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights:

To exercise any of these rights, contact us at privacy@postulis.io.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. No third-party analytics cookies are used without your explicit consent.

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us