Privacy Policy

This Privacy Policy describes how Ivy Resume Screener ("we", "us", "our") collects, uses, and protects information you provide when using https://ivy.13.140.162.231.nip.io (the "Service").

1. Information We Collect

• Resume data — files you upload (PDF, DOCX, TXT) and the parsed text, including personal details, work history, education, and skills you choose to provide.
• Profile data — name, email, phone, location, LinkedIn URL, salary expectations, job preferences, work authorization status, and other fields you fill in.
• Application data — companies and roles you apply to, recruiter contact info you save, and the application status you set.
• Usage data — standard server logs (IP, user agent, timestamp, requested URL).

2. How We Use Your Information

• To parse, score, and improve your resume against ATS and job-description criteria.
• To match you against the job market and recruiter database.
• To generate cover letters and interview-prep questions (locally or via your chosen AI provider).
• To send application emails on your behalf (only when you click "Send via Gmail" and grant OAuth consent).

3. Gmail Integration

If you choose to connect your Gmail account, we receive and store an OAuth access token and refresh token. We use these tokens only to send the email content you explicitly approved in the "Send via Gmail" flow. We never read your inbox, contacts, or any other Gmail data. You can disconnect at any time from Settings → Gmail Integration or directly at myaccount.google.com/permissions.

4. Data Storage & Security

Your data is stored on a self-hosted SQLite database on our server (13.140.162.231). The server runs over HTTPS. We use industry-standard access controls. No third party has access to your data unless you explicitly grant it (e.g. by adding recruiter contact info to an external email).

5. Data Retention

You can delete any of your resumes, applications, or your entire account at any time. Deleting your account removes all personal data, including Gmail tokens, within 30 days.

6. Your Rights

Depending on your jurisdiction (GDPR, CCPA, PDPL, etc.), you have the right to access, correct, delete, and port your personal data. Contact info@ivydigitals.com to exercise these rights.

7. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

8. Changes to This Policy

We will post any changes here with an updated "Last updated" date.