Privacy Policy

Account data: your email address, name, a hashed password and your language preference.

Content you create: resumes (including the personal details, work history, education, skills and projects you enter), saved job postings, matches, tailored resumes, cover letters, contacts, follow-ups and interview sessions.

Usage data: a daily counter of AI requests, used to enforce the free-plan limit, and short-lived rate-limit counters keyed to your IP address to protect the login and password-reset endpoints.

All application data is held in a PostgreSQL database hosted by Neon in the AWS eu-west-2 region (London). Passwords are stored only as bcrypt hashes and are never recoverable.

Anthropic — receives the resume or job text relevant to an AI request, in order to produce the score, match, tailored resume, cover letter or interview feedback you asked for.

Resend — receives your email address to deliver password-reset and job-alert emails.

Stripe — handles payment. Card details go straight to Stripe; they never reach our servers. We store only a Stripe customer identifier.

Vercel — hosts the application and processes request metadata, including IP address, as part of serving and securing the site.

We do not sell your data and we do not share it with employers or recruiters.

We set two cookies: a session cookie so you stay logged in, and a language cookie remembering your locale. Both are strictly necessary for the service to function, so no consent banner is used. We run no advertising or analytics trackers.

Your content is kept until you delete it or delete your account. Deleting your account removes the associated records.

Password-reset tokens expire after one hour. Rate-limit counters expire with their time window.

Under the GDPR you can request access to your data, correct it, have it deleted, or receive a copy in a portable form. You can delete your account and its data yourself from Settings at any time.

You also have the right to lodge a complaint with your national data protection authority.

To exercise any of these rights, contact noreply@vroli.app.

We process account and content data to perform the contract with you, usage and rate-limit data on the basis of our legitimate interest in keeping the service available and preventing abuse, and payment data to comply with our legal obligations.