Legal
Privacy Policy
Your résumé and job search are personal. This policy explains, in plain language, what GotOffered collects, why, and the control you have over it.
Last updated October 5, 2026
The short version
- We collect what you give us to build your résumés, letters and applications, plus the minimum needed to run your account.
- We never sell your data, and we don’t use it for advertising.
- We don’t use your content to train AI models, and our AI provider doesn’t either under its commercial terms.
- You can export everything or delete your account at any time from Settings.
- We don’t use third-party analytics or advertising trackers. We only count anonymous daily totals (like “a résumé was uploaded”) on our own servers.
Who we are
GotOffered is operated by Tinh Hoa So, 65 Son Cang, Bay Hien, Ho Chi Minh City (“we”, “us”). We are the controller of the personal data described here. Questions or requests: hello@gotoffered.com.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Name, email, password (stored only as a secure hash), Google sign-in ID if you use it | To create and secure your account |
| Career content | Your Career Vault, résumés, letters, job posts you save, application notes, interview answers | To provide the service you asked for |
| Uploaded files | Résumé PDFs or DOCX files | Converted to text to fill in your résumé; the file itself isn’t kept |
| Preferences | Theme, time zone, reminder settings | To show the app the way you set it |
| Technical | IP address and basic request logs; AI usage counts | Security, abuse prevention, rate limits and fair-use quotas |
| Product statistics | Anonymous daily totals of events such as “landing page visited”, “résumé uploaded”, “account created”, “PDF downloaded” | To see which steps help people and fix the ones that don’t. These totals contain no name, email, account ID, IP address or cookie |
| Browser extension | The job post on the page where you open it | To show your keyword match (not stored) and, when you press Save, to add it to your applications |
We don’t ask for sensitive data such as health, religion or ethnicity. Please don’t include it in your content unless you choose to.
Free tools without an account
Most free tools run entirely in your browser; nothing you type is sent to us. When you upload a file to a free tool, it’s converted to text on our server and discarded straight away. If you upload a résumé on the home page to get a score, we keep the extracted text for up to 24 hours so we can turn it into a résumé if you create an account. It’s deleted after it’s used, or after 24 hours, whichever comes first.
How we use AI
Some features, like importing a résumé, tailoring to a job, writing suggestions and interview practice, send the relevant text to our AI provider to generate a result: Anthropic, or OpenAI where we use it as a primary or backup provider. We send only what the feature needs. Under both providers’ commercial API terms, inputs and outputs aren’t used to train their models; they may retain them for a limited period to detect abuse, as described in their own policies. AI suggestions are never applied to your résumé without your review.
Who processes data for us
| Provider | Purpose |
|---|---|
| Anthropic | AI features (text you choose to process) |
| OpenAI | AI features, when used as a primary or backup provider |
| Resend | Transactional email: verification, password reset, reminders you opt into |
| Cloudflare R2 | Encrypted, compressed nightly database backups |
| Sign-in, only if you choose “Continue with Google” | |
| Our hosting provider | Runs the servers where your data is stored |
Each provider processes data only to provide its service to us. Some are located outside your country. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.
Legal bases (EU/UK)
- Contract: to provide the service you sign up for.
- Legitimate interests: security, preventing abuse and improving reliability.
- Consent: optional emails such as reminder digests, which you can turn off anytime.
- Legal obligation: where the law requires us to keep or disclose information.
How long we keep data
- Your account and content: until you delete them or your account.
- After you delete your account, your data is removed from our live database immediately and disappears from backups as they rotate (we keep 14 nightly backups).
- Home-page uploads: up to 24 hours (see above).
- Request logs: kept for a short period for security, then deleted.
Your rights and choices
You can access, correct, export and delete your data yourself in Settings. Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA), you may also have the right to object to or restrict processing, and to complain to your local data protection authority. Email hello@gotoffered.com for anything you can’t do in the app; we’ll respond within the time the law requires.
Cookies
We use only essential cookies and local storage: a session cookie to keep you signed in, settings such as your theme, and a per-tab session flag so a visit is counted once in our anonymous totals. We don’t use advertising or cross-site tracking cookies, so we don’t show a cookie banner.
Children
GotOffered is not intended for children under 16, and we don’t knowingly collect their data.
Security
See Security & data for how we protect your information.
Changes to this policy
If we make material changes, we’ll update the date above and tell signed-in users by email or in the app before the changes take effect.