Draft — pending legal review. Not yet in force.

Privacy Policy

Effective date: to be set at launch.

What we collect

• Account: email address and a securely hashed password (we never store your password itself); optional two-factor secret, encrypted.
• Career profile: the experience, skills, education, and stories you provide or import from your resume — this is the core of the service and stays under your review and control.
• Applications and documents: jobs you track, documents generated for you, answers you approve, and your application history.
• Email (optional, read-only): if you connect Gmail, we read job-search-related messages and store only metadata (sender, subject, snippet, classification). Full email bodies are never stored.
• Calendar (optional): interview events we create for you with your approval.
• Interview recordings (optional, consent-first): audio you explicitly record or upload after confirming all participants consented, plus transcripts and feedback derived from it. Auto-deleted after your chosen retention period (90 days by default, adjustable per recording).
• Diagnostics: error reports with personal data scrubbed before they leave the server, and per-request logs that contain identifiers, never document or message content.

How we use it

Solely to provide the service to you: matching, document drafting, tracking, preparation, and your own analytics. We do not sell or rent personal data, run advertising, or use your data to train our own models.

AI processing

Features like document drafting and job matching send relevant parts of your career content to AI model providers (such as Anthropic or Google) to generate results. Your credentials and connected-account tokens are never included in AI requests. Provider data-handling terms apply to those requests; we choose configurations that do not permit training on your data wherever the provider offers it.

Where your data lives

• Database (managed PostgreSQL) with per-user row-level isolation enforced in the database itself.
• Files and recordings in private cloud storage, encrypted at rest, reachable only through short-lived signed links.
• Connected-account tokens (e.g. Google) in an encrypted vault (AES-256-GCM).

Sharing

We share data only with the infrastructure and AI providers needed to run the service (hosting, database, storage, models, email notifications, error monitoring), each receiving only what its function requires. No data brokers, no advertisers. We would disclose data if legally compelled, and would tell you unless prohibited.

Your controls

• Delete your account at any time (Settings → Security): immediately and permanently erases your profile, applications, documents, recordings, analytics — everything — including files in storage. This is built and tested, not a support-ticket promise.
• Delete individual recordings, or shorten their retention.
• Clear your assistant conversation at any time.
• Disconnect Gmail/Calendar whenever you want.
• Data export is planned; contact us meanwhile and we’ll help.

Retention

Your data is kept while your account exists and deleted when you delete it. Interview recordings additionally expire on their own retention timer. Backups age out on a fixed schedule.

Children

Ezra Path is for adults 18 and over.

Changes and contact

Material changes to this policy will be announced in the app before taking effect. Questions or requests: support@ezrapath.com.