Privacy Policy

Overview

This policy explains what information Weydr collects, how it's used, and the choices you have. It covers the Weydr website and app at this domain (the "Service").

Weydr is a job-search copilot: you build one master profile, and the Service tailors résumés, cover letters, interview prep, and salary insights against jobs you're applying to. This policy is written around what that actually requires us to store and process, not generic boilerplate.

Information we collect

We collect the information you'd expect from using the product:

• ·Account information: your email address and name, via our authentication provider (Supabase), including LinkedIn if you sign in that way.
• ·Your master profile and résumé content: work history, skills, education, and any other details you enter or import (PDF upload or manual entry), plus every tailored version generated from it.
• ·Job data: job descriptions you paste in or that we fetch from a URL you provide.
• ·Generated output: match scores, keyword analysis, cover letters, interview prep answers, and salary-tool inputs and results.
• ·An optional profile photo, if you upload one for a template that supports it.
• ·Your AI provider API key, if you connect one under Bring Your Own Key (BYOK) — encrypted at rest (AES-256-GCM) and decrypted only at the moment we make an AI call on your behalf.
• ·Billing information processed through our payment provider (Razorpay). We don't store your full card or bank details ourselves.
• ·Usage data: which plan you're on, how many AI runs you've used, and basic account activity, so we can enforce plan allowances and rate limits.
• ·A coarse, non-stored region signal (derived from your network's country) used only to decide which currency to show you.

How we use your information

We use what we collect to run the Service, specifically to:

• ·Parse, analyze, tailor, and export your résumés and cover letters, and generate interview prep and salary insights.
• ·Send the relevant content to an AI provider to generate results: our managed provider if you're on a managed plan, or the provider tied to your own key if you're on BYOK.
• ·Process payments and manage your subscription period.
• ·Enforce plan limits and rate limits, and detect abuse of the job-URL import feature.
• ·Send you service-related messages: billing, account, and security notices.

AI providers and your data

On a managed plan, your résumé and job content is sent to our managed AI provider to generate tailored output.

On BYOK, that same content is sent directly to the provider tied to your own key (for example Google, OpenAI, or Anthropic), under your account with that provider and its own terms.

We don't sell your résumé, job, or account data to third parties, and we don't use it for advertising.

Data storage and security

Your account and content are stored with Supabase, our database and authentication provider.

BYOK provider keys are encrypted at rest with AES-256-GCM and decrypted only to make the AI call you request.

We use reasonable technical and organizational measures to protect your data, but no online service can guarantee absolute security.

Data retention

We retain your account and content for as long as your account is active. Master profile versions and tailored résumés are subject to the per-plan limits shown in the product.

If you delete your account, we remove your stored data within 7 days, as described below.

Your rights and choices

• ·Export: download a copy of your data at any time from Settings → Data & Privacy.
• ·Delete: request account deletion by emailing us; we remove your data within 7 days.
• ·BYOK key control: revoke or replace your connected provider key at any time from Settings → AI key.

Cookies and local storage

We use essential cookies to keep you signed in (via Supabase) and a local storage entry to remember your light/dark theme preference. We don't use third-party advertising or analytics trackers.

Children's privacy

The Service is intended for job seekers and professionals, not children. We don't knowingly collect information from children under 16, and we'll delete any such data if we become aware of it.

International users

Currency shown to you (USD or INR) is based on a coarse, IP-derived region signal, not a stored location. Depending on the infrastructure providers we use, your data may be processed in a country other than the one you're in.

Changes to this policy

We may update this policy as the product changes. We'll update the date at the top of this page, and for material changes we'll let you know by email or an in-app notice.

Contact us

Questions about this policy or your data: support@weydr.app.