Privacy Policy

What we collect

When you use TradeVind, we collect:

• Account information -- your name, email address, and password (or Google OAuth token). This is required to create and secure your account.
• Career data you enter -- contacts, companies, jobs, interviews, offers, resumes, outreach messages, and notes. This is the core of what TradeVind stores for you.
• Usage data -- which features you use, how often, and general interaction patterns. We use this to improve the product, not to sell ads.
• Payment information -- if you subscribe to Pro or purchase credit packs. Payment details are handled entirely by Stripe; we never see or store your card number.
• Waitlist information -- your name and email if you sign up for the waitlist before getting access.

How we use it

• To run the product -- storing your data, syncing across devices, generating your action stream, and matching jobs to your profile.
• To power AI features -- when you use AI-powered features (resume tailoring, interview prep, follow-up drafts), relevant context from your data is sent to our AI provider to generate useful results. See the AI section below for details.
• To send you emails -- account verification, password resets, and (if you opt in) digest emails about your search progress. We do not send marketing emails without your consent.
• To improve TradeVind -- aggregate usage patterns help us understand which features are useful and where the product falls short.

AI features and your data

TradeVind uses Anthropic's Claude for AI features like resume optimization, interview prep, and job matching. When you trigger an AI action, we send only the relevant context needed for that specific task -- not your entire account.

For example, if you ask for interview prep, we send the job description and your resume for that role. We do not send your contact list, salary history, or unrelated data.

Anthropic does not use your data to train their models. Our requests are processed through their API with standard data processing terms. We do not store AI conversation logs beyond what's needed to show you the result.

Third parties

We use a small number of third-party services to run TradeVind:

• Supabase -- database hosting, authentication, and file storage. Your data is stored in Supabase's infrastructure with row-level security ensuring only you can access your records.
• Anthropic (Claude) -- AI processing for features like resume tailoring, interview prep, and job matching. Data is sent per-request and not retained for model training.
• Stripe -- payment processing for Pro subscriptions and credit packs. Stripe handles all payment data directly; we only store your Stripe customer ID.
• Resend -- transactional email delivery (verification, password reset, digest emails).
• Vercel -- application hosting and edge deployment.

We do not sell, rent, or share your personal data with advertisers, data brokers, or anyone else. Period.

Your rights

You own your data. At any time, you can:

• Export everything -- download all your data in standard formats (CSV, JSON).
• Delete your account -- permanently remove all your data from our systems. This is irreversible.
• Update your information -- edit or correct any data in your account.
• Opt out of emails -- unsubscribe from digest emails at any time. Transactional emails (password resets, security alerts) cannot be opted out of.

If you're in the EU, UK, or California, you have additional rights under GDPR or CCPA. Contact us at hello@tradevind.com and we'll handle your request within 30 days.

Security

All data is encrypted in transit (TLS) and at rest. Authentication tokens are handled securely through Supabase Auth. Row-level security policies ensure that database queries only return data belonging to the authenticated user -- even if there's a bug in our application code, the database itself enforces access control.

We don't store passwords in plaintext. We don't have a way to read your password. If you use Google OAuth, we never see your Google password at all.

Cookies

We use essential cookies for authentication (keeping you logged in) and basic preferences. We do not use tracking cookies, advertising cookies, or third-party analytics that follow you across the web.

Changes to this policy

If we make meaningful changes to this policy, we'll notify you via email or an in-app notice before the changes take effect. Minor wording updates won't trigger a notification, but the "last updated" date at the top will always reflect the latest version.