Your profile. Your choices.

Information the application stores

Account records include your name, email address, role, verification state, acceptance time, and a password hash. Verification and password-reset tokens are stored as hashes. If you enable an authenticator, its secret is encrypted with the operator’s application key.

You may also provide profile text, general location, skills, an optional resume, an organization profile, job submissions, application introductions, access-request reasons, and subscription-interest preferences. Payment-provider identifiers and subscription status are stored if optional billing is configured; card details are handled by Stripe.

Private profile and registry discovery

A new candidate profile is not discoverable in the employer registry. If you choose visibility and provide consent, approved employers can search your professional headline, specialty, general location, experience level, and skills. Directory results exclude your name, email, full summary, and resume download link. A separate optional setting shares your photo and the first 240 characters of your introduction with approved employers. This is off by default, and a photograph can identify you. Turning that option off immediately removes those details from the directory and blocks image access.

An employer must submit a recruitment reason to request more access. You can approve, decline, or later revoke a request. An approved registry grant lasts seven days. Hiding the profile revokes pending and approved registry requests.

Applications are a separate sharing decision

Applying to a role shares your name, email, introduction, and current resume with the organization responsible for that role, subject to a clean scan for file downloads. You do not need registry visibility to apply.

You can withdraw an application from the candidate dashboard. That ends access through the application and removes it from the employer’s active applicant view. Hiding registry visibility alone does not withdraw it. A separate valid permission, if one exists, is assessed separately.

Resume storage, scanning, and replacement

Resumes are stored outside the public web directory with random storage filenames. Downloads check the account and current permission on every request. Employers must also have an approved organization and a clean scan result for the file. A missing, failed, or unresolved scan leaves it quarantined.

The current account owner can retrieve or delete their own file. Uploading a replacement revokes approved registry grants; active applications retain access to the current file, subject to scan status. Deletion removes the current stored resume.

The configured scanner processes the file when that service is enabled. The operator must select an appropriate service and its data-processing terms. Resume storage is access controlled, but this build does not claim end-to-end encryption or that a scanner can guarantee a file is harmless.

What revocation cannot undo

Revoking a grant, withdrawing an application, or deleting a file stops future access through the relevant application controls. It cannot retrieve a copy someone previously downloaded, copied, or recorded. Employers remain responsible for handling those copies appropriately.

Avoid sharing unnecessary sensitive information in the first place. Leave out identity documents, home addresses, health information, financial information, confidential research, sensitive facility details, and personal information about other people.

Cookies, hosting, and external services

Session cookies support sign-in and security. The application does not include advertising trackers or third-party analytics in this release. Requests and files are also processed by the hosting service, whose own logs and backups are separate from application records.

Account messages use the configured mail service. Optional scanner and payment services are used only when configured. Public reference links take you to independent sites with their own practices. These references are not platform partners merely because a guide links to them.

Retention and deletion

Account and related active records remain until you delete the account. Deletion removes the active profile, current resume, applications, access requests, preferences, and associated employer records. Security audit references identifying that account are de-identified. An active paid subscription must be cancelled before deletion.

Scheduled maintenance retains security audit and webhook receipt records for up to 90 days, clears expired verification/reset tokens and rate-limit windows, and removes day-old orphaned uploads. Grant and job expiry checks apply during access even between maintenance runs.

Historical host logs and backups may have their own retention and deletion schedule. The operator must configure and disclose that schedule; no particular backup-erasure timeframe is promised here.

Your account controls

The service is intended for adults aged 18 or older. The contact page explains the currently available support route. The operator still needs to supply its verified public identity and privacy contact before commercial launch. Policy version: November 9, 2026.

• Edit a profile and choose whether to make its limited professional details discoverable.
• Approve, decline, or revoke registry access requests.
• Withdraw an application to end access through that application.
• Replace, retrieve, or remove the current resume.
• Save or remove interest in a future career digest; delivery is not active in this release.
• Export account records as JSON and download the resume separately.
• Permanently delete the account after confirming the password and cancelling active billing.