Privacy Policy
Effective date: July 15, 2026
ReachUp ("we," "us," or "our") operates the ReachUp platform, a career-intelligence tool that helps job seekers analyze job postings, track applications, and generate tailored documents. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.
By creating an account or using ReachUp, you agree to the practices described in this policy. If you do not agree, please do not use the service.
1. Information We Collect
1.1 Account and Profile Data
When you sign up and build your career profile, we collect information you provide directly:
- Identity: name, email address
- Professional background: job title, years of experience, skills, work history, education, certifications, awards
- Career preferences: target salary range, preferred locations, visa status, learning goals
- Documents you upload: résumé files (processed in memory and immediately discarded — we do not store raw résumé files)
1.2 Usage Data
We automatically collect limited technical data when you use the service:
- Pages visited and features used within the app
- Browser type, operating system, and device category
- IP address and approximate location (country/region level)
- Session timestamps and error logs
We do not run third-party web analytics. Usage data is collected only through our own infrastructure logs.
1.3 Payment Data
If you subscribe to a paid plan, payment is processed by Stripe. We never see or store your full card number, CVV, or bank account details — Stripe handles all payment credentials directly. We receive from Stripe only non-sensitive billing metadata (subscription status, last-four digits, billing country).
1.4 AI-Generated Content
When you use features such as job analysis, résumé tailoring, or cover letter generation, the relevant job description and excerpts of your profile are sent to the Anthropic Claude API. Claude processes this information to produce a result and does not retain it for model training. See Section 3 for details.
2. How We Use Your Information
We use your data to:
- Create and maintain your account and career profile
- Provide the core ReachUp features (job search, analysis, document generation, application tracking)
- Process payments and manage your subscription
- Send transactional emails (email verification, password reset, billing receipts)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Improve and debug the service using aggregated, non-identifiable usage patterns
We do not sell your personal data. We do not use your data to train AI models. We do not send marketing emails unless you explicitly opt in.
3. Third-Party Service Providers
We share data only with vendors necessary to operate the service:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database hosting, and transactional email |
| Vercel | Application hosting and edge infrastructure |
| Stripe | Payment processing and subscription management |
| Anthropic | AI inference for job analysis and document generation |
Each provider is bound by a data-processing agreement and is prohibited from using your data for their own purposes beyond the services they provide to us.
4. Data Retention
- Active accounts: profile and application data are retained for as long as your account is active.
- Deleted accounts: upon account deletion, your profile data and job-application history are permanently deleted within 30 days. Billing records may be retained for up to 7 years as required by tax and accounting law.
- Résumé files: résumé text is processed in memory during extraction and is never written to disk or storage. No raw résumé file is retained after the parsing request completes.
- Server logs: infrastructure logs (IP addresses, request metadata) are retained for up to 90 days for security and debugging purposes.
5. Data Security
We implement reasonable technical and organizational measures to protect your data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256 via Supabase)
- Row-level security policies ensuring each user can access only their own data
- Server-side-only API key handling (AI and payment keys are never exposed to the browser)
- Regular dependency audits
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at naveenyohannan.in@gmail.com before public disclosure.
6. Cookies and Local Storage
We use strictly necessary cookies to maintain your authenticated session (managed by Supabase Auth). We do not use advertising cookies, tracking pixels, or fingerprinting. You can clear cookies via your browser settings, which will sign you out.
7. Children's Privacy
ReachUp is intended for adults who are career-seeking. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has created an account, please contact us and we will promptly delete it.
8. International Data Transfers
ReachUp is hosted in the United States. If you access the service from outside the US, your data is transferred to and processed in the US. We rely on standard contractual clauses and our vendors' data-transfer mechanisms to protect cross-border transfers where required.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data (most data can be edited directly in your profile)
- Delete your account and associated data
- Export your profile data in a portable format
- Withdraw consent where processing is based on consent
- Opt out of any marketing communications (unsubscribe link in every email)
To exercise any of these rights, email us at naveenyohannan.in@gmail.com. We will respond within 30 days (or the period required by applicable law).
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect and how we use it (see Sections 1–3)
- Right to delete your personal information (contact us at the email below)
- Right to opt out of sale — we do not sell personal information
- Right to non-discrimination for exercising your privacy rights
To submit a verifiable consumer request, email naveenyohannan.in@gmail.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, for significant changes, by sending an email to your registered address. Continued use of ReachUp after the effective date constitutes acceptance of the updated policy.
12. Contact Us
For privacy questions, data requests, or security reports:
Email: naveenyohannan.in@gmail.com
We aim to respond to all inquiries within 5 business days.