Privacy Policy

WyrdFold (“we”, “us”) is operated by [Legal Entity Name], [registered address]. This policy explains what personal data we process when you use WyrdFold and the choices you have. For any privacy question, contact us at privacy@wyrdfold.com.

We collect only what the service needs to run your job search:

• Account data — your email address (sign-in is a magic link, so we do not store a password).
• Career profile — the experience, resume text, skills, and preferences you provide or import, and the roles you save, hide, or give feedback on.
• Generated documents — the tailored resumes and cover letters WyrdFold drafts for you.
• Usage & device data — basic analytics and log data (pages visited, actions taken, IP address, browser) used to operate and improve the service.
• Billing data — if you subscribe, your payment is handled by Stripe; we receive subscription status, not your full card details.

We use your data to match you to relevant roles, score how well they fit, generate tailored applications from your real experience, send you the job alerts you ask for, operate and secure the service, and — if you subscribe — manage billing. We do not use your career data to train our own models, and we do not sell it.

To score matches and draft applications, the relevant parts of your profile and the job text are sent to third-party large-language-model providers through OpenRouter. Zero-Data-Retention is enabled on that account, so those providers do not retain your content after processing your request.

We rely on the following sub-processors to run WyrdFold:

• Supabase — database, authentication, and file storage.
• Vercel and Railway — application and API hosting.
• OpenRouter and the AI model providers it routes to — matching and document generation.
• Stripe — subscription payments.
• Resend — transactional and alert email.
• Sentry and Google Analytics — error monitoring and product analytics.

[Confirm this list and each provider’s region/DPA with counsel before publishing.]

Where the GDPR or similar laws apply, we process your data to perform our contract with you (running the service), on the basis of your consent (e.g. optional alerts and analytics), and for our legitimate interests in operating and securing WyrdFold. [Confirm the applicable bases for your jurisdiction.]

We share your data only with the sub-processors listed above, where you direct us to (for example, exporting a document), and where required by law. We do not sell your personal data.

We keep your data for as long as your account is active. You can permanently delete your account and its data at any time from Settings → Delete account, which erases your profile, generated documents, and associated records. Some records may be retained where the law requires (for example, billing records).

Depending on where you live, you may have the right to access, correct, delete, export, or object to the processing of your personal data, and to withdraw consent. You can exercise most of these in-app, or contact us at privacy@wyrdfold.com. You also have the right to complain to your local data-protection authority.

We use essential cookies to keep you signed in and to secure the service, and analytics cookies to understand usage. You can control non-essential cookies through your browser or any consent controls we provide.

Your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for those transfers. [Confirm with counsel.]

We protect your data with per-user access controls (row-level security), encryption in transit, scoped credentials, and regular security review. No system is perfectly secure, but we work to keep your data safe.

WyrdFold is not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this policy as the service evolves. We will post the new version here and update the effective date, and will notify you of material changes where required.

Questions about your privacy? Email privacy@wyrdfold.com or write to [Legal Entity Name], [registered address].