Privacy policy

Who is responsible

The operator of Tailr is the controller of your personal data. For anything about your data, write to [email protected].

What we collect

• Account: your name, email address and profile picture, received from the sign-in provider when you log in.
• Resumes: the PDFs you upload, the text read from them and the versions you edit in the resume library. Resumes can contain anything you put in them, so leave out what you don't want processed (date of birth, photo, health, religion and the like).
• Searches: the role, location and filters you search with, the matched jobs and their scores, and the application status and notes you track.
• Billing (Pro only): your plan, subscription status and Stripe customer ID. Card details are entered on Stripe's pages and never reach our servers.
• Technical data: a session cookie and the IP address and request details in short-lived server logs.

Why, and on what legal basis

• Matching your resume to jobs with an AI scoring service: your consent (Art. 6(1)(a) GDPR, and Art. 9(2)(a) for any special category data your resume contains). You give it before your first search and can withdraw it at any time in Settings → Privacy.
• Running your account (sign-in, resume library, search history): performing our contract with you (Art. 6(1)(b)).
• Billing a Pro subscription: performing our contract with you (Art. 6(1)(b)) and keeping invoices as tax law requires (Art. 6(1)(c)).
• Keeping the service safe (virus-scanning uploads, server logs): our legitimate interest in security (Art. 6(1)(f)).

We don't sell your data, show ads, or use analytics or tracking. We never send your resume or scores to employers or job boards.

Who receives it

• Sign-in provider (WorkOS): your name, email and login details, to authenticate you.
• AI scoring provider: the text of your resume and of job postings, to score how well they match. It acts as our processor.
• Payment provider (Stripe): if you subscribe, your email, payment details and billing address, to take payments and send invoices.
• Job boards: the role and location you search for. Never your resume or your identity.

Some of these providers process data outside the EU/EEA. Where they do, the transfer relies on an adequacy decision (such as the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses. Virus scanning, fonts and storage run on our own servers.

Automated scoring

Match scores, filters and keyword suggestions are produced automatically. They only order the jobs you see. Nobody else sees them and they have no legal or similar effect on you, and you are free to apply to any job regardless of its score.

How long we keep it

Your resumes, searches and applications stay until you delete them or your account. Deleting your account removes all of them, including uploaded files, straight away, and deletes your sign-in account. A Pro subscription is cancelled when you delete your account; Stripe keeps the invoices for as long as tax law requires. Sessions end after two hours of inactivity. Server logs are rotated and kept only briefly.

Cookies

We only set cookies the app needs: the session and security (XSRF-TOKEN) cookies that keep you signed in, and two preference cookies for the colour scheme and sidebar state. There are no analytics, advertising or third-party cookies, so there is nothing to opt out of.

Your rights

• Access and portability: download everything we hold about you as JSON in Settings → Privacy.
• Rectification: edit your name in Settings → Profile and your resumes in the resume library.
• Erasure: delete your account in Settings → Profile.
• Withdraw consent: in Settings → Privacy. This doesn't affect processing that already happened.
• Restriction and objection: write to [email protected].
• Complaint: you can complain to the data protection authority where you live or work.

Changes

If this policy changes in a way that affects how we use your data, we'll ask you to agree again before you continue using Tailr.