Privacy
A plain summary of what this app keeps about you and where it goes.
What we store
- Your account: name, email, manager/team name, and a hashed password (we never store the password itself).
- Resumes and documents you upload or generate (DOCX, PDF), and the text extracted from them.
- Job postings you save, your bid sheet, notes, application answers, and hiring-process records.
- Interview captions or recordings you choose to capture, and their summaries.
- Basic security records: sign-in attempts (for rate limiting) and daily AI usage counts.
Who sees it
- You. Admins of this GhostAlly workspace can manage accounts and see usage statistics.
- Teammates only after an admin approves you for a team. Approved teammates can see your name, email and bid statistics, and the browser extension can act for an approved teammate.
- AI providers (OpenAI, and OpenRouter for cover letters) receive the resume text, job description, form questions or transcripts needed for the feature you use. Nothing is sent to them when you only edit, store or export.
- PDF conversion runs on this server (LibreOffice) or a converter configured by the operator.
The browser extension
- Reads the job page or application form you are on when you use it, to save the posting or suggest answers.
- Talks only to this GhostAlly site, using a token you can reset at any time in Settings → Reset extension connection.
Keeping and deleting
- Data is kept while your account exists. Deleting a bid, resume or process removes its files from the server.
- Backups are kept for a limited time (14 days by default) and then removed.
- To export or delete your account and data, contact your GhostAlly admin.