Privacy

You give OptiSeek your career history so it can evaluate postings and write materials for you. That material is stored against your account, processed by Anthropic's Claude API, and shown to nobody else. We do not sell it, we do not use it to train models, and you can have all of it deleted by sending one email.

• Your name and email address, from Google when you sign in. That is the entire scope we request — not your contacts, not your calendar, not your Gmail.
• What you upload: résumés, notes, a LinkedIn data export, a GitHub username, text you paste in. Read once to extract accomplishments, work history, skills, education and languages, then stored so they never have to be read again.
• What you enter: your target criteria, comp floor, dealbreakers, applications, statuses, notes, corrections.
• What the product produces: evaluations, matched roles, generated résumés, cover letters, research and prep — kept so you can come back to them and so later drafts can learn from earlier ones.
• Minimal operational records: a count of the expensive actions your account takes, so we can hold you to your plan's allowances; the size of each request we send to the model, so we can tell what the service costs to run; and a hashed form of the network address that submits the early-access form, to stop it being flooded. The address itself is never stored, and none of this reads the contents of your work.
• Billing details, if you subscribe — but not your card. Payment is handled entirely by Stripe; we store the identifiers they give us for your customer and subscription, and never see the number itself.

Four companies, each doing one job, and no advertising or analytics networks at all — there are no third-party trackers on this site.

• Anthropic processes the content that needs a model — extraction, evaluation, generation, research. Under their commercial terms this is not used to train models.
• Supabase hosts the database and the authentication that sits behind Google sign-in.
• Vercel and Railway host the site and the API.
• Stripe takes the payment if you subscribe. Your card details go to them directly and never touch our servers — we only ever hold the identifiers they hand back. They get your email address so they can send you a receipt.

Job postings are read from companies' own public applicant-tracking APIs. Nothing about you is sent to them, and applying still happens on their site, by you.

If you want warm-intro suggestions, you export your own connections from LinkedIn and upload the file. We do not scrape LinkedIn, do not ask for your password, and do not connect to your account. The export stays in your account and is used only to tell you who you already know at a company you're targeting.

Signing in sets one cookie: a session token that expires after eight hours. It is httpOnly, so no script on the page can read it, and it exists purely to keep you signed in. There are no advertising, analytics or third-party cookies.

Your data is kept while your account exists, because the product is cumulative — a rejection debrief from March is what sharpens a match in June.

Email hello@optiseek.ai to get a copy of everything held about you, correct anything wrong, or delete the account outright. Deletion cancels any paid plan first, so nothing is charged afterwards, and then removes the documents, accomplishments, applications, generated materials and the login itself. There is no waiting period and no fee.

Payment records. If you ever paid us, tax law requires the invoices to be kept — Stripe holds them for the period their rules and ours demand, usually several years, and neither of us can delete them on request. They are invoices: what was charged, when, and to whom. Nothing about your job search is in them.

What things cost us to run. We keep a record of how large each request to the model was, so we can tell whether the price of a plan covers what it costs. When an account is deleted those rows stop being connected to anyone — the size and the date remain, the person does not. They never contained your content.

Every row is scoped to your account and enforced at the database level, not just in application code, so one account cannot read another's. Traffic is encrypted in transit. Secrets live in the hosting platforms' own secret storage.

OptiSeek is a small early-access product, not a certified enterprise vendor. We hold no SOC 2 report. If your career documents contain something you would not want stored by a service of that size, do not upload it.

If this policy changes in a way that affects what happens to your data, we will email you — a quietly edited page is not notice. Questions to hello@optiseek.ai.