Security

How we protect your account, your CV and your data. Last updated 28 September 2026.

Your connection

Every connection to the website and our servers uses HTTPS, so what you send and receive is encrypted in transit. A plain HTTP request is redirected to HTTPS.

Your password and sign-in

Passwords are stored as scrypt hashes, never as the password itself. You stay signed in through a cookie that the page's own scripts cannot read, and our database keeps only a hash of each session, so a copy of it would not let anyone into your account. Repeated sign-in attempts are rate limited, both per address and per account.

Your CVs

A CV version never changes once it is made: every edit creates a new version, and the database itself refuses to alter an old one. Before an interview you can open exactly the CV you sent. Every line the agent writes is checked against the facts you confirmed, and a line it cannot back up is held for your review.

Where your data lives

On our own server in Singapore, on Amazon Web Services. The website is served by Cloudflare. To read your CV and write tailored ones, we send the text each task needs to an AI provider; the privacy page says which one and where it processes data.

Payments

Paid plans are billed by Polar, which handles your card. We never see or store card details.

You stay in control

We never apply to jobs or contact anyone on your behalf. You can download everything we hold about you, or delete your account and all of it, from Settings at any time. See export and delete.