Privacy Policy

• Account data — name, email address, password (hashed), and authentication provider (e.g. Google) when you sign up.
• Profile data — the CV, skills, preferences, income goals, location and other information you add to your profile.
• Application data — opportunities you save, apply to, track, and the documents you upload or generate.
• Usage data — pages viewed, features used, device and browser information, and approximate location derived from IP.
• Payment data — billing details handled by our payment processor (Stripe). We receive the subscription status and last four digits of the card; we do not store full card numbers.
• Communications — messages you send to us via email or in-app chat.

• To provide, personalize and improve the Service (matching opportunities, generating CVs, scoring fit).
• To process payments and manage subscriptions.
• To send transactional emails (account, security, billing) and product updates you can opt out of.
• To detect, prevent and respond to abuse, fraud and security incidents.
• To comply with legal obligations and enforce our Terms.

To power features like the Copilot, application drafting, CV optimization and interview coaching, we send relevant portions of your profile and prompts to AI providers (e.g. Lovable AI Gateway and the underlying model providers). Providers process this data on our behalf to return results; we instruct them not to train their models on your content where that option is available.

We use a small number of strictly necessary cookies for authentication and security, plus privacy-respecting analytics to understand product usage in aggregate. You can clear cookies from your browser at any time; doing so will sign you out.

We do not sell your personal data. We share it only with:

• Service providers that operate our infrastructure (hosting, database, email, payments, AI) under contracts that require confidentiality and appropriate security.
• Opportunity providers — only when you explicitly apply to an opportunity through the Service.
• Authorities, when required by law or to protect rights, safety and the integrity of the Service.
• An acquirer, in the event of a merger, acquisition or asset sale, subject to equivalent privacy commitments.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data when it crosses borders.

We keep your account data while your account is active. If you delete your account, we delete or anonymize personal data within 30 days, except where we are required to keep it for legal, accounting or fraud-prevention reasons.

Depending on where you live, you may have rights to access, correct, delete, port or restrict processing of your personal data, and to object to certain uses. To exercise these rights, write to privacy@staffexplorer.app. You also have the right to lodge a complaint with your local data-protection authority.

We use industry-standard measures — encryption in transit, access controls, audit logging, and least-privilege role-based access — to protect your data. No service is 100% secure; please use a strong, unique password and contact us immediately if you suspect a security issue.

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced via the Service or by email; the "Last updated" date at the top will always reflect the latest version.

Privacy questions or requests: privacy@staffexplorer.app. General contact: hello@staffexplorer.app.