Your information, shared with purpose.

Account and profile

Your email supports sign-in and service notifications. Profile fields you provide describe your experience and preferences. The matching score compares stated skills with role requirements and supports human review; it does not make hiring decisions.

CV versions

Files uploaded in the dashboard are kept in private storage. An application keeps the version submitted with it. Uploading a newer CV does not replace a previously submitted version.

Applications and projects

We retain proposals, profile snapshots, matching explanations, application status, invitation deadlines and confirmation records so candidates and employers can manage recruitment.

Messages and reports

Only participants can access their application conversations. Reports are accessible to the Tier1 moderation team. Authorized administrators may handle data when required for support and service operation.

Workspace activity

Saved jobs, partner visits, notification status and operational event records support the features and reliability of the service.

Supabase

Provides authentication, the database and private CV storage. Access policies restrict records to their owners and the relevant application participants.

Optional CV reading

The extended onboarding reader sends CV content through OpenRouter to the configured model provider. Dashboard CV uploads store the file without invoking this reader. You can fill dashboard profile fields manually.

Transactional email

When email delivery is configured, the provider receives your address and an event notification linking to your workspace. These notifications do not include CV files or private message text.

Hosting

The hosting service processes ordinary request information, including the requested address, browser information and IP address.

PostHog analytics

Analytics run only when configured and after your consent, and nothing is ever sent from our servers, so declining means no product events exist for you at all. What is recorded is the work, not you: the pages visited, which roles are opened and applied to, what is typed into the board’s search box, which filters are used, and counts describing a profile - how many languages and fields it lists, whether a CV was read, how long that took and why it failed. Once signed in, these are tied to a random account identifier, never your email address. Your name, your email, your CV’s contents, your application messages and your private conversations are never included.

How you found us

When you create an account, we record with it how that visit began: the site that linked to us (without its query), the campaign tags and ad platform in the link you arrived by, the first page you saw, which button you pressed to sign up, and the country your connection came from (read from the IP address, which itself is not kept). Pressing Apply or Join while signed out is counted too, against a random number that exists only for that visit. None of this uses cookies or browser storage, and it is kept in our own database, never sent to analytics providers.

Vercel Web Analytics

Counts page views without cookies or any identifier that follows you between visits, so it runs without a consent choice. It receives the page address, with everything after the path removed except campaign tags, plus the referring site, country and device type.