Security

Data in transit and at rest

All traffic to CLAK is encrypted over HTTPS. Your resume content, Career Memory, and account data are stored in a managed Postgres database with row-level access scoped to your account — other users can never query or see your data.

Authentication

Sign-in is handled by Supabase Auth. We never see or store your raw password, and session cookies are the only cookies we set — no third-party trackers.

AI providers

Job descriptions and resume text you submit are sent to OpenAI and/or Anthropic solely to generate analysis and rewrite suggestions. Per their current API terms, submissions through their API are not used to train their models.

Account deletion

You can permanently delete your account and all associated data at any time from Settings. This action is immediate and cannot be undone.

Report a vulnerability

If you believe you've found a security issue, please email [email protected] with details — we take reports seriously and will respond promptly.