Privacy Policy

Information you provide.

• Account information — email address and authentication credentials (managed by our authentication provider; we never see your password in plain text).
• Resume and career data — the resume files you upload and the structured information we derive from them: work history, education, skills, certifications, competencies, and career-path analysis.
• Application profile — information needed to complete job applications, such as your name, phone number, mailing address, work-authorization status, salary expectations, and location/relocation preferences.
• Payment information — payments are processed by PayPal. We receive transaction confirmations and subscription status; we do not receive or store your full card or bank details.

Information collected automatically.

• Usage data — pages viewed, features used, approximate location derived from IP address, browser and device information, collected through cookies and analytics tools (PostHog, Vercel Analytics).
• Application activity — the jobs you save, dismiss, approve, and apply to, and evidence of submitted applications (including confirmation screenshots) so you can track outcomes.

• To analyze your resume and recommend career paths and matching jobs.
• To generate application documents (tailored resumes, cover letters, answers to application questions) grounded in your real career history.
• To complete and submit job applications to employers only for the specific applications you approve, and to keep evidence of each submission for your records.
• To operate, secure, debug, and improve the service.
• To manage subscriptions, billing, and application quotas.
• To communicate with you about the service (transactional messages, support).

Core features of the service are powered by large language models. Your resume text, the documents we generate for you, and job-posting content are processed by third-party AI infrastructure providers acting as our service providers, solely to deliver the features described above. We do not use your personal information to train our own AI models. AI-generated application content is always presented to you for review, and nothing is submitted to an employer without your approval.

• Employers and their hiring systems. When you approve an application, we transmit your application materials (resume, contact details, answers) to that employer through its applicant tracking system (for example Ashby, Greenhouse, or Lever). From that point the employer's and its vendor's privacy policies govern that copy of your information.
• Service providers that host and operate the platform under contractual confidentiality: cloud hosting (Vercel, Render), database/authentication/file storage (Supabase), payment processing (PayPal), product analytics (PostHog, Vercel Analytics), and AI infrastructure providers (Section 3).
• Legal. When required by law, to protect our rights, or as part of a corporate transaction (merger, acquisition), with notice where practicable.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use essential cookies to keep you signed in and analytics cookies to understand how the product is used. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in from working.

We keep your information for as long as your account is active. You may delete individual resumes from your account at any time, and you may request deletion of your account and associated personal data (Section 8). Application evidence is retained while your account exists so you can prove what was submitted and when. We may retain limited records where required for legal or accounting purposes.

Data is encrypted in transit (TLS) and stored with access controls in our infrastructure providers' systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we limit access to personal data to what the service requires.

You can access and update most of your information directly in the product. For access, correction, export, or deletion requests, contact support@serendipath.com. We respond to verified requests within the timeframes required by applicable law, and we will not discriminate against you for exercising your rights.

California residents have the right to know, correct, and delete personal information we hold about them. We do not sell or share personal information as defined by the CCPA/CPRA.

EEA/UK residents: we process your data to perform our contract with you (service features, billing), for legitimate interests (security, product improvement), or with your consent where required. You additionally have rights to portability, restriction, objection, and to lodge a complaint with your supervisory authority.

Our infrastructure providers operate in the United States and other jurisdictions. By using the service you understand that your information is processed where those providers operate, which may be outside your country of residence.

The service is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 16; if you believe a minor has provided us data, contact us and we will delete it.

We may update this policy as the service evolves. Material changes will be announced on the site, and the "Last updated" date above always reflects the current version. Continued use after changes take effect constitutes acceptance.

Questions or requests: support@serendipath.com