Privacy Policy

GradCompass ("we," "us") scores resumes against job postings. This page explains what we collect, why, and how you can control it. If anything here is unclear, email help@gradcompass.co and we'll clarify or fix it.

What we collect

• Your email address — used only to sign you in (we use passwordless email codes, never a password) and to send you account-related notices, like a heads-up before your subscription pauses from inactivity.
• The resume and job posting text you submit for scanning — sent to our scoring pipeline and, if you're signed in, saved to your scan history so you can look back at past results. If you scan anonymously (before creating an account), that text isn't saved unless you create an account and it's carried over as your first saved scan.
• Your scan results — the scores, tiers, and written feedback we generate for you.
• Basic technical data — your IP address, used to enforce fair-use limits and block automated abuse. If you scan without an account, a record of how many free scans your IP address has used is kept for 90 days so the free-scan cap holds; everything else is deleted after 48 hours. We don't use it to track you across sessions or build a profile of you.
• Payment information — handled entirely by Stripe. We never see or store your card number; we only receive confirmation that a payment succeeded and a reference we use to manage your subscription.
• Basic page-view data — which page you visited and what referred you there, tied to a random id that lives only in your browser tab's session storage. It's gone the moment you close the tab, never tied to your account or email, and never leaves our own database.

All of the above is first-party — collected and stored by us alone. We don't use ad-tracking pixels, third-party analytics, or behavioral advertising of any kind.

Who we share it with

We use a small number of service providers to run GradCompass, each only for what their role requires:

• Anthropic — processes the resume and job posting text you submit to generate your scan results. This is the core of the product; there's no way to generate a scan without it.
• Supabase — hosts our database and handles sign-in.
• Stripe — processes payments and manages billing.
• Resend — delivers transactional emails (like sign-in codes and billing notices). We don't send marketing email.
• Cloudflare — provides bot-detection (Turnstile) on our forms, and may set its own cookie to do so.
• Netlify — hosts the website and runs its backend.

We do not sell your personal data, and we do not share it with anyone else for their own marketing purposes.

How long we keep it

Saved scans stay in your account until you ask us to delete them. Anonymous scan-count records (keyed to your IP address) are automatically deleted after 90 days; all other rate-limit and abuse-prevention logs after 48 hours; internal billing-event records are kept for 30 days for fraud and dispute handling, then deleted; page-view analytics data is kept for 90 days, then deleted.

Your choices

Delete your account, saved scans, and every personal data point we hold about you anytime from your account's Profile tab — it's immediate, no waiting on us. You can also export a copy of everything we have on file for you from the same page. For anything else — a correction, a question about what we hold — email help@gradcompass.co.

Cookies and local storage

We use cookies to keep you signed in (via Supabase) and, briefly, your browser's local storage to carry your very first scan result from before you had an account into your new account. Cloudflare Turnstile may set its own cookie to distinguish humans from bots. We don't use cookies for advertising.

Children

GradCompass is intended for job-seekers old enough to be entering or re-entering the workforce, and isn't directed at children under 16. If you believe a child has given us personal data, contact us and we'll remove it.

Changes to this policy

If we make a material change to how we handle your data, we'll update the date at the top of this page and, where required, notify you directly.

Contact

Questions, requests, or concerns about your data: help@gradcompass.co.

Data Protection Officer: help@gradcompass.co. Our DPO handles access, correction and deletion requests and any complaint about how we handle your personal data.