Privacy Policy

This explains what Replyrate stores, why, and what you can do about it. It reflects how the service actually works rather than describing collection we don't do.

What we store

• Account — your name, email address, and a hashed password. Passwords are hashed with bcrypt and are never stored or recoverable in plain text.
• Profile — whatever you choose to enter: headline, experience, education, skills, achievements, career highlights, links, and preferences. This is used to generate your application drafts.
• Résumé file — if you upload one, the PDF is stored with our file-hosting provider (Cloudinary) and linked from drafts you generate.
• Applications — jobs you save, their status, and the draft text you keep.
• Contact searches — the companies you search and the results returned.
• Usage and billing — a record of metered actions for enforcing plan limits, and a record of each payment attempt.

What we don't store

• Card details. Payments go directly to Razorpay; card data never reaches our servers.
• Your email account credentials. Drafts open in your own mail client — we never send email as you.
• Any content of emails you actually send.

Third parties we share data with

Only what each provider needs to do its job:

• Google Gemini — your profile details and the target job are sent when you request an AI-written draft.
• Prospeo — the company name you search, to return business contact details.
• Cloudinary — your résumé file, if you upload one.
• Razorpay — your payment, handled entirely on their side.
• Neon and Vercel — database and hosting.

We don't sell your data, and we don't use it to train any model.

Contact data about other people

The HR finder returns business contact details sourced from third-party providers or derived from public company domains. These are professional contacts, and results are cached and shared across accounts so the same company isn't looked up repeatedly. Use them only for genuine job applications — sending bulk or unsolicited mail is a breach of our terms. If you are a contact who would like their details removed, please contact us.

Cookies

One cookie: a signed, httpOnly session cookie that keeps you logged in. No advertising or third-party tracking cookies.

Retention

Your data is kept while your account exists. Delete your résumé at any time from the Profile page. If you close your account, your profile, applications and searches are deleted, except payment records we need to keep for accounting.

Your rights

You can access and correct your data from the Profile page, or ask us for a copy or for deletion via the contact page.