Privacy Policy

Account information: email address and password (handled securely via our authentication provider).

Profile information: career preferences you provide, such as target job titles, years of experience, compensation expectations, location preferences, and domain strengths.

Resumes: PDF resume files you upload, and the text extracted from them, up to 10 per account.

Job descriptions: text of job listings you submit for analysis.

Usage and status data: analyses you run, scores generated, and status updates you make on tracked jobs (e.g., applied, rejected, pending).

Payment information: we do not store your card details. Payments are processed by Stripe, and we retain only subscription status, billing history, and transaction identifiers.

Basic technical data: IP address, browser type, and log data collected automatically for security and troubleshooting.

Support and activity logs: to provide customer support and maintain the security of the Service, we log operational events tied to your account - for example, sign-ins, analyses run, upload outcomes, and status changes you make on tracked jobs - along with basic diagnostic details needed to troubleshoot a problem, such as an error category. These logs never include the content of your resumes, job descriptions, or profile answers. Authorized personnel may access this data, along with your account and subscription information, solely to provide support, investigate reported issues, or detect misuse of the Service.

• To generate job-fit analyses and resume recommendations
• To maintain your account, profile, and application history
• To process subscription payments and manage billing
• To improve the accuracy and reliability of our scoring system
• To communicate with you about your account or the Service
• To detect and prevent misuse, fraud, or abuse of the Service

We do not sell your personal information. We share data only with the service providers necessary to operate Scoura:

• Supabase (authentication and database hosting)
• Stripe (payment processing)
• Anthropic (Claude API, used to generate job-fit analyses; job description and resume text are sent to Anthropic's API for processing in accordance with Anthropic's own data handling terms)
• Vercel (application hosting)
• PostHog (website usage analytics and session recordings; only active if you accept analytics cookies via our cookie banner - see Section 8)

We may also disclose information if required by law or to protect the rights, safety, or property of Scoura or our users.

We may use de-identified, aggregated data (for example, patterns across many users' status updates about a given company) to improve our scoring system or to display general trends. This data is not tied back to any individual user and is never shared in a way that could identify you.

We retain your account data, resumes, and analysis history for as long as your account is active. You may delete individual resumes or analyses at any time, or request full account deletion (see Section 7).

Records of administrative actions taken on an account - for example, a support adjustment or a suspension and the reason for it - may be retained after account deletion for legitimate business, security, or legal purposes, disconnected from your identifying information beyond what's necessary for that purpose.

We use industry-standard security practices, including encrypted storage and transmission, to protect your information. No system is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Withdraw consent where processing is based on consent

Deleting your account and exporting your data are both available directly in Account Settings, with no need to contact us. For anything else on this list, reach us at contact@scoura.io.

We use functional cookies necessary to keep you logged in and to process payments securely. These are always active and don't require consent, since the Service can't work without them.

We also use PostHog to understand how visitors use our website, including session recordings that let us see how you interact with the page to help us find and fix real problems. Text you type into form fields (login, notes, job descriptions, and the like) is masked before it ever leaves your browser, so we never see it in a recording. When you're logged in, this activity is linked to your account rather than recorded anonymously, so we can tell which real issues affect which real users. This is off by default - it only activates if you click "Accept" on the cookie banner shown on your first visit. You can change your choice at any time using the "Cookie preferences" link in the footer of any page. We do not use advertising or third-party tracking cookies.

Scoura is not directed to individuals under 18. We do not knowingly collect information from anyone under 18.

If you access Scoura from outside the United States, your information may be transferred to and processed in the United States, where our service providers operate.

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date. Material changes will be communicated via email or in-app notice where required by law.

Questions about this policy or your data can be sent to contact@scoura.io.