Privacy Policy

This Privacy Policy describes how Offerfy collects and uses personal data on https://offerfy.cc. It describes current Phase 1 practices. It is not legal advice.

Who we are

Offerfy operates https://offerfy.cc. We process personal data to run the service. Contact: james@offerfy.cc.

What we collect

Guest use: we set an offerfy_guest cookie (HttpOnly, SameSite=Lax, Secure in production). We store a guest session, the resumes attached to it, and rate-limit events in our database.

Signed-in use: when you sign in with Google we receive identifiers from the openid, email, and profile scopes. We store your Google subject identifier, email, and locale, and we set an offerfy_session cookie (HttpOnly, SameSite=Lax, Secure in production).

Language: we set an offerfy_locale cookie so the site stays in the language you chose.

Theme: light/dark preference is stored in the browser with localStorage. It is not a cookie.

Resume data: title, Typst source, compiled SVG and PDF, ATS parseability report, and chat messages.

Uploads: PDF, PNG, JPG, JPEG, WEBP, TXT, and MD files, up to 10 MiB, stored in object storage.

Job catalog: we store copies of public job postings from employer ATS board APIs so we can show the catalog. It also still holds archived postings from TaiwanJobs open data, a source we no longer ingest. These listings are not your personal data.

Usage metering: for each model call we record what it billed — token counts, the model name and a cost figure — attached to your account or guest session, so the weekly allowance can be enforced. We also record when a request was refused for reaching a limit, with the tier and which limit it was. Neither record contains your resume, your uploads or your messages.

Why we use it

We use this data to provide the editor, live preview, PDF export, ATS parseability checks, the public job catalog, authentication, guest rate limits, and the language you selected.

Talent introduction (only if you turn it on)

If you explicitly turn on “Open to matching” in your settings, we pass your resume data to hiring companies, or to recruiters acting for them, to introduce you to roles.

This is off by default. Until you turn it on, we give your resume to no employer. You can turn it off at any time; we then stop passing it on and require anyone who already has it to stop using it.

What we pass on is a short profile built from the published version of a resume you choose — roles, skills, education, and a summary. It never includes your email, phone number, or links; if an employer is interested, Offerfy introduces you. We record every read of your profile and who read it, and you can see that count in your settings.

When we share

Google: to sign you in.

Language-model provider: we send resume, upload, and chat content to an OpenAI-compatible API when you use chat, and — if you have turned on “Open to matching” — to build the profile we show employers.

Employers and recruiters: only if you have turned on “Open to matching”, and only through credentials we issue to named organisations. There is no public or self-serve access.

Infrastructure: database, object storage, and hosting that run Offerfy.

We do not sell personal data. Offerfy does not include a third-party analytics product today.

Retention

Guest data is tied to the offerfy_guest cookie. If you lose that cookie, you lose access to that anonymous session.

Signed-in data is kept until you ask us to delete it. There is no in-app account or data deletion yet. Email james@offerfy.cc to request deletion.

Usage metering and refusal records are kept for 90 days and then deleted. The weekly counters themselves are kept only as long as the window they belong to, plus a short grace period.

Your rights

You may ask us for access to, correction of, or deletion of personal data we hold about you by emailing james@offerfy.cc. We will handle requests in line with Taiwan's Personal Data Protection Act as it applies to us. These pages do not claim GDPR or CCPA compliance that we have not implemented.

Children

Offerfy is not directed at children under 13. The product does not include an age gate.

International processing

Google and the language-model provider may process data on servers outside Taiwan.

Cookies

We use these essential cookies to run the service. There is no cookie banner because we do not use non-essential tracking cookies.

Changes and contact

We may update this policy. The date at the top is the latest version.

Questions: james@offerfy.cc.