Privacy Policy

1. Information We Collect

We collect information in the following categories:

• Account and Identity Data: Your name, email address, password hash, and avatar picture when registering via direct email, Google One-Tap/OAuth, or LinkedIn OAuth.
• Professional & Career Content: Work experiences, education, certifications, job titles, achievements, skills, and portfolio links entered into your resumes, cover letters, and job applications.
• Target Job Data: Job titles, recruiter notes, and job descriptions uploaded for ATS scoring and keyword analysis.
• Billing and Subscription Data: Payment card authorization details and billing history processed directly through our secure merchant of record (Polar). We do not store raw credit card numbers on our servers.
• Technical and Device Data: IP address (hashed for rate limiting), browser user-agent, operating system, and session timestamps.

2. How We Use Your Information

We process your data strictly to deliver and improve the Nabu Career experience:

• To render, format, and export your resumes and cover letters into PDF and DOCX formats.
• To perform algorithmic ATS scoring, keyword frequency analysis, and formatting checks against your target job descriptions.
• To provide in-editor AI rewriting, bullet-point metrics generation, and translation upon your direct request.
• To verify identity, manage authenticated sessions, and authenticate third-party OAuth integrations (Google, LinkedIn).
• To process billing subscriptions, free trial authorizations, and referral reward credits.
• To provide prompt technical support and investigate reported software defects.

3. Third-Party Service Providers

We work with trusted infrastructure providers who process data on our behalf under strict Data Processing Agreements (DPAs):

• Authentication: Google Cloud Platform (Google One-Tap) and LinkedIn OIDC.
• AI Intelligence: Google Cloud Vertex AI (Gemini Flash) and OpenAI API (processed statelessly with zero-data-retention agreements).
• Payments: Polar (Merchant of Record).
• Email Delivery: Resend for transactional verification and password reset notifications.
• Cloud Hosting: Cloudflare (Edge CDN & Security) and AWS / Supabase PostgreSQL.

4. Data Security & Storage

We implement industry-grade technical and organizational safeguards:

• All network communications are strictly encrypted using TLS 1.3.
• All persistent databases and backup archives are encrypted at rest using AES-256.
• Session authentication tokens use secure, HTTP-only, SameSite cookies.
• Password credentials are cryptographically hashed using Argon2/Bcrypt algorithms.

5. Your Rights (GDPR & CCPA Compliance)

Regardless of your geographic location, Nabu Career accords all users full control over their personal information:

• Right of Access & Portability: You may export all your resumes, cover letters, and account data at any time in PDF, DOCX, or JSON formats.
• Right of Rectification: You can edit or update your personal and professional profile details directly from your account settings.
• Right of Erasure (Account Deletion): You can permanently delete your account and all associated documents from Settings > Account. Upon deletion, all your records are scrubbed from active databases within 24 hours.
• Opt-Out of Communications: You may unsubscribe from marketing notifications at any time via the link in the email footer.

6. Cookies Policy

We use strictly necessary cookies to maintain user authentication and guest drafts, alongside privacy-preserving, cookieless telemetry for error reporting and capacity planning. We do not use third-party behavioral advertising tracking cookies.

7. Contact Our Privacy Team

If you have questions, inquiries, or data protection requests regarding this Privacy Policy, please reach out to our Data Protection Officer: