Privacy in Plain English
Privacy policies are written for lawyers. This page is written for you. Here is exactly what we collect, who can see it, and what you can do about it — no legal jargon required.
The Short Version
We collect what we need to help you land a job — your career history, the jobs you are targeting, and the documents you create. We do not sell it, share it with advertisers, or let other users see it. We use it to power the AI features that make your applications stronger, and we delete it the moment you ask.
And if you choose to delete your account, we delete it completely. Most companies hoard your data forever. We think that's wrong.
What We Collect
Everything we store, who handles it, and why.
Email & Password
Used to create and secure your account. Your password is never stored in plain text — Firebase Auth handles hashing and salting.
Professional Dossier
Your career history, job titles, companies, skills, achievements, education, and certifications. This is the core of what makes greatfit.ai work.
Saved Opportunities
Job descriptions you are targeting, fit analyses, and your progress through each application.
Generated Documents
Resumes, cover letters, and portfolio pages created through greatfit.ai. Stored until you delete them.
Payment Information
If you purchase credits, Stripe handles your card number. We only ever see the last four digits and the transaction amount.
Support Tickets
Messages you send through our Help & Support system, stored to track and resolve your requests.
Cookie Preferences
Whether you accepted or declined non-essential cookies. Stored locally in your browser — we never send this to a server.
Page Version
A randomly generated id, and the name of the page version it selected for you. Set whether or not you accept analytics, because they are what keeps the site from showing you a different version on every visit. They say nothing about who you are, and the id expires after 90 days.
Who Can See Your Data
A full list of every third-party service that touches your information, and exactly what they receive.
Google Firebase
Authentication, database, hosting, and app verification.
Data shared: Email, password hash (managed by Firebase Auth), all dossier and application data (stored in Firestore).
Google / Anthropic AI
Powers all AI features (dossier analysis, resume generation, interview coaching).
Data shared: Career content and job descriptions — sent through Enterprise APIs with no-training guarantees. Never receives your email, password, or payment info.
Stripe
Payment processing for credits and subscriptions.
Data shared: Payment card details (handled entirely by Stripe). We only receive confirmation of payment and the last 4 digits.
Vercel
Hosting and serverless infrastructure.
Data shared: Server logs (IP address, request paths). No direct access to your career content.
Nobody else. We do not share data with advertisers, data brokers, recruiters, or any other third party. If this ever changes in the future (for example, an opt-in job matching program), we will ask for your explicit consent first.
Your Controls
You are not a passenger. Here is everything you can do — and the legal rights that back it up, no matter where you live.
Delete Everything
Go to Settings → Permanently Delete Account and we will permanently purge your entire account: dossier, generated documents, opportunities, support tickets, and your login credentials. We require your password and the word "DELETE" to prevent accidents.
This is the real thing: a full, irreversible wipe across every system that holds your data. There is no undo.
Zero File Retention
Uploaded files are processed entirely in memory during extraction. The original files are never saved to our servers or databases — only your structured career data is retained.
Multi-Factor Authentication
You can enable phone-based MFA in Settings to add a second layer of protection to your account. When enabled, logging in requires both your password and a one-time SMS code sent to your phone. Even if someone steals your password, they cannot access your account.
Cookie Preferences
When you first visit greatfit.ai, we ask whether you accept non-essential cookies (like analytics). If you click Decline, we set no analytics cookies and link nothing to your account. We still count anonymous activity, such as page views and clicks, using an identifier that PostHog derives on its own servers from a value that changes every day and is then thrown away. Nothing connects one day to the next, and nothing connects it to you. Session replay and surveys stay off entirely. Your choice is saved in your browser's local storage, not on our servers.
Two small cookies are set either way, because they are how the site decides which version of a page to show you and keeps that choice steady rather than reshuffling on every visit. One holds a randomly generated id, the other the name of the page version you drew. Neither contains anything about you, and the id is kept for 90 days.
Your Legal Rights
The controls above are your day-to-day power over your data. The rights below are the floor — guaranteed under GDPR (EU/UK) and CCPA (California), and honored for every greatfit.ai user regardless of where you live.
Right to Access
See exactly what personal data we hold about you.
Right to Correction
Fix anything that is inaccurate.
Right to Deletion
Have all your data permanently removed.
Right to Portability
Get a copy of your data in a usable format.
Right to Opt-out
Decline non-essential cookies and marketing.
Right to Non-discrimination
We will never treat you differently for exercising your privacy rights.
To exercise any right, contact us through Support.
Children's Privacy
greatfit.ai is built for working professionals — not kids. We don't market to anyone under 16, and we don't knowingly collect data from them. If we ever find out we have, we delete it immediately.