Privacy policy

• Your account: name, email address and sign-in details, handled by our sign-in provider.
• What you add: resumes and their contents, your career profile, job preferences, saved answers to application questions, cover letters, and the applications you track.
• What you do with AI features: the text sent to them and what they returned, and how much of each feature you used this month — that is how plan limits work.
• Payments: the plan bought, the amount, and Razorpay’s order and payment ids. Card, UPI and bank details go to Razorpay directly and never reach us.
• From the browser extension, only what its own privacy page lists.

To run the features you use: matching jobs to your profile, tailoring resumes, writing cover letters, filling forms, tracking applications, enforcing plan limits and sending receipts. We email you only about your account and payments.

• Supabase — our database, where your data is stored (Singapore region).
• Vercel — hosts the website and runs the server code.
• Clerk — sign-in and account security.
• Anthropic — the AI model provider. Text you send to an AI feature (for example, your resume and a job description) is sent to Anthropic to produce the result. Anthropic does not use it to train its models.
• Razorpay — takes payments.
• Resend — sends our emails.

Each receives only what its job needs. We share nothing with employers unless you send it yourself.

Only the cookies needed to keep you signed in. No advertising or analytics cookies. Razorpay’s checkout sets its own cookies while you pay.

Your data is kept while your account exists. Delete your account and your profile, resumes, documents and history are deleted with it. Payment records are kept as long as Indian tax and accounting law requires. You can download a copy of your data or delete your account yourself in Settings › Account › Your data, or email support@bananajobz.com and we will do it for you. Cached AI results, which are not linked to your account, are deleted within 30 days.

You can ask to see, correct, export or delete your personal data, and withdraw consent, under India’s Digital Personal Data Protection Act, 2023 and similar laws where you live. Write to the address above; we reply within 30 days. Grievances go to Unais Ahamed at the same address.

When this policy changes, the date at the top changes too, and we email you about anything significant.