Privacy Policy

This Privacy Policy describes how Got Leveled ("we", "us", "our") collects, uses, and shares information when you use the Got Leveled service at gotleveled.com (the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.

1. Information we collect

When you use Got Leveled, we collect:

• Account information. When you sign in with Google, we receive your name, email address, and Google profile picture from Google. This is the only sign-in method we currently support.
• Resume content. Resumes you upload or paste are stored so we can analyze, tailor, and export them. Resume content typically includes your name, contact details, employment history, education, skills, and any other information you choose to include.
• Job descriptions. Job descriptions you paste or import via URL are stored alongside the corresponding tailoring session.
• Generated content. AI-generated rewrites, gap analyses, and chat conversations are stored so you can return to them.
• Billing information. If you purchase a tailoring credit pack, we use Stripe to process the one-time payment. We do not store your credit card details. Stripe provides us with your customer ID, the purchased pack, and billing email.
• Usage analytics. We use PostHog (EU region) to collect anonymous product analytics — page views, button clicks, and feature usage. We do not enable third-party advertising trackers.

2. How we use information

We use information to:

• Provide the Service: parse your resume, generate tailored versions, run gap analysis, and export PDFs.
• Bill you for paid features.
• Communicate with you about your account, including security and service updates.
• Improve the Service by analyzing aggregated, anonymized usage patterns.

We do not sell your information. We do not use your resume or job description content for advertising.

3. AI processing

To generate tailored resumes and gap analysis, we send the full text of your resume and the relevant job description to an AI provider (Anthropic by default; other providers may be used as we configure them). The AI provider processes this content to return suggestions, rewrites, and analysis.

When we use Anthropic's API, content is not retained for model training, per Anthropic's API data policy. Other providers we may use have their own data policies, which we will summarize here as we adopt them.

4. Where data is stored

• Database, file storage, and authentication: Supabase, hosted in the United States.
• Frontend hosting: Vercel.
• Backend hosting: Railway.
• Analytics: PostHog, EU region.
• Payments: Stripe.

By using the Service you consent to your information being transferred to and stored in the United States and the European Union.

5. Sharing of information

We share information only with the third parties listed above (Supabase, Vercel, Railway, PostHog, Stripe, and the configured AI provider) to the extent strictly required for them to provide their service to us. We do not share your information with advertisers, data brokers, or marketing partners.

We may disclose information if required to do so by law, or in good-faith belief that disclosure is necessary to comply with legal process, protect the rights or safety of any person, or investigate fraud.

6. Retention

We retain your account, resumes, tailoring sessions, and chat history until you delete your account. To request deletion, please use the contact form linked from gotleveled.com or email us. We will action deletion requests within 30 days.

Stripe billing records are retained per Stripe's retention policy, which we cannot override. PostHog analytics events are retained per PostHog's default policy.

7. Your rights

You have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.

To exercise any of these rights, please contact us via the contact form on gotleveled.com.

8. Security

We use industry-standard practices to protect your information, including TLS for data in transit and access controls on the systems that store your data. No system is perfectly secure; we work continuously to improve our posture and respond to vulnerabilities.

9. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will also be communicated by email to active account holders where appropriate.

11. Contact

For privacy questions or to exercise any of the rights described above, please reach us via the contact form on gotleveled.com.