Privacy policy

1. Who is responsible

Content Petit LLC operates Workplacea at workplacea.com. Questions, access requests, and deletion requests can be sent to contact@workplacea.com.

2. Data we process

• Account data: email address, authentication records, and account identifiers when you sign in.
• Resume workspace data: resumes, contact details you place in them, job descriptions, tailored variants, template choices, and version history.
• Imported documents: PDF or Word contents while we extract and structure them. The source file is not kept as a stored attachment after the request completes.
• AI request data: the resume or job text needed for the AI feature you deliberately invoke, plus non-content request identifiers used for reliability and abuse prevention.
• Billing data: plan, entitlement, Stripe customer and transaction references for web purchases, and App Store product, transaction, account-token, renewal, refund, and subscription status for iOS purchases. Workplacea does not receive or store your full card number or Apple Account password.
• Technical and security data: request time, coarse device or network-derived pseudonymous hashes, errors, and rate-limit counters. We do not store raw IP addresses in AI or guest-export rate-limit records.
• Analytics data: page, referrer, device category, and similar visit information only after you accept analytics. Resume text is not sent to analytics.

3. Why we use it

We use data to provide the editor, save and sync work, process imports and requested AI changes, create PDFs, administer plans, prevent abuse, troubleshoot failures, and answer support requests. Optional analytics is based on your consent. Security, fraud prevention, and service reliability are necessary to operate the product responsibly.

4. Providers and disclosures

We use service providers for hosting and delivery (including Vercel), authentication and database storage (Supabase), requested AI processing (OpenAI API), web payments (Stripe), iOS payments (Apple), operational email, and—only with your consent—Google Analytics. They process data for the service they provide under their own security and data-processing terms. We may also disclose data where law requires it or to protect users and the service. We do not sell resumes or operate a recruiter database.

5. AI and automated suggestions

AI is called only when you use an AI-backed action such as import, rewrite, summary, rebuild, or tailoring. Before the iOS app sends resume or job content to OpenAI for the first time, it identifies OpenAI, explains which personal resume data may be sent and why, and asks for separate explicit permission. Nothing is sent to OpenAI until you continue. You can withdraw that permission in the app's Privacy settings; the app will ask again before a later AI request. Suggestions are shown for review and do not replace newer edits silently. You remain responsible for checking accuracy before sending a resume. The deterministic resume score itself does not require an AI model.

6. Storage, retention, and deletion

• Guest drafts, recovery copies, and guest Trash are stored in that browser. Clearing the site's browser data removes them.
• Signed-in resumes and versions are stored under the account so they can sync. Moving a resume to Trash keeps it recoverable.
• The iOS app provides permanent account deletion in Account settings. Web users may also contact us from the account address. Account deletion removes cloud resumes and account data after ownership verification.
• Deleting a Workplacea account does not cancel an Apple subscription. The app shows Apple's Manage Subscriptions control first, but still permits immediate deletion. Stripe subscriptions are cancelled before a linked account is deleted.
• Short-lived rate-limit counters expire automatically. A pseudonymous guest-export allowance marker may be kept longer to enforce the one-time free export; it contains neither resume text nor a raw IP address. Verified Apple or Stripe transaction markers, tax, dispute, refund, and anti-fraud records may be retained when law requires or permits it. An orphaned Apple transaction marker can be rebound only when Apple later supplies the same cryptographically verified purchase during Restore Purchases.

The plain-language version of these controls is in Privacy and your data.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or erase personal data, and to complain to a data-protection authority. You can decline analytics or reopen Analytics preferences from the footer. AI-sharing permission can be withdrawn independently in the iOS app. Contact us to exercise a data right; we may ask for information needed to verify ownership.

8. Security and changes

We use access controls, encrypted transport, scoped credentials, server-side entitlement checks, and recovery safeguards. No online system is risk-free, so keep your sign-in access secure and avoid adding unnecessary sensitive details to a resume. Material policy changes will be posted here with a new effective date.