Privacy Policy

1. Information We Collect

Account and contact data, such as your name and email address. Profile data, such as your work history, education, skills, and preferences. Resume and application content, including the resumes, cover letters, and other documents you upload plus the documents we generate from them. Usage data, such as the jobs you view and match, your credit balance, and how you navigate the Service. Device and technical data, such as IP address, browser type, and operating system. Transactional data, such as your plan and billing history processed by our payment provider.

We do not collect precise geolocation, government identification numbers, or special-category data, and we ask that you do not include such information in your resume or profile.

2. How We Use Information and Our Lawful Bases

We use your information to provide the Service: to create your account, match you to jobs, generate your resume and cover letter, manage credits and subscriptions, and send service messages. We use it to secure the Service, prevent abuse, and troubleshoot. We use aggregated or de-identified usage data to improve matching and document quality. We use your contact data to respond to support requests and, where permitted, to send product updates you can opt out of.

For users in the EEA and UK, our lawful bases are: performance of our contract with you (operating the Service and your subscription), our legitimate interests (security, service improvement, and fraud prevention), compliance with law, and your consent where we rely on it for optional communications.

3. AI Processing of Your Resume and Documents

To generate documents, we send the resume content, profile data, and job details you provide to a third-party AI provider, OpenRouter, for extraction and generation. Job matching runs on our own infrastructure. Do not upload content you do not want processed by our systems. We use third-party AI providers under settings and contractual terms that prohibit the use of your content to train their general-purpose models. AI outputs can be inaccurate, and you should review anything generated before sending it to an employer.

4. When We Share Information

We do not sell your personal information. We share it only with service providers that help us run the Service:

• Stripe processes payments and holds your payment-card data; we do not store full card numbers.
• OpenRouter runs the language models that extract your profile data and write your documents. It receives your resume and profile content and job details, under a zero-retention configuration: your content is not stored and is not used to train models.
• AWS SES sends transactional and notification emails and receives your email address.

We may also disclose information where required by law, to protect our rights or users' safety, or as part of a corporate transaction such as a merger or acquisition, subject to this Policy.

5. Cookies and Analytics

We use essential cookies to keep you logged in and to operate the Service, and we may store preferences in your browser. We use Umami, a self-hosted, privacy-oriented analytics tool, to measure pageviews and a small set of product events (for example, signup completion and application creation) so we can understand how the Service is used. Umami does not use cookies to track you across other sites, and we do not run third-party advertising or interest-based advertising. See Section 8 for your choices.

6. Retention

We retain your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep it to comply with legal, tax, or accounting obligations, to resolve disputes, or to enforce our agreements. Credit and billing records are kept as required by law.

7. International Transfers

We are established in France. We use service providers that may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses, or on a lawful derogation, and we take steps to give your data a comparable level of protection.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You can exercise these rights by emailing support@sckian.com; we may ask you to verify your identity. Users in the EEA and UK also have the right to lodge a complaint with the data protection authority in their country of residence. You may opt out of non-essential emails at any time using the unsubscribe link. We do not discriminate against you for exercising your rights.

9. Security and Children

We use technical and organizational safeguards designed to protect your personal information, including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security; please use a strong, unique password. The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service before they take effect. The "Last Updated" date above shows when this Policy was last revised.

11. Contact

For privacy questions or to exercise your rights, contact us at support@sckian.com.