Privacy

Nothing, if you do not sign in. The LinkedIn rewriter and your first 2 tailored resumes require no account, no email, and no identifier.

Text you submit. Headlines, bullets, About sections, posts, resumes, and job postings are sent to Google’s Gemini API so a result can be generated, then discarded when the request ends. Facet does not store them and does not log them. Uploaded files are read in memory and never written to disk.

Account data, if you sign in. Your email address, and, for Google sign-in, the account identifier Google returns. We do not receive your Google password. A session token is stored so you stay signed in.

Your sign-ins, so you can end them. Each session records the browser and operating system your device reports, the city and country our host resolves at the edge, when it began, and roughly when it was last used. That is what lets your account page list your sign-ins as devices instead of as a number, so you can end one you do not recognize. We do not store your IP address, and these fields are deleted with the session.

Purchase data, if you buy a pass. The Stripe checkout, payment, and customer identifiers, the amount, the currency, the expiry date, and a count of resumes generated against the pass. The count exists so a quota can be explained to the person who paid. The resumes themselves are not stored.

Your email, if you ask to hear when Autopilot opens. The Autopilot pass is not built yet. If you leave an address on the pricing page we store that address, which page it came from, and the date, so we can send one message when it opens. It is not an account, it is not a mailing list, and it is not passed to anyone. Ask us and we delete it.

Career record, only if you turn sync on. Encrypted on your device before upload. We hold ciphertext plus the salt and nonce needed to decrypt it on another of your devices. We hold no key and cannot read the contents.

Ask Facet chats and what you attach, if you use them. Each chat, and the text read out of any file, screenshot or job posting link you attach to one, is encrypted in your browser before it reaches us, on the same terms as the career record. We keep the words that were read, never the file itself, and deleting a chat deletes its attachments. A PDF or Word file is read on our server and a screenshot is read by the Gemini API; either way the text is then sent with your question and not logged.

An exchange you share, only if you share it. Under an Ask Facet answer you can choose to share that exchange so answers can improve. It sends the question, the answer and the resume lines and job posting it was built from, and says so before anything is sent. It is the one thing Facet keeps unencrypted, readable by the team, and only because you pressed share. You can withdraw it from the answer or from Your data, and deleting your data or your account deletes it.

Dictation, if you use it. Speech is turned into text by your browser, not by Facet, and Facet never receives the audio, only the words in the box. Where your browser can recognise speech on your device it does so there. Where it cannot, it sends the audio to its own speech service: Google’s in Chrome, Apple’s in Safari. Where your browser could do it on your device but does not yet have the speech model, the first press on the microphone asks it to download one, and its speech service is used until that finishes. The panel says which while it is listening.

Local device data. Your rewrite history (up to 20 entries), target role, theme, and career context live in your browser’s local storage, not on our servers. Clearing your browser data removes them.

IP address. Used as a rate-limit key at the network edge to prevent abuse. It is not kept as a user record.

Google (AI processing). Submitted text is sent to the Gemini API. Google’s handling is governed by the Gemini API Terms. On paid API tiers Google does not use submitted data to train its models. Review those terms before submitting anything you consider confidential.

Stripe (payments). Card details are collected by Stripe on Stripe’s pages and never reach our servers. Stripe receives your email and billing information and is the record of the sale. See Stripe’s Privacy Policy.

Resend (email). Sends sign-in links and purchase receipts. It receives the destination address and the message. See Resend’s Privacy Policy.

Vercel (hosting, database, analytics). Hosts the site and the database, and receives the request metadata needed to serve pages. Vercel Web Analytics captures aggregate, anonymous pageview statistics. See Vercel’s Privacy Policy.

PostHog (product analytics). Receives event metadata and device information: which pages are visited, which features are used, which modes are popular. It does not receive the text you paste. Session recording is disabled. See PostHog’s Privacy Policy.

Sentry (error tracking). Receives stack traces, routes, and browser details when something breaks. Request bodies on every /api/ route are replaced with a placeholder before leaving our server, so pasted text and uploaded content cannot ride along with an error. See Sentry’s Privacy Policy.

Only to run the service: generate results, honor a pass you bought, sign you in, enforce rate limits, and fix errors. We do not sell your data, do not use it for advertising, and do not share it beyond the processors above.

Submitted text: not retained. Local device data: until you clear it. Sessions: 90 days or until sign-out. Account, career record, and an address left for the Autopilot launch: until you ask us to delete them. Purchase records: kept in minimal form as long as a sales record is legally required, and held by Stripe independently of us.

Depending on where you live, you may have rights to access, correct, delete, or export the personal data we hold about you, and to object to certain processing. Email us and we will act on it. Deleting an account removes the user row, the sessions, and the career record.

Facet is operated from the United States and the processors above operate globally, so data may be processed outside your country. Where required, those transfers rely on the processors’ standard contractual clauses.

Facet is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided data, contact us and we will delete it.

We may update this policy. Material changes are reflected in the “Last updated” date above.

Privacy questions or data requests: hello@usefacet.app.