Privacy

Three things, and nothing else:

• •Your account. Your email address, name and profile picture, as supplied by Google or GitHub when you sign in. No password is ever created or held — sign-in is handled entirely by those providers.
• •Your profile. Everything you enter or upload: contact details, employers, job titles, dates, locations, what you did in each role, skills, education, languages, certifications and interests. If you paste or upload a resume, the text extracted from it is kept too, so the form can be shown to you again.
• •Usage records. One row each time you generate, upload or download something, holding your account identifier and the time. These exist to count your allowance and to stop abuse. They contain none of your resume content.

When you upload a resume, the file is read in memory, the text is pulled out of it, and the file is discarded. It is never written to disk or to any storage bucket. Only the extracted text is saved, as part of your profile.

Gatecrash is run by a small number of services. Each one sees only what it needs to do its job.

• •Supabase stores the database and runs sign-in. Your profile lives here. Every table is protected by row-level security keyed to your account, so the database itself refuses to return one person's data to another.
• •Vercel hosts the site and runs the code.
• •DeepSeek receives your profile and the job posting at the moment you press Generate, because that is what writes the documents. Nothing is sent to it at any other time. What DeepSeek does with data sent to its API is governed by its own terms, not by this page — if that matters to you, read them before entering anything you would not want processed by a third party.
• •Polar handles payment if you subscribe, as merchant of record. Card details go to Polar and never reach Gatecrash — we store only which plan you are on and the date it runs until.

Your data is not sold, rented, or shared with anyone else. There is no advertising on Gatecrash and no third-party tracking scripts.

The profile exists so you enter your history once instead of retyping it for every application. The usage records exist so the free allowance can be counted and so nobody can run up costs at everyone else's expense. That is the whole of it.

You can clear your profile at any time by emptying the fields on the profile page and saving.

To delete your account entirely — the profile, the usage records and the sign-in itself — email hello@gatecrash.app from the address you signed in with. It will be removed, and this is done by hand rather than by a button, so allow a few days. You are also welcome to ask for a copy of what is held about you.

Traffic is encrypted in transit. Access to your rows is enforced by the database rather than only by application code, so a mistake in the application still cannot expose one account's data to another. Sign-in is delegated to Google and GitHub, which means Gatecrash never handles a password.

No system is perfect. If you find a problem, please write to hello@gatecrash.app rather than disclosing it publicly, and it will be taken seriously.

If this page changes in a way that affects what is collected or who it is shared with, the date at the top will change and the change will be described here rather than made quietly.