Privacy Policy

We collect: (1) Account information you provide: your name, email address, phone number, and optionally a LinkedIn URL. (2) Resume content you upload or enter, including employers, job titles, dates, education, skills, and bullet points. This content may include information you choose to disclose such as veteran status, disability, national origin, or similar details; you control what you enter. (3) Job descriptions and related text you submit for evaluation. (4) Technical and usage data, including aggregate analytics about visits to the Service (visitor counts, pageviews, traffic sources, country, device and browser type) collected by our hosting platform. (5) If you make a payment, payment information processed by our payment processor; we do not store full card numbers.

We use your information to provide and operate the Service, including AI-powered resume analysis and tailoring; to manage your account and authenticate you; to respond to support requests; to maintain security and prevent abuse; and to communicate with you about the Service.

We do not sell your personal information. We share information with the service providers (subprocessors) that power the Service:

We use Anthropic, PBC to provide AI-powered resume analysis and tailoring through the Claude API. Anthropic acts as a data processor under its Commercial Terms of Service and Data Processing Addendum, does not train its foundation models on the inputs or outputs we send through the API, and deletes API inputs and outputs from its backend within 30 days, except where required by law, where a feature requires longer retention, or where content is flagged as violating Anthropic's Usage Policy (in which case content may be retained up to 2 years and safety-classifier scores up to 7 years). Anthropic processes our API data in the United States.

We use Supabase, Inc. to provide our managed database, authentication, and storage. Your account data and resume content are hosted by Supabase on Amazon Web Services infrastructure in the AWS US West (Oregon) region and remain in that region. Supabase acts as a processor of customer data under its Data Processing Addendum.

Our application is built and hosted on Lovable (Lovable Labs Incorporated), which acts as our hosting and infrastructure provider and provides a built-in analytics dashboard reporting aggregate metrics about visits to the Service.

We also use third-party job-market data providers to supply job and market information. These providers do not receive your personal information or resume content.

We may also disclose information to comply with law, enforce our Terms, or protect the rights, safety, or property of Xotter or others.

We use generative AI (Anthropic's Claude API) to analyze the resume content and job descriptions you submit and to produce tailored resume drafts. When you submit content, the text is transmitted to Anthropic over an encrypted connection. Under Anthropic's Commercial Terms, Anthropic does not use this content to train its models and deletes it from its backend within 30 days, with limited exceptions described at privacy.claude.com. AI-generated output may be inaccurate, incomplete, or similar to output generated for other users from similar inputs. You are responsible for reviewing all AI-generated content before use.

We retain your account information and resume content for as long as your account is active. When you delete your account, we delete your resume content and account records, subject to limited exceptions: we may retain billing records as required for tax and accounting purposes, security and fraud-prevention logs, and routine backups that cycle on a rolling basis. Aggregate, de-identified analytics may be retained.

You may access, correct, or delete your information. You can edit your information in the app at any time and delete your account using the in-app delete option, or by emailing jay.cadmus@innovixdynamix.com. We will acknowledge requests promptly and respond within 45 days. We make deletion as straightforward as account creation and do not require unnecessary steps to delete your data.

The Service is intended for users age 13 and older. Consistent with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13, and if we learn we have, we will delete it. If you are under 18, you should use the Service only with the consent and involvement of a parent or legal guardian. If you believe a child under 13 has provided us personal information, contact jay.cadmus@innovixdynamix.com and we will delete it.

We use reasonable technical and organizational measures to protect your information, described on our Security page. No method of transmission or storage is completely secure.

We handle personal information in accordance with applicable US federal and state privacy and data-protection laws.

If a data breach affecting your personal information occurs, we will notify you as required by applicable law.

The Service uses cookies and similar technologies necessary to keep you signed in and to operate core features. Our hosting platform collects aggregate analytics about visits to the Service as described above. We do not use your information for third-party advertising.

We may update this Privacy Policy. If we make material changes, we will provide notice through the Service and update the "Last updated" date, and where required we will ask you to review and accept the updated policy before continuing to use the Service.

Questions or requests: jay.cadmus@innovixdynamix.com.