Privacy Policy

Last Updated: May 8, 2026

1. Introduction

Welcome to WorkHistoryAI. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Zero-Data-Retention for AI Training

A core principle of WorkHistoryAI is data sovereignty. Your personal documents, resumes, job descriptions, and generated text are NEVER used to train public LLMs. All AI processing is conducted securely as a service, and your documents remain entirely under your control.

3. Data We Collect & Act As Controller

• Identity Data: Name, email, and authentication identifiers.
• Document Data: Resumes, PDFs, and career information uploaded.
• Technical/Usage Data: Diagnostics, telemetry, and analytics.

4. Sub-Processors & Data Sharing

We utilize strictly vetted service providers to process your data on our behalf. We do not sell or "share" your data for cross-context behavioral advertising. Our authorized sub-processors include:

• Supabase: Authentication and database hosting.
• Vercel: Hosting and analytics.
• Amazon Web Services (AWS): Document storage and character extraction.
• OpenAI & Google AI: Enterprise-tier LLM processing (Zero data retention policy applied).

5. Right to Erasure / Deletion

You maintain the right to delete your account at any time at /account/delete. Deletion immediately purges your Identity Data and cascades to irrevocably destroy all associated Document Data and generated assets across our databases and storage buckets.

6. Contact Us

For privacy data requests, please contact privacy@workhistoryai.com.