هذه الوثيقة متاحة باللغة الإنجليزية فقط، والنص الإنجليزي هو النسخة المعتمدة.
Last updated: 13 October 2026
This Privacy Policy explains how FirstClassJob ("we", "us") collects, uses, shares, and protects your personal information when you use the Service. By using the Service you agree to the practices described here.
Account information: your name, email address, phone number (if you use phone login), password hash, and authentication identifiers from social login providers you choose to use.
Content you provide: your resume, profile details, work history, skills, job descriptions you paste or import, cover letters, and interview practice inputs — which may include personal data about you and, if you include them, third parties.
Usage and device data: pages viewed, features used, actions taken, approximate location derived from IP address, browser and device type, and diagnostic logs.
Payment data: when you subscribe, our payment processor collects billing details. We do not store full card numbers on our servers.
To provide, operate, secure, and improve the Service; to generate AI output you request; to manage your account and subscription; to communicate service and security notices; to prevent fraud and abuse; to comply with legal obligations; and, where you allow it, to understand aggregate usage so we can improve the product.
We do not sell your personal information.
To generate analyses, rewrites, cover letters, and interview coaching, we transmit the relevant inputs (which may include your resume and profile content) to AI providers that process the data on our behalf to return output. Requests go through AvalAI, an OpenAI-compatible AI gateway that is our default route, and — depending on the feature and on fallback routing — OpenRouter, Anthropic, or OpenAI. Voice interview audio is transcribed through the same OpenAI-compatible gateway.
Our other sub-processors, by category: payments — Stripe; transactional email (sign-in codes, notifications) — Resend; product analytics — PostHog, hosted in the United States, and only if you accept analytics; error monitoring — Sentry, configured not to attach personal data such as IP addresses or cookies by default; network delivery and security — Cloudflare; sign-in — Google, LinkedIn, and Facebook, only when you choose to sign in with them; optional integrations you switch on yourself — Gmail, Notion, and Telegram. Codes for phone login are sent through the SMS gateway configured for the Service.
We do not use your resumes, cover letters, job data, or interview content to train or fine-tune AI models, and the Service contains no model-training pipeline. We send your content to AI providers only to produce the output you asked for, and we use these providers only under API terms or settings that exclude your content from their model training.
We share information with: the sub-processors listed above, acting on our instructions; authorities when required by law or to protect rights and safety; and a successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy. We do not otherwise share your personal information for others’ marketing.
While your account is active we keep your account details, resumes (with up to 50 saved versions), tailored versions, cover letters, saved jobs, and settings until you delete them or delete your account.
Some data expires on its own: AI coaching session transcripts are deleted 90 days after they are created; sign-in and password-reset codes expire within minutes; uploaded interview audio is deleted once it has been transcribed.
Security and diagnostic logs (which can include your IP address) and AI usage records (token counts and cost — not your content) are kept for no longer than 12 months. Copies of deleted data in our database backups are overwritten within 30 days.
You can delete your account yourself in Settings → Account → Your data. We ask for your current password — or, if you sign in with Google, LinkedIn, or Facebook, a sign-in within the last 15 minutes — and for you to type DELETE. From the same place you can first download a ZIP of all your data.
Deletion is immediate and permanent. It removes your account and every record tied to it — resumes and their version history, tailored versions, cover letters, jobs and applications, auto-apply records, interview sessions and transcripts, contacts, support conversations, and the subscription and invoice records we hold — together with the files you uploaded or that we archived for you (resume uploads, support attachments, application proofs, and AI session transcripts).
What remains: security and diagnostic log entries and AI usage records stay for the period in section 6 with the link to your account removed; Stripe keeps the payment records it is legally required to keep; backup copies expire as described in section 6. If you have an active paid subscription, cancel it in Billing first.
We use technical and organisational measures — including encryption in transit, hashed passwords, access controls, and encryption of stored secrets — to protect your information. Signing out, changing or resetting your password, and turning two-factor authentication on or off end your other signed-in sessions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on your location, you may have rights to access, correct, delete, export (portability), restrict, or object to the processing of your personal data, and to withdraw consent. You can export all your data and delete your account directly in the app (Settings → Account → Your data), edit or delete individual items where they appear, or contact us. We will respond within the period required by applicable law and will not discriminate against you for exercising your rights.
Your information may be processed in countries other than your own, including by our sub-processors (for example, PostHog analytics in the United States). Where required, we rely on appropriate safeguards for such transfers.
We use a strictly necessary cookie to keep you signed in and to secure the Service. Analytics cookies (PostHog, named ph_…) are set only after you click Accept in the analytics banner; if you click Decline, PostHog is never loaded. You can change your choice at any time in Settings → Account → Your data, which also removes the analytics cookie.
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where appropriate.
Privacy questions or requests: [email protected].