Privacy Policy
Last updated: September 2026
GriffoWork ("we", "us") provides career intelligence tools: resume analysis, ATS compatibility scoring, resume rewriting, and job matching (Radar). This page explains, in plain language, what data we collect to do that, who else sees it, how long we keep it, and what control you have over it.
GriffoWork is an operating brand; we have not yet incorporated a dedicated legal entity for it. Until we do, treat this page as our operational commitment rather than a formal corporate disclosure — we will update it the moment that changes.
What we collect
- Account information
- Email address and password (stored hashed, never in plain text) when you create an account.
- Resume and professional information
- The resume content you upload or paste, the target job/job description you provide, and any professional profile details you fill in (skills, experience, education).
- Optional social profile links
- LinkedIn, GitHub, portfolio, or similar links you choose to add, and only when you opt in to have them analyzed.
- Payment information
- We never see or store your full card number. Payments are processed by Stripe, our payment processor; we keep only the transaction record needed for receipts and support.
- Usage data
- Basic product events (such as page views and checkout steps) and an approximate country derived from your network connection, used to understand product usage and to show the right currency.
- Language preference
- The interface language you select, saved so the site remembers it on your next visit.
What we use it for
- Analyzing your resume and generating the audit, scoring, and rewrite suggestions you request.
- Matching your profile against open positions for the Radar feature, when you enable it.
- Processing payments and providing account support.
- Sending you the emails you've asked for (analysis results, Radar alerts) and, where applicable, letting you unsubscribe from non-essential ones.
- Understanding aggregate product usage so we can improve the service.
- Meeting legal and accounting obligations tied to payments.
Who we share it with
We do not sell your data. We share it only with the service providers ("sub-processors") needed to run GriffoWork, each acting on our instructions:
- AI providers (Anthropic, OpenAI, Google, DeepSeek, Moonshot AI)
- Your resume content is sent to one of these providers to generate the analysis, score, or rewrite you request. Which provider is used for a given request can vary; see "International transfers" below for how we restrict this for users in the European Economic Area.
- Stripe
- Payment processing. Stripe receives your payment details directly; we do not store your card number.
- Resend
- Delivering transactional email (analysis results, Radar alerts, account notices).
- Vercel and Supabase
- Application hosting and database infrastructure.
International transfers
Some of our sub-processors operate outside your country, including outside the European Economic Area (EEA). For users we identify as being in the EEA, UK, or Switzerland, we exclude AI providers that operate without a recognized adequacy decision for that region (currently DeepSeek and Moonshot AI/Kimi) from processing your resume — your content is only routed to providers addressable under GDPR-compatible safeguards.
For users outside the EEA, all listed AI providers may be used depending on system load and availability.
How long we keep your data
We keep data only as long as it serves the purpose it was collected for, or as required by law:
| Resumes on an active account | For as long as your account is active |
| Resumes on an inactive account | Up to 730 days after your last activity, then deleted |
| AI processing logs (operational metrics, already stripped of resume content) | Up to 365 days |
| Audit trail (compliance and security log) | Up to 730 days |
| Payment/webhook records | Up to 90 days |
Your rights and choices
Wherever you are, we offer these controls directly in your account (Settings), without needing to email us first:
- Export your data
- Download a copy of your resumes, analysis history, transactions, and account activity.
- Delete your account
- Permanently delete your account and associated personal data. This is irreversible.
- Correct your information
- Edit your resume, profile, and account details at any time.
- Opt out of non-essential email
- Unsubscribe from Radar alerts and other non-essential notifications from your account or the link in the email itself.
Cookies and local storage
We use a session cookie to keep you signed in, and a preference cookie/local storage entry to remember your chosen interface language. We do not use third-party advertising trackers.
Security
We use industry-standard measures such as encrypted connections (HTTPS), hashed passwords, and access controls on our database to protect your data. No system is completely immune to risk, and we cannot guarantee absolute security — but we treat resume content as sensitive personal data and design our processes around minimizing who and what can access it.
Children's privacy
GriffoWork is intended for working professionals and job seekers, and is not directed to individuals under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this page as the product or our providers change. Meaningful changes will update the date at the top of this page.
Contact us
For any question about this policy or your data, write to contact@griffo.work.