Privacy Policy

This policy explains what MorshedWorx ("we") collects through Job Search Autopilot, why, and the choices you have.

What we collect

• Account data: name, email, password (stored only as a salted hash), time zone, notification settings, optional phone number.
• Career data: your CV and the master profile built from it, job preferences, standard application answers (including work authorization and any equal-opportunity answers you choose to give).
• Activity data: jobs matched, applications prepared and submitted, screenshots confirming submissions, an audit log of actions.
• Email data: messages sent to your product inbox address, including forwarded emails, and replies sent from it.
• Billing data: handled by Stripe. We store Stripe customer and subscription identifiers, not card numbers.

How we use it

• To find and score jobs, prepare and submit applications you authorize, and manage your inbox.
• To send you digests and alerts by email, SMS or browser notification, as you choose.
• To keep the Service secure, prevent abuse and meet legal obligations.

We do not sell your personal data and do not use it for advertising.

AI processing

To write drafts, score matches and classify email we send relevant parts of your profile, job descriptions and emails to Anthropic's Claude API. We configure this to avoid using your data to train models according to the provider's terms for API customers.

Who receives data

• Employers and their application systems (Greenhouse, Lever, Ashby and others): only what an application requires.
• Service providers: hosting (Vercel and our worker host), database, Anthropic (AI), Mailgun (email), Twilio (SMS, if enabled), Stripe (payments).
• Authorities, where required by law.

Retention and deletion

We keep your data while your account is active. You can ask us to delete your account and associated data; backups roll off within a reasonable period. Submission screenshots and old emails are removed on a rolling schedule.

Security

Data is encrypted in transit, passwords are hashed, sessions use signed cookies, and each user's data is isolated by account. No system is perfectly secure.

Your choices and rights

You can view and edit your profile and settings at any time, pause all activity, and request export or deletion of your data. Depending on where you live (for example California), you may have additional rights to access, correct, delete or limit use of your information. Contact us to exercise them.

Children

The Service is not for people under 18.

Changes and contact

We will post updates here and notify you of material changes. Contact: the support address shown in your account emails.

Draft notice: this document is a working draft and has not yet been reviewed by an attorney.