Privacy Policy

This is how TriCareerly.club ("we", "us", or "our") collects, uses, and protects information when you use the Service at tricareerly.club. We tried to write it like a human, not a lawyer — the underlying obligations are still the obligations. The promise: we don't sell your data and we don't train third-party models on your resume.

1. Who we are

TriCareerly is an independent service. For privacy questions or data requests, contact support@tricareerly.club.

2. Information we collect

To provide the Service, we collect the following categories of information:

• Account information. Your email address, display name, and a Firebase Authentication user identifier (UID). If you sign in with Google, we receive your name, email, and profile picture from Google.
• Profile information you provide. Phone number, portfolio URL, immigration / work-authorization status, education, certifications, and any additional context you enter into your profile.
• Resume content. The full text and structure of resumes you upload, including contact information, work history, education, skills, and any other personal information contained therein.
• Job descriptions. The text of job descriptions you submit for tailoring.
• Generated outputs. The tailored resumes, cover letters, interview preparation documents, LinkedIn summaries, and ATS reports produced by the Service for you.
• LinkedIn Intelligence data export. If you use LinkedIn Intelligence, the LinkedIn data archive you upload — which may include your profile, your connections, your messages, the ad-targeting and inferred-interest categories LinkedIn has assigned to you, and your activity history. See the dedicated subsection under Data retention for exactly how this archive is processed and deleted.
• Usage data. Application counts, ATS scores, generation timestamps, and feature usage. We may collect IP address, browser type, and similar technical data through our hosting provider.
• Cookies. A single first-party, HTTP-only cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

3. How we use information

We use the information above to:

• Authenticate you and maintain your session.
• Generate tailored application materials by sending your resume, job description, and profile context to AI processing services.
• Score resumes for ATS compatibility and produce analytical reports.
• Store your applications and generated documents so you can retrieve them later.
• Operate, maintain, and improve the Service.
• Communicate with you about account or service updates.
• Comply with legal obligations.

4. AI processing

A core function of the Service is to generate tailored career documents using large language models. When you submit a resume and job description, the text is sent to Anthropic via OpenRouter (our model gateway) for processing. Both providers may briefly retain data for abuse detection per their terms but do not use it to train general-purpose models when accessed through their APIs.

If you bring your own LLM key, your text is sent instead to the provider you configure in Settings.

Do not include information you do not want processed by a third-party AI service. AI-generated outputs are produced automatically and may contain inaccuracies; you are responsible for reviewing and editing them before use.

5. Third-party service providers

We rely on the following processors to operate the Service:

• Google Firebase / Cloud — authentication, database, file storage, and hosting.
• OpenRouter & Anthropic — AI text generation (see Section 4).
• Polar — payment processing (Merchant of Record).
• Upstash — rate limiting.
• Sentry — error monitoring.
• PostHog — product analytics.

Each provider maintains its own privacy practices. We do not sell your personal information to anyone.

6. Data retention

We retain your account, profile, and generated documents for as long as your account remains active. To request deletion of your account and associated data, email support@tricareerly.club. We will action deletion requests within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

LinkedIn Intelligence data.

LinkedIn Intelligence reads the data archive you export from LinkedIn and upload to us. That archive can contain your profile, your connections, your messages, the ad-targeting and inferred-interest categories LinkedIn's engine has assigned to you, and your activity history. We handle it as follows:

• The raw archive is deleted within 7 days. The uploaded export file (the raw .zip) is the sensitive artifact, so it is automatically and permanently deleted within 7 days of upload — whether or not you have finished reading your report.
• Your computed report stays until you delete it. The report we compute from the archive (your score, scorecard, network map, and the rest) is saved to your account so you can return to it. It is not auto-deleted — it remains until you delete it yourself or delete your account.
• No AI reads your export. The report is produced by deterministic code running over your own data — your archive is not sent to any AI model to generate it. (If you later choose to chat with your report, that optional feature uses AI and is described at the point of use.)

You can delete a LinkedIn Intelligence report at any time from the report itself in the app, or by emailing support@tricareerly.club.

Billing, refunds, and what the Service does and does not promise are covered in our Terms of Service — this policy stays focused on your data.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time (this does not affect prior lawful processing).

To exercise any of these rights, contact support@tricareerly.club. We will respond within 7 business days.

8. Security

We take the following technical measures to protect your data:

• All traffic between your browser and our servers is encrypted with HTTPS / TLS.
• Data at rest is encrypted by our cloud providers (Firebase, Google Cloud).
• Database and storage access is scoped per user via Firebase Security Rules — your data is not accessible to other users.
• Authentication uses Firebase Auth with server-verified, HTTP-only session cookies.
• Service-account credentials and API keys are stored in encrypted environment variables, never in our source code.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

9. Children's privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact us

For any questions about this Privacy Policy or our handling of your information, email support@tricareerly.club.