DRAFT — owner must approve. This text is a placeholder, not legal advice.
Privacy Policy
Last updated 2026-10-06
1. What we store
- Your account: name, email and a hash of your password (never the password itself).
- For each login session: the IP address and browser user agent; and, briefly, your IP address to rate-limit sign-in and sign-up attempts.
- Your tracker data: applications, tasks, follow-ups, contacts, interviews and notes.
- Your resume and the contact details on your profile.
- Your job preferences, including your citizenship, visa sponsorship and security clearance answers.
- Job postings you import.
- AI-written documents (tailored resumes, cover letters and answers) and fit-check results.
- Your Anthropic API key, encrypted with AES-256-GCM. After you save it, only its last four characters are shown.
- Your FreeBoard API keys, stored as hashes plus their first few characters so you can tell them apart.
- AI usage records: token counts only, never the content.
- Billing status: your plan, renewal date, and the payment provider's customer and subscription ids. No card data: the provider holds it.
2. Why we store it
To run FreeBoard for you: show your board, plan your follow-ups, run the features you trigger, apply plan limits, take payments and keep the service secure. We do not sell your data or use it for advertising.
3. Subprocessors
These services process data on our behalf:
| Name | Purpose | Data |
|---|---|---|
| Anthropic, via your own API key | Reading your resume and job postings, tailoring, cover letters and answers | Your resume (including contact details when you import it), job posting text, application questions |
| TypeSafe (Jev) | Verifying AI-written lines and fit checks, paid plans only | Resume text (without name or contact details), job posting text, your job preferences (including citizenship, visa and clearance answers), and AI-written lines |
| Vercel | Hosting | Request logs (IP address, pages requested) |
| Neon | The database | Everything listed under "What we store" |
| Resend | Password reset emails, when this server has email set up | Your email address |
| Paddle (merchant of record) | Checkout, payments, tax, invoices and the billing portal | From us: your account email and your FreeBoard user id (with a signature). You enter your card and billing details directly in Paddle's checkout, and Paddle's own privacy policy applies to them |
4. Retention
- Your account data: until you delete your account.
- AI usage records: 400 days.
- Billing event records: 400 days.
- Cached public job postings (shared, holding no user data): 7 days.
- Expired sessions and password reset links: 1 day after they expire.
5. Deleting your account
Delete it yourself in Settings → Billing → Delete account, with your password. Your account and everything in it are deleted at once: applications, contacts, tasks, follow-ups, notes, interviews, your resume and profile, job preferences, AI documents, fit checks, AI usage records, your Anthropic key, API keys, sessions and pending password reset links. If you have a subscription, it is canceled at the payment provider immediately and the remaining paid time is lost: for a refund, contact support before deleting.
You can also email support@example.com from the address on your account, and we delete it within 30 days. Billing event records hold only the payment provider's event ids, not your account, and are kept for their retention period (section 4). The payment provider keeps its own records of your payments.
6. Cookies and storage
FreeBoard sets a session cookie to keep you logged in and an fb-tz cookie with your time zone, so dates show correctly. Your light or dark theme choice is kept in your browser's localStorage. There are no tracking or advertising cookies.
7. Security
Passwords are stored only as hashes, API keys as hashes, and your Anthropic key is encrypted. Traffic to FreeBoard uses HTTPS. No system is perfectly secure: if a breach affects your data, we will tell you.
8. Changes
We may update this policy. Before a material change takes effect, we may email you about it.
Contact
Questions and requests: support@example.com. FreeBoard is run by [COMPANY OR OWNER NAME].