Privacy Policy
We believe your career history belongs to you. Qurtesy is engineered from the ground up to operate locally in your browser, minimizing data collection and eliminating server-side resume harvesting.
The Zero-Harvesting Guarantee
Unlike traditional resume builders that store, profile, and monetize candidate work histories, Qurtesy stores your resumes, profile revisions, and application variants in your browser's local IndexedDB vault. We do not sell your personal data or train public AI models on your work experience.
1. Core Architectural Philosophy: Client-Side First
Qurtesy is built on a client-side first architecture. When you draft, format, score, or preview resumes, the computation occurs inside your web browser.
- Local Vault (IndexedDB): Your master profile, tailored resumes, and cover letters are stored in your device's local browser storage. Clearing your browser cache or site data removes this information from your device immediately.
- No Forced Sign-up: Core resume building, ATS parsing, and vector PDF compilation are fully accessible without creating an account or providing an email address.
2. Information We Collect and Process
We strictly limit the data we collect to what is necessary to operate our service:
Information You Voluntarily Provide
If you choose to create an account for cloud synchronization, we collect your email address and authentication credentials. If you upgrade to a paid tier, payment details are processed directly by our PCI-compliant payment partners (Paddle or Stripe); we never store complete payment card numbers.
Technical & Telemetry Data
Like most modern web platforms, our servers receive standard HTTP request logs (IP address, browser user-agent, operating system, and request timestamps) solely for system stability, security diagnostics, and preventing DDoS attacks.
3. Artificial Intelligence & Transient Tailoring
When you invoke AI tailoring features (such as bullet point refinement or job description matching):
- The specific bullet text and target job description are transmitted over encrypted TLS connections to enterprise AI inference providers.
- Under our commercial API agreements, inputs sent via API are not used to train or fine-tune public foundation models.
- Once processing completes, the tailored output is returned to your browser session and is not permanently retained on external AI servers.
4. Cookies and Local Storage
Qurtesy does not use invasive third-party cross-site advertising trackers or marketing cookies. We use:
- Essential Storage: Browser local storage and cookies required to preserve your theme preference (dark/light mode) and maintain active authentication sessions.
- IndexedDB: Storing client-side document state and resume draft files offline on your device.
5. Your Rights Under GDPR and CCPA
Whether you are located in the European Union, United Kingdom, California, or elsewhere, we respect fundamental privacy rights:
- Right of Access & Portability: You can export your entire resume profile at any time in structured JSON or standard PDF format.
- Right to Erasure ("Right to be Forgotten"): You can wipe all stored data on your device at any time, or request full deletion of your cloud account and associated email records.
- Right to Non-Discrimination: We do not discriminate or restrict core functionality against users exercising their privacy rights.
6. Data Security
We enforce strict transport security (HSTS), HTTPS encryption for all network traffic, Content Security Policies (CSP), and restrictive frame/permissions headers to protect against clickjacking, XSS, and unauthorized data leakage.
7. Contact & Data Protection Inquiries
If you have questions about this Privacy Policy, wish to exercise your data subject rights, or require data deletion assistance, please visit our Contact & Support page or email us directly at privacy@qurtesy.com.