Privacy Policy

What we collect

MyChitoWork stores what you put into it to run your job search: your profile (name, role, skills, target roles), resumes and cover letters (including uploaded PDF files), job applications and their status, contacts you track, email drafts, interview questions and answers, and your STAR stories. We also keep account basics (email address, plan), a ledger of your AI feature usage, and first-party product-usage events (e.g. "completed onboarding") that we use to improve the product — never shared, never used for advertising, and included in your data export.

How AI features use your data

When you use an AI feature (tailoring a resume, drafting an email, generating interview questions), the relevant content — for example your resume and the job description — is sent to Anthropic's Claude API to produce the result. We send only what the feature needs. Anthropic does not train models on this data under its commercial API terms. AI contact-finding uses web search on public sources only.

Who else processes your data

• Supabase — database, authentication, and file storage (hosted in the United States)
• Vercel — application hosting and web analytics
• Anthropic — AI processing, as described above
• Stripe — payments; we never see or store your card number
• Resend — transactional email (sign-in codes, digests)

We do not sell your data or share it with advertisers. Ever.

Information about other people

Some features let you add information about people who are not MyChitoWork users — for example, a contact you're tracking for a role, or an interviewer's name, public LinkedIn profile, and photo for interview practice. Only upload material you have a legitimate reason to use, from sources the person made public. This information is used solely to prepare you: it stays private to your account, is never used to contact the person or shared with anyone else, and is deleted when you delete the practice session, the contact, or your account. If you are that person and want material about you removed, email us and we'll delete it promptly.

Emails

We send sign-in codes and, if enabled, a daily follow-up digest. You can turn the digest off in Settings → Notifications at any time.

Your rights

You can edit or delete any content you've created directly in the app. Settings → Profile lets you download all your data as JSON and delete your account yourself, immediately — no email required. Deleting your account permanently removes your profile, resumes, applications, contacts, drafts, stories, uploaded files, and practice history. Community posts you shared with a group are removed along with your identity when your account is deleted.

Security

All data is encrypted in transit and at rest. Access is isolated per account at the database level (row-level security), so your data is never visible to other users.