Privacy in Plain English
Privacy policies are written for lawyers. This page is written for you. Here is exactly what we collect, who can see it, and what you can do about it, with no legal jargon.
The Short Version
We collect what we need to help you land a job: your career history, the jobs you are targeting, and the documents you create. We do not sell it, share it with advertisers, or let other users see it. We use it to power the AI features that make your applications stronger, and we delete it the moment you ask.
And if you choose to delete your account, we delete it completely. Most companies hoard your data forever. We think that's wrong.
What We Collect
Everything we store, who handles it, and why.
Email & Password
Used to create and secure your account. Your password is never stored in plain text. Firebase Auth handles hashing and salting.
Professional Dossier
Your career history, job titles, companies, skills, achievements, education, and certifications. This is the core of what makes greatfit.ai work.
Saved Opportunities
Job descriptions you are targeting, fit analyses, and your progress through each application.
Generated Documents
Resumes, cover letters, and portfolio pages created through greatfit.ai. Stored until you delete them.
Payment Information
If you purchase tokens, Stripe handles your card number. We only ever see the last four digits and the transaction amount.
Support Tickets
Messages you send through our Help & Support system, stored to track and resolve your requests.
Cookie Preferences
Whether you accepted or declined non-essential cookies. Stored in your browser, and on your account if you are signed in, so the choice follows you.
Page Version
A randomly generated id, and the name of the page version it selected for you. Set whether or not you accept analytics, because they are what keeps the site from showing you a different version on every visit. They say nothing about who you are, and the id expires after 90 days.
Where Your Resume Goes
Every step a document takes after you upload it, in order.
- 1
You upload it
Before anything reads the file, it is checked. Files over 10 MB are refused. A file has to really be the type it claims, so a program renamed to look like a PDF is turned away. Word documents with macros and PDFs with obvious embedded scripts are refused too.
- 2
We read the text
Our server pulls the text out of the document, and the original file is not kept. If the text contains something that looks like a Social Security or card number, it is flagged so we can review it. It is not blocked, because long runs of digits in resumes are usually harmless.
- 3
AI builds your dossier
The text is sent over encrypted connections to the AI providers we use, Google, OpenAI and Anthropic, through their business APIs. They do not use it to train their models. The AI never receives your password or payment details.
- 4
Your dossier is stored
Your profile, career history and evidence are kept in Google Firebase, encrypted at rest. The working copy of your document's text, and the AI's intermediate results, are deleted 24 hours after upload. Only the finished dossier remains.
- 5
Who can see it
Only your own account can read or change your data, and no other user can reach it. If you ask for help, an administrator can open your account to troubleshoot. Every time that happens it is recorded, and personal details are hidden on that screen. Nothing you upload is used to compare AI models unless you have explicitly agreed to take part.
- 6
You delete it
Deleting your account removes your dossier, your applications, everything generated for you, any files saved under your account, and your sign-in. The working copy of an upload from the last day is cleared on its own 24-hour schedule.
Who Can See Your Data
A full list of every third-party service that touches your information, and exactly what they receive.
Google Firebase
Authentication, database, hosting, and app verification.
Data shared: Email, password hash (managed by Firebase Auth), all dossier and application data (stored in Firestore).
AI providers: Google, OpenAI and Anthropic
Power the AI features (dossier analysis, resume generation, interview coaching). Which one runs depends on the feature.
Data shared: Career content and job descriptions, sent through their business APIs, which do not use it for training. Never receives your email, password, or payment info.
PromptChamp
Compares AI models so we can choose which one runs each feature. It is an evaluation service we operate.
Data shared: AI inputs and outputs, only from accounts whose owners have explicitly agreed to take part. Nothing from anyone else.
Stripe
Payment processing for tokens and subscriptions.
Data shared: Payment card details (handled entirely by Stripe). We only receive confirmation of payment and the last 4 digits.
Vercel
Hosting and serverless infrastructure.
Data shared: Server logs (IP address, request paths). No direct access to your career content.
Sentry
Error reporting, so we can find and fix what breaks.
Data shared: Technical details of an error and the page it happened on. For one session in ten, and any session that hits an error, a recording of the page's layout with all text and images masked.
SendGrid
Delivers account and support email.
Data shared: Your email address and the content of the emails we send you.
PostHog
Product analytics: which pages and features get used.
Data shared: Page views and clicks. Linked to your account only if you accept analytics cookies; otherwise anonymous, as described under Cookie Preferences below.
JSearch and Adzuna
Job listings for job search.
Data shared: The search terms and location you enter. Nothing about your account.
YouTube (Google)
Plays the demo video on our landing page, only after you press play. Until then the page shows a still image from us and nothing loads from YouTube.
Data shared: Once you press play, your IP address and browser details, through YouTube's privacy-enhanced domain, youtube-nocookie.com. Nothing about your account.
Nobody else. We do not share data with advertisers, data brokers, recruiters, or any other third party. If this ever changes in the future (for example, an opt-in job matching program), we will ask for your explicit consent first.
Your Controls
You are not a passenger. Here is everything you can do, and the legal rights that back it up, no matter where you live.
Delete Everything
Go to Account, then Privacy & Data and we will permanently purge your entire account: dossier, generated documents, opportunities, support tickets, and your login credentials. We require your password and the word "DELETE" to prevent accidents.
This is the real thing: a full, irreversible wipe across every system that holds your data. There is no undo.
Zero File Retention
Uploaded files are read in memory, and the original file is never saved. The text pulled from it is kept for up to 24 hours while your dossier is built, then deleted. Only your structured career data remains.
Multi-Factor Authentication
You can enable phone-based MFA in Account, then Security to add a second layer of protection to your account. When enabled, logging in requires both your password and a one-time SMS code sent to your phone. Even if someone steals your password, they cannot access your account.
Cookie Preferences
When you first visit greatfit.ai, we ask whether you accept non-essential cookies (like analytics). If you click Decline, we set no analytics cookies and link nothing to your account. We still count anonymous activity, such as page views and clicks, using an identifier that PostHog derives on its own servers from a value that changes every day and is then thrown away. Nothing connects one day to the next, and nothing connects it to you. Session replay and surveys stay off entirely. Your choice is saved in your browser, and if you are signed in, on your account too, so it follows you to other devices.
Two small cookies are set either way, because they are how the site decides which version of a page to show you and keeps that choice steady rather than reshuffling on every visit. One holds a randomly generated id, the other the name of the page version you drew. Neither contains anything about you, and the id is kept for 90 days.
Your Legal Rights
The controls above are your day-to-day power over your data. The rights below are the floor, guaranteed under GDPR (EU/UK) and CCPA (California), and honored for every greatfit.ai user regardless of where you live.
Right to Access
See exactly what personal data we hold about you.
Right to Correction
Fix anything that is inaccurate.
Right to Deletion
Have all your data permanently removed.
Right to Portability
Get a copy of your data in a usable format.
Right to Opt-out
Decline non-essential cookies and marketing.
Right to Non-discrimination
We will never treat you differently for exercising your privacy rights.
To exercise any right, contact us through Support.
Children's Privacy
greatfit.ai is built for working professionals, not kids. We don't market to anyone under 16, and we don't knowingly collect data from them. If we ever find out we have, we delete it immediately.