Privacy Policy

Last updated: April 2026

In Plain English

We take your privacy seriously. We don't sell, share, or use your data for anything other than helping you land your next job. Our practices are designed with GDPR (EU) and CCPA (California) principles in mind.

What Data We Collect

  • Job descriptions you paste — sent to our AI service for analysis. Processed in real time and not retained after your session.
  • Your experience and background — sent to our AI service to generate your resume, cover letter, and interview prep. Not retained after processing.
  • Your name, email, phone, LinkedIn — stored securely and used only to personalize your exported resume and cover letter.
  • Your generated content — resumes, cover letters, interview questions, and salary research are stored in your account.
  • Account information — if you sign in with Google, we receive your name and email for account identification and subscription management.
  • Payment information — processed entirely by Stripe. We never see or store your card number, CVV, or billing address.

How We Process Your Data

When you generate a resume, cover letter, or interview questions, your input is sent to a secure AI service hosted on our cloud infrastructure. Here's what happens:

  • Your input is transmitted over encrypted connections (TLS 1.3)
  • The AI processes your request and returns the generated content
  • Your input is not used to train or improve AI models
  • Processing happens in secure, isolated environments
  • We do not share your input or output with any third party

Where Your Data Is Stored

Our infrastructure is hosted on secure cloud servers with the following protections:

  • All data is encrypted at rest and in transit
  • Access is restricted through role-based permissions
  • Infrastructure is monitored 24/7 with automated alerts
  • Regular security audits and vulnerability assessments

What We Don't Do

  • We don't sell your data to anyone — ever
  • We don't show you ads or use your data for advertising
  • We don't use your content to train AI models
  • We don't share your information with employers or recruiters
  • We don't track you across other websites
  • We don't retain your AI processing data after your session

Your Rights (GDPR & CCPA)

Regardless of where you are located, you have the following rights regarding your personal data:

  • Right to access — you can request a copy of all data we hold about you
  • Right to correction — you can update or correct your personal information at any time
  • Right to deletion — you can request that we delete all your data. We will comply within 30 days
  • Right to portability — you can export your data in a standard format
  • Right to withdraw consent — you can withdraw consent for data processing at any time by deleting your account
  • Right to object — you can object to specific types of data processing

To exercise any of these rights, email support@offerspath.com.

Data Retention

  • Account data — retained while your account is active. Deleted within 30 days of account deletion request.
  • Generated content — retained while your account is active. You can delete individual projects at any time.
  • AI processing data — not retained. Discarded immediately after processing.
  • Payment records — retained as required by law for tax and accounting purposes (typically 7 years).
  • Support emails — retained for 90 days after resolution, then deleted.

Payments

All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor used by millions of businesses worldwide. We never see or store your credit card details. For Stripe's privacy practices, visit stripe.com/privacy.

Cookies & Tracking

We use minimal cookies strictly for functionality:

  • Authentication cookies — keep you signed in (if you use Google sign-in)
  • Session cookies — maintain your session while using the app

We do not use tracking cookies, advertising cookies, analytics cookies, or any third-party tracking scripts.

Third-Party Services

We use the following third-party services to operate OffersPath:

  • Cloud infrastructure — for hosting, AI processing, and data storage (encrypted, access-controlled)
  • Stripe — for payment processing
  • Google OAuth — for sign-in (only name and email are shared with us)

We do not use any advertising networks, analytics platforms, or data brokers.

Children's Privacy

OffersPath is designed for job seekers aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email (if you have an account) or by posting a notice on our website. Continued use of OffersPath after changes constitutes acceptance of the updated policy.

Contact Us

For any privacy-related questions, concerns, or data requests:

We aim to respond to all privacy inquiries within 7 business days.