1. Introduction

Welcome to Rankd ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered job application intelligence platform.

By using Rankd, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our service:

  • Account Information: Name, email address, password (encrypted), and authentication method (local, Google, GitHub)
  • Resumes: PDF resumes you upload for analysis and comparison
  • Job Applications: Job URLs, titles, companies, descriptions, and application status you track
  • Cover Letters: AI-generated cover letters and any modifications you make
  • Interview Prep: Interview questions, answers, and preparation notes
  • Preferences: Theme choices, notification settings, and display preferences
  • Communications: Messages you send us for support or inquiries

2.2 Automatically Collected Information

We automatically collect certain technical information when you use our service:

  • Usage Data: Pages viewed, features used, time spent, and interaction patterns
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and referring pages
  • Processing Logs: Application processing timestamps for rate limiting (free tier users)

3. How We Use Your Information

We use the collected information for various purposes:

3.1 Service Delivery

  • Analyze your resumes against job descriptions
  • Generate personalized cover letters using AI
  • Provide interview preparation materials
  • Track and manage your job applications
  • Enforce rate limits for free tier users
  • Process payments for Premium subscriptions (if applicable)

3.2 Communication

  • Send transactional emails (password resets, account updates)
  • Send weekly/monthly statistics reports (if opted in)
  • Respond to your inquiries and support requests
  • Send important service announcements

3.3 Improvement

  • Analyze usage patterns to improve our features
  • Monitor for technical issues and security threats
  • Develop new features and services

4. Data Sharing and Disclosure

4.1 AI Service Providers

Your job descriptions and resumes are shared with third-party AI providers (OpenRouter, Z.AI) solely for the purpose of generating analysis and content. These providers process your data under their own privacy policies:

  • We do not sell your personal data to AI providers
  • AI providers may process data temporarily for model inference
  • We do not permit AI providers to use your data for training their models

4.2 Service Providers

We may share data with trusted third parties who assist us in operating our service:

  • Hosting Providers: AWS for application hosting and data storage
  • Email Services: Resend for transactional email delivery
  • Authentication Providers: Google and GitHub for OAuth login

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 What We DON'T Do

  • We do not sell your personal information
  • We do not rent or trade your resumes or job data
  • We do not use your data for advertising purposes
  • We do not share your data with third parties for their marketing

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

  • Encryption: Passwords hashed with bcrypt; API keys encrypted with Fernet
  • Secure Transmission: HTTPS/TLS encryption for all data in transit
  • Access Control: User data isolated by account ID; restricted admin access
  • Authentication: Optional OAuth through Google and GitHub

5.2 Data Storage

  • Resumes and cover letters stored securely on AWS servers
  • Database backups performed regularly
  • Automatic deletion of data upon account closure

5.3 Data Retention

  • Active Accounts: Data retained while account is active
  • Deleted Accounts: All personal data permanently deleted within 30 days
  • Rate Limit Logs: Processing timestamps retained for 30 days (free tier users only)
  • Backups: Backup data retained for disaster recovery, securely deleted after 90 days

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update inaccurate or incomplete information
  • Delete: Request deletion of your account and all associated data
  • Export: Download your resumes, applications, and cover letters
  • Object: Opt out of non-essential data processing

6.2 Email Preferences

You can opt out of marketing emails at any time through your Settings page or by clicking the unsubscribe link in our emails.

6.3 Data Portability

You can export all your data at any time from the Settings page. This includes resumes, job applications, cover letters, and interview prep materials.

7. Cookies and Tracking

7.1 Essential Cookies

We use essential cookies for:

  • Maintaining your secure session (authentication)
  • Remembering your preferences (theme, display settings)
  • Protecting against CSRF attacks

7.2 Analytics

We may use analytics tools to understand how our service is used. This helps us improve features and fix issues. Analytics data is anonymized and aggregated.

7.3 Your Choices

You can manage cookies through your browser settings. However, disabling essential cookies may prevent the service from functioning properly.

8. Children's Privacy

Rankd is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we discover we have collected data from a child under 16, we will take steps to delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. This includes:

  • United States: AWS servers for hosting
  • AI Provider Locations: Where OpenRouter and Z.AI process requests

We ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification for significant changes

Continued use of the service after changes constitutes acceptance of the new policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

We will respond to your privacy inquiries within 30 days.