Privacy

What we store

Your email address, so you can sign in and get your morning list.

The companies, people, notes, and follow-up history you add.

For each message you log as sent: what kind it was (like a follow up or a thank you), the day and hour, how long since you last wrote, the warmth you gave them, whether you changed our draft a little or a lot (never the changes themselves), how you sent it if you tell us, and whether they replied or said no. We use these to ask whether someone replied and to suggest your next move.

Your resume text, if you paste or upload it for tailoring.

Your preferences, like what time your morning list arrives.

Anonymous page views and page speed on our website, through Vercel Analytics. It uses no cookies and is never tied to your contacts.

Signing in with Google or LinkedIn

If you choose Continue with Google or Continue with LinkedIn, they share your name, email address and profile photo with us, plus the account ID and language setting that come with every sign-in. We don't get your contacts, connections, posts or messages, and we never post or send anything from those accounts.

Where it lives

Your data sits in a hosted database (Supabase) with row-level isolation: every row is keyed to your account, and only you can see it in the app. Our server also reads it to send your morning list and Friday notes.

Your avatar, if you add one, is stored under your account id and served through short-lived signed links.

What we never do

We never message your contacts. Every message is sent by you, from your own email or LinkedIn.

We never sell your list or share it with anyone for their own use. No ads, no data brokers, no exceptions.

Nobody on our side browses your contacts. Operational dashboards show counts and statuses, not your people.

Writing and reading help

Some features send what they need to Google Cloud, whose Gemini models write or read for you, and the result comes straight back to you. Drafts send the person's name and role and your notes. Your daily brief sends company and contact names and where each one stands. Fit checks and tailoring send your profile, your resume and the job post. Interview prep sends the company and the interviewer's name and role. Reading a resume, a card or a file sends that file, photo or text.

Before anything goes, email addresses, phone numbers and profile links are taken out of drafts, briefs, fit checks, tailoring and interview prep. Spreadsheets you import are read in your browser and never sent.

Google does not use any of it to train models. Anything it caches to answer faster is deleted within 24 hours, and like any cloud service it may log requests to catch abuse, as its terms allow.

If Google Cloud ever has an outage, we may switch these features to Anthropic until it's fixed. Anthropic doesn't train on your data either, and deletes it within 30 days.

Delete everything, anytime

On the You page, Delete everything removes your contacts, companies, notes, history (including the facts about each message), uploads, and the account itself. It is immediate and cannot be undone.

You can export everything you have added from the same page first.

Questions

Write to hello@searchshield.app and a human answers.