What we hold, and what we do not.

What is stored

To do its job the application keeps the documents and details you give it: your master résumé and cover letter, the job postings you paste in, the applications generated from them, the answers you save to reuse, and your account’s email address and name.

All of it lives in a Postgres database on one server, in one Docker volume. It is not replicated to a third party, and it is not used to train anything.

What leaves the server

One thing does. Generating tailored text requires a language model, and that means sending the relevant part of your résumé and the job posting to the AI provider configured for the instance — OpenAI by default, Anthropic if selected. Their terms govern what happens to it there.

Nothing else is transmitted. Document conversion, text extraction, spell checking and every verification check run locally on the server. A self-hosted instance with its own provider key sends that data to the provider you chose and to nobody else.

Cookies

Two, both strictly necessary, both httpOnly so no script on the page can read them: a short-lived access token and a longer-lived refresh token. They exist to keep you signed in. There are no analytics, advertising or tracking cookies, which is why you were not asked to consent to any.

The Chrome extension

The extension reads the job posting page you are actively viewing, and only when you click to review it. It does not run in the background, it does not read other tabs, and it sends what it reads to your own Dossier instance rather than to us. It never submits an application on your behalf.

Email

The only message the application can send is an invitation containing a single-use link. It is delivered through Amazon SES. There is no newsletter and no marketing mail, so there is nothing to unsubscribe from.

Retention and deletion

Data is kept until you delete it or ask for the account to be removed. Deleting an application deletes its generated documents. Ask us to remove an account and everything belonging to it goes with it. Backups are snapshots of the whole disk and age out on their own schedule.

Your rights

You can ask what is held about you, ask for a copy, ask for corrections, or ask for all of it to be deleted. Write to dossier@askaryabbas.com and it will be handled directly — there is no ticket queue between you and the person who runs this.

Changes

If this page changes in a way that affects what is collected or where it goes, the date above changes and anyone with an account is told.