Privacy Policy

This policy covers the Composura website and product. It is written to be read: each section starts with the plain version, and the details underneath never contradict it. Where a number appears (a retention window, a price), it is generated from the same configuration the product enforces, so this page and the code cannot quietly disagree.

[FOUNDER/COUNSEL REVIEW] Controller identity, registered entity name, and postal address to be inserted here before wide distribution.

• Account and access: your email address and sign-in identity, handled by our sign-in provider, plus which unlocks and credits your account holds.
• Prep materials: the job posting, your resume, an optional emphasis note, and your interview date. The posting, resume, and emphasis note are encrypted by our application before they are stored.
• Your stories and memories: what you share in onboarding, story capture, and the journal, kept as private memories tied to your account, encrypted at the field level, plus a profile of your writing style so output sounds like you.
• Practice sessions: your typed or spoken answers as transcripts (practice transcripts are field-encrypted) and the resulting scorecards.
• Voice, only with consent: if you enable speaking, the short answer clips you record during onboarding are kept as audio files in private storage, and spoken practice is transcribed live rather than kept as audio. We compute delivery metrics (pace, pauses, filler words); we never compute mood or emotion.
• Payments: handled by Square. We receive the payment confirmation, amount, and the buyer email so we can unlock your account. Your card details are entered with Square and never touch our servers.
• Anonymous previews: if you try the preview before signing up, what you paste is encrypted and deleted within 1 day.
• Analytics: aggregate, cookieless page counts and funnel events with no personal identifiers; session ids are scrubbed out of URLs before they are sent.
• Consent records: when you grant a consent (voice, memory capture) we record the time, the policy version you saw, and technical proof of the grant (IP address and browser identifier), because we may need to demonstrate it later.

Your materials, stories, and sessions are used to generate your packs, run your practice, and coach you. Your email is used to deliver purchases, unlock your account after payment, and answer support requests. Aggregate, anonymous analytics tell us which pages work.

We do not sell or rent personal data, do not share it with advertisers or data brokers, do not build advertising profiles, and do not perform emotion or mood inference anywhere in the product.

Every request that processes your personal content passes through a single enforcement point in our code. That enforcement point refuses, request by request, to send personal content to any processing path that is not verified as no-training and no-retention, and the same check runs when the product starts: a production deploy that cannot prove its configured paths are no-training refuses to boot at all.

The processing providers we use for generation run on paid tiers under terms that do not use customer content for training. Public text you paste (a job posting) may be parsed on a standard tier; your personal content never is.

• Uploaded resumes and job postings

  Deleted 30 days after your pack is delivered (45 days after submission if an order never completes)

  Encrypted before storage; a daily job erases the encrypted content on schedule. Email us to delete sooner.

• Practice-interview transcripts

  Cleared when the matching pack inputs are purged, or after 45 days at the latest

  Encrypted before storage. Your scorecard (the numbers and feedback) is kept for you.

• Anonymous previews tried before signing up

  Deleted within 1 day

  Encrypted before storage and erased by the same daily job.

• Raw voice recordings (spoken answers)

  Deleted within 30 days

  Stored in a private bucket only your account can reach. A delete-now button in Settings removes them immediately.

• Your stories, writing-style profile, and saved memories

  Kept while your account is active

  They are the product: your prep is built from them. Review, edit, or delete any of them at any time; deleting your account removes them all.

• Order and payment records (email, amount, date)

  Kept as long as accounting and tax law requires

  A financial record, not profile data. The sensitive content inside an order is encrypted and purged on the schedule above.

These windows are enforced by an automated daily job, not by a manual promise. Want something gone sooner? Most of it you can delete yourself in Settings immediately; for anything else, email us and we will handle it within 7 days. If an order never completes, its inputs are erased 45 days after submission.

All traffic runs over HTTPS. Everything we store is encrypted at rest by our infrastructure provider. On top of that, the most sensitive fields (your resume, job postings, practice transcripts, and saved memories) are encrypted a second time by our own application with AES-256-GCM under versioned, rotatable keys, so even direct storage access does not expose them.

Every stored row is isolated to your account with database-level access rules, and identity comes only from your verified sign-in session, never from anything a browser can claim. The full engineering detail, including what is and is not covered by each layer, lives on our security page.

• Fly.io: Application hosting. All traffic passes through its infrastructure while being served. Infrastructure only; no use of content for anything but running the service.
• Supabase: Database and file storage. Everything the product stores, encrypted at rest. Storage only; never reads or uses content.
• Clerk: Sign-in and account identity. Your email and sign-in credentials. Identity only; never sees your prep content.
• Google (Gemini): Generates your materials and coaching. The text needed to prepare you: your inputs, stories, and session context. Paid tier under terms that do not use your content for training; our servers refuse to send personal content down any path not verified that way.
• Square: Payments. Your email and card details, entered on Square, never on our servers. Payment processing only.
• Resend: Transactional email (delivery and welcome messages). Your email address and the message content we send you. Email delivery only.
• Plausible: Cookieless, aggregate page analytics. Page views and funnel events with no cookies, no personal identifiers, and ids scrubbed from URLs. Aggregate counts only; cannot identify you.
• AssemblyAI: Live speech-to-text, only while spoken practice is enabled. The audio stream of a spoken practice answer, transcribed in real time. Transcription only, under no-training API terms.

We keep this list current on this page. [FOUNDER/COUNSEL REVIEW] Data-processing agreements with each provider to be catalogued and countersigned where required; status is tracked internally.

• Access and portability: Settings → Export downloads everything we hold about you as a readable file, decrypted for you. The export covers every category deletion removes, so portability is never narrower than erasure.
• Erasure: Settings → Delete account permanently removes your content, memories, recordings, credit balance, and sign-in identity. If any part fails, the deletion reports failure rather than pretending it succeeded.
• Correction: your stories and memories are directly editable and individually deletable inside the product.
• Restriction (pause): the memory-capture switch in Settings stops anything new from being saved, enforced on our servers, until you turn it back on.
• Consent withdrawal: voice and memory consents can be revoked in Settings at any time; revocation stops the capability immediately.
• Recordings: a delete-now control removes your raw voice clips immediately, ahead of the automatic 30-day purge.

These controls implement the rights in GDPR (access, portability, erasure, rectification, restriction, withdrawal of consent) and the CCPA (access, deletion, and no sale of personal information; we do not sell or share personal information as those terms are defined, and we do not discriminate for exercising rights). You can also exercise any right by email: hello@offerreadyapp.com (we respond within 7 days). [FOUNDER/COUNSEL REVIEW] Named supervisory authority and formal complaint routes per market.

Where GDPR applies, our bases are: performance of a contract (generating and delivering your prep), consent (voice capture, memory capture, each separately revocable), legitimate interests (service security, abuse prevention, aggregate cookieless analytics), and legal obligation (retaining order records for accounting and tax). [FOUNDER/COUNSEL REVIEW] Transfer mechanism per region (for example, standard contractual clauses with each provider) and the definitive statement of hosting regions.

Composura is not directed to children, and you must be old enough to form a contract in your jurisdiction to use it. [FOUNDER/COUNSEL REVIEW] Exact minimum-age line per market.

If this policy changes materially, the date at the top changes with it and the in-product consent records keep the version you actually saw. Continued use after a change means you accept the updated policy.

Privacy questions, requests, or complaints: hello@offerreadyapp.com.