Last updated: 30 August 2026
When you sign in, we collect your name and email address via Google OAuth (provided by Supabase Auth). We also store content you provide: your CV, target roles, salary preferences, location, work preferences, phone number, LinkedIn URL, and demographic fields you complete during onboarding. Job descriptions you submit for evaluation are processed by Google Vertex AI (Gemini) and stored with your evaluation report. If you use the Mock Interview feature, your answers and AI-generated scores and feedback are stored against your account. We do not store credentials for your email, LinkedIn, or any employer job portal. We do not store payment card details - all payment processing is handled by DodoPayments.
Your CV and profile are processed by Google Vertex AI (Gemini) to generate job evaluations, tailored CV drafts, cover letters, and LinkedIn profile audits. Per Vertex AI's paid-tier terms, your data is not used to train Google's models. Your email is used to send your daily concierge report (via Resend) and other transactional notifications. We do not sell, rent, or share your personal data with third parties for marketing purposes.
These services handle your personal data on our behalf, each under their own privacy policy:
Advertising measurement. When we run ads, we report back that a signup or subscription happened so we can tell which adverts work. Your email address is hashed before it leaves your browser, so these services receive an irreversible fingerprint rather than the address itself. This applies to Google Ads and Reddit.
Sources we query, which receive nothing about you. To find jobs we search public job boards using only a role title and a country. These services never receive your name, email, CV or any other personal data:
For supported job boards (Greenhouse, Lever, Ashby), our Chrome extension submits applications using your own browser session - we do not store, request, or transmit any portal passwords. For boards we cannot auto-submit (e.g. Workday), we share the tailored CV and cover letter with you so you can submit the application directly. Your email and LinkedIn accounts remain entirely yours - we do not access either.
We use cookies to keep you signed in, to remember how far you have got through onboarding, and to remember which advert or link first brought you to the site so we know which channels work. We also use analytics and advertising cookiesfrom PostHog, Google Ads and Reddit, for the purposes described in section 3. We do not sell your data and we do not allow these services to use it to build profiles for anyone else's advertising. You can block these with any standard browser setting or content blocker, and the site will work normally without them.
Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time under GDPR Article 17 (Right to Erasure) by emailing abhimanyu@tryzipply.com. We action deletion requests same-day in the vast majority of cases, and within 30 days at the latest.
Questions about this policy? Email abhimanyu@tryzipply.com.