Privacy Policy

DestacAI - Last updated: May 2026

Overview

DestacAI is a Chrome extension that generates ATS-optimized CVs tailored to specific job descriptions. This policy describes what data is collected, where it is stored, and which third parties process it. The extension can be used as a guest (no sign-up) or with a free email/password account.

Data Collected

The following data is stored to operate the extension:

• Your uploaded CV file (PDF) and the text extracted from it
• Saved job descriptions and metadata (title, company, application status)
• Generated CV content and ATS scores (both uploaded and tailored)
• Email address and a one-way hash of your password (signed-in users only)
• CV generation count, used to enforce free-tier limits (resets monthly)
• A locally-generated guest identifier and the IP address of the request, used only to enforce guest generation limits
• Stripe customer and subscription identifiers (paid users only — payment card details never touch our servers)
• Extension configuration and preferences

Data Storage

• Cloudflare R2 — uploaded and generated PDF files
• PostgreSQL (Railway) — accounts, jobs, ATS scores, subscription state
• Redis (Railway) — transient job queue for asynchronous CV generation and ATS scoring; entries are removed once a job completes
• chrome.storage.local — session token, guest identifier, extension preferences

Third-Party Services

When generating a CV or computing an ATS score, the text of your CV and the job description are sent to the LLM provider. Sign-up and password-reset codes are sent via Brevo. Paid subscriptions are handled by Stripe.

• OpenAI - Privacy Policy
• Brevo - Privacy Policy
• Stripe - Privacy Policy
• Cloudflare - Privacy Policy
• Railway - Privacy Policy

Data Retention

Guest accounts and all data associated with them (uploaded CV, jobs, generated CVs, ATS scores) are automatically deleted 10 days after creation. Signed-in account data is kept until you delete it: you can remove individual jobs, clear all jobs, or remove your uploaded CV at any time from the Settings screen. Full account deletion is available on request via the contact below.

Contact

For questions about this policy: mlucas4330@gmail.com