Trust & data

Your search is yours.

A job search is a private thing, and a layoff makes it more private, not less. This page says plainly what we hold, who touches it, and how to make it go away. The binding version is the Privacy Policy; nothing here overrides it.

What we store

Your account: Email address, and a password hash held by our authentication provider. If you sign in with Google: the name, email and picture Google shares.
What you upload: Your resume file, and the profile we parse out of it — roles, achievements, skills, contact details.
What you write: Job descriptions you paste, resume variants and cover letters we generate, career test answers, and your Career Plan.
What you track: The applications you save, their status, and the notes you keep against them.
Payments: Transaction and subscription metadata from Stripe. Card numbers never reach us.

What we never do

Sell your personal information, or share it for cross-context advertising.
Show your employer — current or former — what you write, apply to, or discover.
Load analytics or advertising tags before you have said yes to them.
Take card numbers. Payment details go straight to Stripe and never touch our servers.

What goes to the AI

To tailor a resume or build a plan, we send the relevant parts — resume content, the job description, your career test answers — to Google Gemini through its API. Google processes it as our service provider, and under the Gemini API terms that apply to paid usage, data sent through the API is not used to train Google’s models. Output can still be wrong: read it before you send it anywhere.

Who else touches it

The companies we rely on to run the service. Each one is bound by its own data processing terms with us.

Supabase	Database, sign-in, and file storage (uploads, PDF exports)
Google Cloud	Application infrastructure and the Gemini AI API
Stripe	Payments and subscription billing
Resend	Transactional and marketing email
Cloudflare	Hosting, security and CDN
PostHog	Product analytics — in the EU only after you consent; in the UK anonymous statistics until you accept; in the US on by default with an opt-out
Google Tag Manager / Analytics 4	Web analytics — after consent in the UK and EU; in the US on by default with an opt-out

How to delete everything

In your account settings there is a delete option. It removes your resume data, uploaded files and exports. You can also write to us and we will do it for you — we aim to answer within one business day and, for formal requests, always within 30 days. Depending on where you live you can also ask for a copy, a correction, or a restriction of use.

If you think we have handled your data wrongly, tell us through our data complaint form. We confirm every complaint, look into it, and tell you the outcome.

If your employer bought you a seat

Companies buy outplacement packs as a set of activation codes. That design has a consequence worth stating out loud:

We never receive your employer’s list of people. They hand out codes; you activate one with an email of your own choosing.
The account is yours. It does not end when the code does, and your former employer has no access to it.
Your employer sees counts, never people — how many seats were activated, and how the group is doing in aggregate.
Aggregates are withheld entirely below five respondents, because a number drawn from three people is a name.
Anything you write in feedback stays with us unless you explicitly agree to share it.

Mirrai Careers is operated by MirrAi Chat LTD, UK company No. 16403306, 71–75 Shelton Street, London, WC2H 9JQ. Questions about any of this go to [email protected].

Full detail: Privacy Policy · Terms of Service · Fair Use