Legal
Privacy Policy
Last updated 5 July 2026.
The short version
Your CV is personal. We keep only what we need to run the product, never sell or share it with third parties for their own purposes, and delete it the moment you ask. That’s the whole policy — the rest of this page is the detail.
What we collect
- Account: your email address (via Supabase Auth) and a securely hashed password we never see in plain text.
- Profile: the CV text you paste, your target role, locations you’d accept, and any compensation figures you enter.
- Job data: postings you paste or that we discover on your behalf, and the fit/salary analysis generated from them.
- Usage: how many times you’ve used a feature in a day, purely to enforce fair-use limits — not to profile you.
- Waitlist (if you join it instead of signing up): your email and, optionally, your career stage.
What we don’t do
- We don’t sell your data to anyone, ever.
- We don’t share your CV or profile with employers or third parties without your explicit action (e.g. you choosing to apply somewhere).
- We don’t use your data to train third-party AI models beyond the single API call needed to generate your own results.
Where it’s stored
Your account and profile data live in a managed Postgres database (Supabase), isolated per account with database-level access controls (Row Level Security) — your data is scoped so it can only ever be read back for your own account. Generating your results (CV tailoring, interview prep, negotiation scripts, salary analysis) involves sending the relevant text to our AI provider (Google Gemini) for that single request; it is not retained by us for any other purpose beyond producing your result.
How long we keep it
We keep your account data for as long as your account is active. If you delete your account or ask us to remove your data, we delete your profile, CV text, and generated results within 30 days. Some minimal records (e.g. that an account existed) may be retained briefly for fraud prevention and legal compliance.
Your rights
You can access, correct, export, or delete your data at any time. Update your profile directly in the app, or email support@triplesalary.com for anything else — including a full account deletion request. If you’re in the UK or EU, these are your rights under UK GDPR / GDPR, and we aim to respond within 30 days.
Cookies
We use only the minimal cookies required to keep you signed in. No advertising or cross-site tracking cookies.
Changes to this policy
If this policy changes materially, we’ll email you and post the update here with a new date at the top.
Contact
Questions about privacy or data: support@triplesalary.com.