Privacy Policy

1. Information We Collect

We collect the following types of information when you use Always First AI:

• Account information: Email address and password (or Google OAuth credentials) provided during registration
• Resume data: Resume content you upload to personalize outreach emails, including work history, skills, and education
• Job search criteria: Preferred job titles, locations, salary ranges, work mode preferences, and other search filters you configure
• Email account access: OAuth tokens for your connected Gmail or Microsoft Outlook account, used solely to send emails on your behalf
• Payment information: Processed securely by Stripe. We do not store your full credit card number, CVV, or billing address on our servers
• Usage data: Pages visited, features used, emails sent, job matches viewed, and general interaction patterns

2. How We Use Your Information

• To operate the Service: scanning job boards, scoring matches, identifying hiring managers, and sending outreach emails
• To personalize AI-generated emails using your resume and profile data
• To process payments and manage your subscription
• To improve our AI models and matching algorithms using aggregated, de-identified data
• To communicate with you about your account, service updates, and support requests

3. Email Account Access

When you connect your Gmail or Outlook account via OAuth, we receive a limited-access token that allows us to send emails on your behalf. We do not:

• Read your incoming emails or existing mailbox content
• Access your contacts list
• Store your email password
• Send emails to anyone other than identified hiring managers for jobs matching your criteria

You can revoke email access at any time by disconnecting your account in Settings or by revoking the OAuth grant directly through your email provider.

4. Data Storage and Security

Your data is stored on secure, encrypted infrastructure provided by Supabase (PostgreSQL). All data is transmitted over HTTPS. Resume files are stored with row-level security policies ensuring only you and our automated pipeline can access your data. We implement industry-standard security practices including encryption at rest and in transit.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Aurinko: Email OAuth connection management
• OpenRouter / OpenAI: AI-powered email generation and job scoring
• Data enrichment providers: Contact information lookup for hiring manager identification
• Vercel: Application hosting

Each provider processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

6. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your resume, job search criteria, or email content with advertisers. Your data is used exclusively to provide and improve the Service.

7. Data Retention and Deletion

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days in case you resubscribe, then permanently deleted. You may request immediate deletion of all your data by contacting support@alwaysfirst.ai. Upon deletion, we remove your resume, search criteria, outreach history, and connected email tokens.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics data is collected in aggregate form without personally identifying information.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at support@alwaysfirst.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after such notice constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at support@alwaysfirst.ai.