Your data

Your resume is stored in a private database in California and read by Anthropic's API so it can be parsed and tailored. The person running this app, and the AI tools they use to run it, can see everything you store here, so they can support you, fix problems and improve your matches. Your data is not sold, not used for advertising, and not fed to any analytics service. Deleting your account really deletes it from the app.

Database, files, sign-in

Supabase (on AWS), us-west-1, Northern California

The website itself

Vercel, United States

The daily job scan

GitHub Actions, United States

Resume analysis

Anthropic API

Email delivery

Resend

Everything is served over HTTPS, and the two storage buckets (your uploaded file and any generated documents) are private, so nothing is reachable by guessing a URL.

• Your account email address.
• The resume file you upload, exactly as you sent it.
• Everything parsed out of it: jobs, bullet points, education, skills, and your contact details.
• Your preferences: the roles, places and kind of work you're looking for, the pay you need, your experience level, what matters most to you in a job, and your email settings.
• The job leads found for you or pasted by you, and the companies you add to watch.
• What you do with those leads, such as opening one, rating one, passing on one, or marking that you applied or are interviewing.
• Your resume review: its scores, the rewrite suggestions, and your answers to its questions.
• Any tailored resumes and cover letters you generate.
• Anything you add yourself under Extra materials, or send as a bug report or feature request.
• The channel you joined through, if your sign-up link named one (for example WhatsApp), so we can count sign-ups per channel. Nothing else about the link is kept.

Only your three most recent resume uploads are kept. Older ones are deleted automatically, unless a document you generated cites them.

Other users cannot. Every table is locked to the signed-in account at the database level, and every link between tables carries the account id, so one person's data cannot reference another's even by mistake. Your files live under a folder that the database pins to your account.

The person running this app can, and so can the AI tools they use. Cavalry AI is a service from C3PO LLC, a small California company run by Ari, who holds the administrative keys to the database and can read everything listed above, including your email address, your resume and everything parsed from it, your preferences, your leads and what you did with them, and anything you send through Report a bug. Ari also uses AI tools (Claude, made by Anthropic) to support users and run the service, and those tools can read the same data.

Either may look at your data to answer a question you send, to troubleshoot a problem, or to improve how jobs are matched to you. Your resume is encrypted on disk and in transit, but not in a way that hides it from them. If you wouldn't want them reading your resume, don't upload it. That's a straight answer rather than a comfortable one.

Anthropic

Your resume text and any Extra materials you add: it is what reads, reviews and tailors them. Nothing works without it. The AI tools Ari uses to support you and run the service are also Anthropic’s, so any of your data they read goes to Anthropic too. Anthropic processes it under its own terms, and it is the only AI provider this app uses.

Resend

Your email address and the job titles in your digest. Never your resume.

Job boards

Outbound only: we read public listings. They receive a search like “mechanical engineer, Los Angeles”, never your name or resume. One of them (Careerjet) has no HTTPS endpoint, so that search text travels unencrypted, which is why nothing identifying is ever put in it.

Google

Only if you use Google sign-in, and only that you signed in. The email-link option avoids this.

There is no advertising, no session recording, and no selling of anything: no Google Analytics, no advertising pixels, no cross-site tracking.

We do not sell your data. Not your resume, not your email address, not anything else you store here.

What we do count, so we know whether the app is working: page views (via Vercel, the host: which page was opened, roughly where the visit came from, and the kind of device; no cookies, no name, no email, nothing about your resume), and the date you last opened the app, stored on your own row so we can see whether people come back. We also count sign-ups per channel: when a shared link names a channel, a small cookie holds just that channel's name for up to 30 days, until you sign up. None of these can see your resume, and none is shared outside the app and the AI tools described above.

This app never submits an application on your behalf, and no part of it is built to. Every “apply” is a link out to the employer's site or the job board that listed it. When a job shows as Applied, it's because you pressed the button to say so.

Generated resumes are assembled only from lines already in your own resume or materials. The one place text is written for you is the rewrite suggestions, which you approve line by line and can undo. If a number would make a line stronger, you are asked for it. Nothing is invented.

Delete from your profile page and the rows and the stored files go with it, not a hidden flag. One exception: the record of what each AI call cost is kept with your account id removed, so the shared monthly budget stays accurate after you leave. Those rows contain token counts and dollar amounts only, never any part of your resume.

You can also ask for a copy of everything we hold about you, or ask for it to be deleted, by emailing arisklar6@gmail.com.

Deleting your account does not reach copies made outside the app while Ari or his AI tools were helping you, such as text Anthropic keeps under its own terms or notes on Ari's computer. If you want those removed too, say so when you email.

A large company. There is no security certification, no data-processing agreement, and no formal breach process. It is a carefully built service from C3PO LLC, run by one person, Ari, on low-cost hosted services, and small and capped for now. Judge it on that basis.

Questions, or want your data removed by hand? Use Report a bug at the bottom of any page in the app, or email arisklar6@gmail.com. Ari reads every one. A bug report is stored in the app, where Ari and the AI tools described above can read it, so its text can reach Anthropic as described above. He gets an email saying something is waiting, not your message.