Privacy Policy

This Privacy Policy describes how Offerfy collects and uses personal data on https://offerfy.cc. It describes current Phase 1 practices. It is not legal advice.

Who we are

Offerfy operates https://offerfy.cc. We process personal data to run the service. Contact: james@offerfy.cc.

What we collect

Guest use: we set an offerfy_guest cookie (HttpOnly, SameSite=Lax, Secure in production). We store a guest session, the resumes attached to it, and rate-limit events in our database.

Signed-in use: when you sign in with Google we receive identifiers from the openid, email, and profile scopes. We store your Google subject identifier, email, and locale, and we set an offerfy_session cookie (HttpOnly, SameSite=Lax, Secure in production).

Language: we set an offerfy_locale cookie so the site stays in the language you chose.

Theme: light/dark preference is stored in the browser with localStorage. It is not a cookie.

Resume data: title, Typst source, compiled SVG and PDF, ATS parseability report, and chat messages.

Uploads: PDF, PNG, JPG, JPEG, WEBP, TXT, and MD files, up to 10 MiB, stored in object storage.

Why we use it

We use this data to provide the editor, live preview, PDF export, ATS parseability checks, authentication, guest rate limits, and the language you selected.

When we share

Google: to sign you in.

Language-model provider: we send resume, upload, and chat content to an OpenAI-compatible API only when you use chat.

Infrastructure: database, object storage, and hosting that run Offerfy.

We do not sell personal data. Offerfy does not include a third-party analytics product today.

Retention

Guest data is tied to the offerfy_guest cookie. If you lose that cookie, you lose access to that anonymous session.

Signed-in data is kept until you ask us to delete it. There is no in-app account or data deletion yet. Email james@offerfy.cc to request deletion.

Your rights

You may ask us for access to, correction of, or deletion of personal data we hold about you by emailing james@offerfy.cc. We will handle requests in line with Taiwan's Personal Data Protection Act as it applies to us. These pages do not claim GDPR or CCPA compliance that we have not implemented.

Children

Offerfy is not directed at children under 13. The product does not include an age gate.

International processing

Google and the language-model provider may process data on servers outside Taiwan.

Cookies

We use these essential cookies to run the service. There is no cookie banner because we do not use non-essential tracking cookies.

Changes and contact

We may update this policy. The date at the top is the latest version.

Questions: james@offerfy.cc.