Privacy Policy
Plain English summary: We collect only what we need to run the service. We don't sell your data. You can delete your account and data at any time. We use Google Firebase to store data securely. If you have questions, email us at [email protected].
1. Who We Are
Ansokan.ai is operated by Ansokan Inc., a Delaware C Corporation. We provide an AI-powered job search platform that helps job seekers create cover letters, generate CVs, find job matches, and prepare for interviews.
For the purposes of GDPR, Ansokan Inc. is the data controller for personal data collected through ansokan.ai.
2. What Data We Collect
Account information
- Name and email address (when you sign up)
- Profile photo (if signing in via Google or LinkedIn)
- Authentication data (managed by Google Firebase Authentication)
CV and career data
- CV content you upload (PDF parsed and stored as text)
- Job applications you track (company, role, status, notes)
- Cover letters you generate and edit
- Interview prep sessions and answers
- Job matches and saved/dismissed roles
Usage data
- Features used and frequency (for usage limits and product improvement)
- Language and market preferences
- Session and interaction data via Google Analytics (anonymised)
Payment data
- Billing information is processed and stored by Stripe. Ansokan Inc. never sees or stores your card details.
- We store your Stripe customer ID and subscription status to manage your Pro account.
Data we do NOT collect
- We do not collect your Swedish personal identity number (personnummer)
- We do not collect biometric data
- We do not collect data from minors under 16
3. How We Use Your Data
- To provide the service — generating cover letters, tailoring CVs, scoring job matches, and running interview prep all require your CV text and preferences
- To send you emails — weekly digest emails, invite emails, and transactional emails (receipts, password resets)
- To improve the product — anonymised usage patterns help us understand which features are valuable
- To process payments — Stripe handles billing; we manage your subscription status
- To comply with legal obligations — we retain certain records as required by law
We do not use your data to train AI models for third parties. Your CV and career data are used solely to provide the Ansokan.ai service to you.
4. Legal Basis for Processing (GDPR)
For users in the European Union and European Economic Area, our legal basis for processing personal data is:
- Contract — processing necessary to provide the service you signed up for
- Legitimate interests — product analytics, fraud prevention, and service improvement
- Consent — for optional communications such as weekly digest emails (you can unsubscribe at any time)
- Legal obligation — where required by applicable law
5. Data Storage and Security
Your data is stored on Google Firebase infrastructure (Firestore database, Firebase Storage, and Firebase Authentication). Google Cloud maintains SOC 2 Type II, ISO 27001, and GDPR compliance certifications.
Our Firebase project is configured in the europe-west1 (Belgium) region for EU users. Data may be processed by Google on infrastructure located in the United States in accordance with Google's Data Processing Amendment.
We implement the following security measures:
- All data transmitted over HTTPS/TLS encryption
- Firestore security rules restrict data access to authenticated owners only li>API keys and secrets stored in Google Cloud Secret Manager, never in source code
- Firebase Authentication handles password hashing and session management
6. Data Sharing
We do not sell your personal data. We share data only with the following service providers, solely to operate the platform:
- Google Firebase — database, authentication, storage, and hosting
- Anthropic — AI processing of CV text and job descriptions to generate cover letters, CVs, and interview questions. Data sent to Anthropic is not retained for training per Anthropic's API terms.
- Stripe — payment processing for Pro subscriptions
- SendGrid (Twilio) — transactional and digest email delivery
- Google Analytics — anonymised usage analytics
We do not share your CV, cover letters, or application data with employers or third parties without your explicit consent.
7. Your Rights
Depending on your location, you may have the following rights:
For EU/EEA users (GDPR)
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Restriction — request we limit processing of your data
For California users (CCPA)
- Know — request disclosure of personal information collected, used, disclosed, or sold
- Delete — request deletion of personal information
- Opt-out — we do not sell personal information; no opt-out required
- Non-discrimination — we will not discriminate against you for exercising your rights
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your profile, CV, cover letters, and applications are deleted within 30 days
- Anonymised usage analytics may be retained indefinitely
- Payment records are retained for 7 years as required by US tax law
- Backup copies may persist for up to 90 days before being purged
9. Cookies and Tracking
We use the following cookies and tracking technologies:
- Firebase Authentication — session cookies required for login
- Google Analytics — anonymised usage tracking. You can opt out via Google's opt-out tool
- LinkedIn Insight Tag — conversion tracking for LinkedIn advertising. Governed by LinkedIn's privacy policy.
We do not use advertising cookies or sell data to ad networks.
10. Children's Privacy
Ansokan.ai is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, contact [email protected] and we will delete it promptly.
11. International Data Transfers
Ansokan Inc. is based in the United States. If you are located in the EU/EEA, your data may be transferred to and processed in the United States. We rely on Google's Standard Contractual Clauses and Anthropic's Data Processing Agreement to ensure GDPR-compliant transfers.
12. University and Institutional Users
If you access Ansokan.ai through an institutional account (university, bootcamp, or career centre), your institution's administrator may have access to aggregate analytics about your usage. They cannot see your individual cover letters, CV content, or application notes. If you are a student at a US institution, your institution may be subject to FERPA. Please contact your institution's privacy office if you have questions about how your data is handled under FERPA.
13. The 1-Click Apply Browser Extension
The 1-Click Apply extension for Google Chrome is an optional companion to Ansokan.ai. It handles data as follows:
- It reads a page only when you click it, unless you turn on the on-page button. By default the extension reads the job advert or application form in the tab you clicked its icon or one of its buttons on, and has no standing access to any website. If you choose "Show the 1-Click button on job sites", you give it access to a short list of job sites (named when you turn it on). On those sites it reads the page to decide whether to show its button. Nothing from the page is sent anywhere until you click the button. You can turn this off at any time in Chrome's extension settings.
- Background worker. A small background script shows the icon badge (working, ready, needs attention) and opens Ansokan.ai in a background tab when you start 1-Click Apply from the on-page button. It does not read pages and sends nothing anywhere.
- Job details go only to Ansokan.ai. When you click 1-Click Apply, Cover letter, Tailor CV or Save to tracker, the role, company, job description and advert URL are passed to the Ansokan.ai page in your browser and saved to your account, the same as if you had entered them in the app. They are used to write your cover letter and tailored CV and to add the job to your tracker.
- Your autofill details stay in your browser. The name, email, phone, LinkedIn, website and location you enter in the extension's settings are stored in the extension's local storage on your computer. They are not synced to your Google account and are never sent to Ansokan.ai or anyone else. "Delete my details" in the settings removes them.
- Saved applications stay in your browser. The cover letter and CV made for a job, together with the name, email, phone, LinkedIn and location from your Ansokan.ai account used to fill the form, are kept in the extension's local storage, at most 10 at a time, and each is deleted after 7 days. They leave your browser only when you click "Fill application", into the form in that tab. "Delete saved applications" in the settings removes them.
- No tracking. The extension contains no analytics, no advertising and no remote code. It never submits an application for you.
We do not sell data from the extension, do not use it for advertising, and do not use it to determine creditworthiness or for lending purposes. Its use of data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the app at least 14 days before the change takes effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
15. Contact Us
For any privacy questions, data requests, or concerns: