Privacy Policy

Allumi, San Francisco, USA. Business and support contact: jan@allumi.com.

Version: draft-2026-09-30. Choose from the 29 first-release country targets. Eligibility, role fit and delivery capacity require individual review; country selection does not confirm acceptance.

Jij houdt controle over je feiten

Dit vaste voorbeeld heeft geen upload of accountkoppeling. Het stuurt geen kandidaatgegevens naar Claude. Een uitgebrachte koppeling vereist toestemming, beperkte toegang en een ontkoppelknop. Een latere API-functie vereist eerst een gecontroleerde uitleg over gegevens en bewaartermijnen.

Cookies and tracking

Required login cookies maintain your session. With permission the service stores allowed source and campaign IDs with test signup, payment, delivery and refund events. Email addresses and CV details are excluded. You can remove measurement records from your account. With your consent PostHog receives page visits, link clicks, form submission events, video progress and recorded service events. URLs exclude tokens and private record IDs. PostHog uses an anonymous visitor ID or your account ID. Session recording and form content capture are disabled. Declining stops future browser tracking. Removing account measurement records does not erase records already held by PostHog.

Candidate records

The hosted database holds your account, approved facts, preferences, candidate-confirmed resume text, CV metadata, applications, outcomes and order records. Account checks protect customer records. Operators can review records needed for delivery. Existing PDFs are private attachments, not public assets. Paste your resume as private plain text for candidate confirmation and human review. Links in this text are not fetched. Hosted PDF intake is disabled pending a verified scanner.

Retention and deletion

Private CV access expires after 90 days. Resume text expires after 90 days and is removed in bounded batches when the scheduled cleanup runs. This access limit does not prove deletion from storage or backups. Export is available in the account page. Hosted self-service account deletion is disabled. A scheduled removal process, verified account-deletion procedure and provider backup-retention policy must be established before paid use. No fixed erasure deadline or deletion of provider-held payment/email records is promised by this draft.

Service providers

The hosted service runs on Vercel. Better Auth manages login, with account and service records in Supabase PostgreSQL and existing private PDFs in Supabase Storage. Resend sends verification, recovery and order/refund email. Stripe processes hosted checkout and payment/refund events. The current database is hosted in Mumbai, India; the configured email sending region is Tokyo, Japan. Provider-held records, backup retention and international-transfer terms require a confirmed policy before paid public use.