Privacy & your data

This service holds a CV, which is personal data. Sri Lanka's Personal Data Protection Act No. 9 of 2022 applies. Here is plainly what happens.

What we keep

• Your email address — it is how you sign in.
• The text of your CV — extracted when you upload. The file you upload is never written to disk and never stored. It is read in memory and discarded in the same request.
• Your profile — name, degree, skills, job types. Built from your CV by the AI and editable by you.
• The letters you generate and edit, so you can come back to them.
• A daily count of AI letters, to keep one person from using up the shared allowance.

What we never keep

• No passwords. Sign-in is a one-time emailed link, and even that is stored only as a hash.
• No email account credentials. We cannot read your mailbox and we cannot send mail as you.
• No payment details. Nothing here is charged for.
• No advertising trackers or third-party analytics.

Who else sees it

Your CV text and the advert text are sent to Google Gemini to build your profile and write your letters. Nothing else about you is shared with anyone. Job adverts come from public listings and are collected once for everyone, so no one can tell which jobs you looked at.

Sending applications

We never send email on your behalf. Sending happens in your own Gmail or mail app, with you attaching your own CV and pressing Send. That is deliberate: what goes out under your name should always be something you read first.

How long we keep it

For as long as you use the service. Delete your account from the account page and everything above is removed immediately — not queued, not archived. Job adverts are dropped from the pool three weeks after they were last seen.

Your rights

You can see everything we hold about you on the account and profile pages, correct it there, and delete all of it in one click. For anything else, write to khclakshan999@gmail.com.