Privacy policy

Short version: we collect the minimum, we sell nothing, and your journal is never training data. The long version below says the same thing with more words.

On this website

• No cookies, no trackers. This site sets no cookies and loads no third-party analytics or fonts.
• Your account: we store your email address and when you signed up. If you sign in by emailed link there is no password at all; if you choose one, only a salted hash of it is stored, never the password itself.
• Abuse protection: signup requests are rate-limited using a salted cryptographic hash of the request IP. Raw IP addresses are never stored.

In the product (beta)

• Account data: email and name, for signing in.
• Journal entries and resumes: stored encrypted at rest, isolated per-account with database-level row security. This is your data; we’re the custodian.
• AI processing: when you use tailoring or auto-tagging, the relevant entries are sent to our AI provider (Anthropic) to generate your result. They are processed to serve your request — not to train models. We never sell or share your journal.
• Payments: there are none during the beta. If paid plans arrive, card details will be handled by the payment provider and never reach us.
• Product analytics: minimal, aggregate event counts to understand what’s used. Never the content of your journal.

Your rights

• Export — take your journal and resumes with you, anytime.
• Delete — deleting your account permanently removes your data from production within 30 days, backups within 90.
• Ask — email hello@flexmywork.com and a human answers.

Changes

If this policy changes materially, we’ll email account holders before the change takes effect and note it in the changelog.