Privacy Policy

AImy is a career platform operated by an individual creator (Dave Furano). The platform consists of five products served on related domains: aicareerplanner.com (the hub), aimyresume.app, aimybio.com, aimyinterview.com, and aijobscoach.com. This privacy policy applies across all five.

• Account information. Your email address and a password you create. We do not collect your name unless you choose to enter it during onboarding.
• Your identity graph. When you upload a resume or paste a LinkedIn URL, we extract structured data — work history, skills, education, projects — into your AImy identity graph. You can view, edit, export, or delete this graph any time from your dashboard.
• Generated content. The bios, resumes, interview sessions, and coach conversations you produce on the platform.
• Wallet activity. Stripe charge IDs, top-up amounts, spending across the products, and Pro subscription status. We never see or store your full payment card number — Stripe handles that.
• Usage telemetry. Which products you use, how often, and how much each call costs us in upstream LLM API spend. We use this to surface a cost dashboard to you and to bill accurately.
• Standard server logs. IP address and user-agent on request, retained 30 days for security and abuse-prevention purposes.

• We do not track you across the web. We do not use third-party advertising cookies. We do not sell or share your data with data brokers.
• We do not store your full payment card number. Card data lives in Stripe’s vault and is referenced only by token.
• We do not train AI models on your conversations, your identity graph, or anything you generate. Anthropic, our LLM provider, also does not train on API content per their published terms.

• To run the products you asked for. Your identity graph is sent to the LLM with each request (resume, bio, interview, coach) so the output is grounded in your actual experience.
• To bill you accurately. Each generation is logged with its cost and a charge against your wallet. You can audit every line on your dashboard.
• To run the Opportunity Scout for you. If you have a funded wallet, the Scout queries public job feeds (RemoteOK, WeWorkRemotely, Hacker News “Who is hiring”) using your stated criteria and your identity graph. Matches go to your inbox; nothing is sent to recruiters or third parties without your explicit click-to-approve.
• To send transactional emails. Receipt-style notifications, password reset, security-relevant changes. We do not send marketing email without separate opt-in.

The platform is built on a small, intentional stack:

• Anthropic — provides the LLM (Claude) that generates content. Each request includes your identity graph and the user input. Anthropic does not train on API content.
• Supabase — provides authentication, the Postgres database, and file storage. All your data lives here.
• Stripe — processes payments. Card data is tokenized and never touches our servers.
• Vercel — hosts the application code and edge network.
• Public job feeds — RemoteOK, WeWorkRemotely, the Hacker News API. We send queries; we do not send your personal data.

We do not currently use Google Analytics, Meta Pixel, or any similar third-party tracker. If we add analytics later, this policy will be updated and you will see a cookie banner on first visit.

• Your account, identity graph, and generated artifacts: until you delete them.
• Wallet ledger entries: 7 years (US tax retention requirement).
• Server logs: 30 days.
• Backup snapshots: 30 days, then permanently destroyed.

• Access. Request a complete export of your data via email. We’ll respond within 30 days.
• Correction. Edit your identity graph directly from your dashboard, any time.
• Deletion. Delete your account from your dashboard. All personally identifying data is removed within 30 days. Wallet ledger entries are anonymized but retained for tax compliance.
• Portability. Generated content is yours. You can export resumes, bios, and interview transcripts at any time.
• EU/UK residents have additional GDPR rights (object to processing, restrict processing, lodge a complaint with your national data protection authority). Email us at the address above.
• California residents have additional CCPA rights (know what we collect, delete, opt out of sale — though we do not sell). Email us.

AImy is not intended for users under 18. If you believe a minor has created an account, email us and we’ll delete it.

If we change anything material, we’ll update the date at the top and email active users. Day-of-launch tweaks (typo fixes, formatting) may not trigger a notification.

Questions, requests, or concerns: privacy@aicareerplanner.com.