Privacy Policy — Talnt.Fit

1. Information We Collect

Account information

When you create an account we collect your name, email address, and authentication credentials (or OAuth tokens if you sign in via LinkedIn or Google).

Resume and profile data

You may upload a resume (PDF or DOCX) and fill in your professional profile — work history, education, skills, and job preferences. This data is stored securely and used solely to power AI job matching for you.

Job search activity

We record the searches you run, the jobs you view and save, and the application statuses you set in your tracker. This lets us show your history and improve ranking quality over time.

Usage and technical data

We collect standard server logs (IP address, browser, pages visited, timestamps) and aggregate usage metrics (feature adoption, error rates). We do not use third-party analytics trackers on authenticated pages.

Payment information

Payments are processed by Stripe. We never see or store your card number. We receive a Stripe customer ID, plan status, and subscription period.

2. How We Use Your Information

To authenticate you and maintain your session
To power AI job matching, ranking, and resume tailoring — your profile is serialised and sent to OpenRouter (Claude AI) under our API key; see Section 5
To send transactional emails: verification codes, job search completion notices, and resume analysis results
To enforce usage limits and manage your subscription via Stripe
To debug errors, improve reliability, and develop new features
To comply with legal obligations

We do not sell your data, use it for advertising, or share it with third parties for their own marketing.

3. Data Retention

Your account and profile data is retained for as long as your account is active. Job search results and AI rankings are kept for 90 days, after which they are automatically purged. Uploaded resume files are stored in Cloudflare R2 and deleted when you remove them from your account or delete your account. You may request deletion of all your data at any time by contacting us.

4. Data Security

All data is transmitted over HTTPS/TLS. Passwords are hashed with bcrypt (never stored in plain text). Database access is restricted to application credentials with least-privilege roles. Uploaded files are stored in a private Cloudflare R2 bucket. We perform regular security reviews and dependency audits.

5. Third-Party Services

We use the following sub-processors:

Service	Purpose	Data shared
OpenRouter / Anthropic	AI job matching & resume analysis	Resume text, job description, profile summary
Stripe	Payment processing	Name, email, billing address
Cloudflare R2	Resume file storage	Uploaded resume files
Resend	Transactional email	Email address, OTP codes
Upstash Redis	Background job queues	Job IDs, processing state
Sentry	Error monitoring	Stack traces, anonymised session context

6. Cookies

We use a single session cookie set by NextAuth.js to maintain your login state. We do not use third-party advertising or tracking cookies. You can clear cookies in your browser at any time; this will sign you out.

7. Your Rights

You have the right to:

Access — request a copy of all data we hold about you
Correction — update incorrect profile information directly in the app
Deletion — delete your account and all associated data
Portability — export your profile data in JSON format (coming soon)
Opt-out — unsubscribe from non-essential emails

To exercise these rights, contact us.

8. Children's Privacy

Talnt.Fit is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting a notice in the app or emailing your registered address. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact us or email privacy@talnt.fit.