Data Transparency

🗄️

How Your Data Is Stored

We take data residency seriously. Here's exactly where everything lives and why.

All data is stored in encrypted databases on Australian servers (Sydney region) - your data never leaves Australia
Your personal information (name, email, education, work experience) is stored in our database and tied to your account
Generated content (resumes, cover letters, PDFs) is stored per-user and never shared with anyone
Your professional profile is YOUR canonical source of truth - you edit it once, and it flows everywhere you need it

🔐

Encryption

We encrypt your data at every layer. Here's the technical breakdown:

In transit: TLS 1.3 (HTTPS) on every single request - no exceptions
At rest: AES-256 encryption for all database volumes in production
Passwords: bcrypt with 12+ rounds - mathematically impossible to reverse
API keys: Encrypted at rest using Fernet symmetric encryption - even database administrators cannot read them in plaintext
PDFs: Stored on encrypted filesystem, served over HTTPS only

🔒

What We CAN'T See

This is the part we're most proud of. Your most sensitive data stays between you and the services you choose.

We CANNOT see your prompts to AI models - they go directly from server to provider, not through our logs
We CANNOT see AI responses - they're processed and discarded immediately
We CANNOT see your API keys after they're stored - they're used ephemerally during generation, never observed by staff
We DO NOT log personal content in server logs - request IDs only, no prompt text, no profile data
We DO NOT sell or share your data with anyone - not advertisers, not data brokers, not anyone. Period.

👁️

What We CAN See

We're honest about what we do access - only what's necessary to make the platform work for you.

Your account info (email, name) - needed for login and account management
Your professional profile - needed to generate tailored resumes and cover letters
Your application history - needed for the CRM feature so you can track your job search
Token usage counts (not content) - needed for billing and quota management so you know your usage

⚖️

Your Rights (Australian Privacy Law)

You have real, enforceable rights under Australian privacy law. Here's what they are in plain English.

Right to access - You can request a complete copy of all data we hold about you (Privacy Act 1988, APP 12)
Right to correct - You can ask us to fix any inaccurate or incomplete data (APP 13)
Right to delete - You can delete your entire account and all associated data. We comply within 30 days, no questions asked.
Right to export - You can export all your data as a JSON file from Settings, anytime
Right to complain - If you're unsatisfied, you can lodge a complaint with the OAIC (Office of the Australian Information Commissioner)

🗑️

How to Delete Your Data

Two simple options. No hoops, no waiting, no guilt trips.

Go to Settings in your dashboard
Click "Delete Account" in the Danger Zone
Confirm deletion
All data permanently removed within 30 days

Or email privacy@compyleapp.com with subject line "Delete My Account" and we'll handle it manually.

🤖

AI & Your Privacy

We use AI to make your job search better, not to spy on you. Here's how that works:

AI processing happens on our server, not in your browser - faster and more secure
Your job description is sent to YOUR chosen AI provider (OpenAI, Anthropic, Google, etc.) - you pick who powers your career
We never store the raw AI prompts or responses - they're processed and immediately discarded
Token counts are tracked for billing, but content is not retained - we know you used 500 tokens, not what you said

🔌

Third-Party Services

We only partner with services that meet high security and compliance standards.

LLM providers: OpenAI, Anthropic, Google, Mistral, and others - entirely your choice which one(s) you use
Payment processing: Stripe (PCI-DSS compliant - we never see or store your card numbers)
Hosting: Australian data centre providers - your data stays in the country

🚨

Data Breach Notification

If something goes wrong, we'll tell you. No cover-ups, no delays.

Fully compliant with the Notifiable Data Breaches (NDB) scheme
We will notify you within 72 hours of becoming aware of any breach
We will notify the OAIC as required by Australian law

👨‍👩‍👧‍👦

Children's Privacy

Compyle is designed for job seekers. Our service is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

Your Data, Your Control