Your data, in plain words.

Supalander is run by Ecliptz Labs, based in Telangana, India. We are the data controller for everything described here.

Reach us any time at hello@supalander.com.

Only what a feature needs. Here is the full list:

• Account basics. Your email and, if you sign in with Google, the name Google shares with us. That is what creates your account.
• WhatsApp number. Only if you turn on alerts. You confirm it with a one-time code. We store the code as a hash, never in plain text, and it expires in 10 minutes.
• Alert preferences. The job areas, work types and salary floor you pick for alerts.
• Saved jobs. Which listings you bookmarked.
• What you write. Resumes, cover letters and your About Me career profile. This is your content and it lives in your account.
• AI usage records. Each time you use an AI feature we log which feature, which model served it and how many tokens it used. We do not store the prompt or the answer in that log.
• Job engagement. When you view, click or save a listing we count it once per account. Signed-out visitors are counted under a random browser id that is not linked to a person.
• Rate limit counters. Short-lived counts of how often you hit a feature, so nobody can abuse the platform.

We run no analytics scripts and no ad trackers. The only cookies are the ones that keep you signed in. Your theme choice (light or dark) is saved in your browser only.

• To sign you in and keep your account yours.
• To show you jobs, remember your saves, and rank listings by what people engage with.
• To send you a WhatsApp alert when a new listing matches your preferences.
• To run the AI tools you trigger: resume tailoring, cover letters, About Me.
• To keep the service safe: rate limits, abuse prevention, security logs.

We do not sell your data. We do not build advertising profiles. We do not use your resumes or letters to train models.

When you press an AI button, the text needed for that task (your resume data, the job description, your career profile if you enabled it) is sent to our AI model gateway to generate the result. Nothing is sent until you ask.

The gateway processes the request and returns the answer. We keep only the usage record described above. You own everything you write and everything the tool produces for you.

AI output can be wrong. Read it before you send it to an employer.

• Alerts are strictly opt-in. You add your number, you confirm the code.
• You get at most one alert every 20 hours, and only for jobs matching your filters.
• Reply STOP to pause and RESUME to continue. You can also change everything at supalander.com/alerts.
• Messages are delivered through the official WhatsApp Business platform. Standard carrier data rates may apply.

We use a small number of infrastructure providers, each under a contract that limits them to acting on our instructions:

• An authentication and database provider that stores your account and content.
• An AI model gateway that runs the AI features when you trigger them.
• The messaging platform for WhatsApp that delivers alerts.
• An edge hosting provider that serves the site.
• An email service for sign-in links and account mail.

Some of these providers operate outside India and the EU. Where they do, transfers rest on their standard contractual safeguards.

• Your account and content: until you ask us to delete it.
• One-time codes: 10 minutes, then gone.
• Rate limit counters: hours, rolling.
• Job listings: never deleted. Expired roles are archived so rankings and history stay honest. Listings contain employer information, not yours.

Wherever you live, you can ask us to access, correct, export or delete your data, and you can withdraw consent for alerts at any time. If you are in India, the Digital Personal Data Protection Act gives you these rights by law. If you are in the EU or UK, the GDPR does the same, plus the right to complain to your local data authority.

Deletion today is by email. There is no self-serve delete button yet. Write to hello@supalander.com from your account email and we will erase your account and content within 30 days, then confirm.

Every table sits behind row-level access rules, so your data is only readable by you and by server code acting for you. Secrets live in server configuration, never in the browser. Every feature is rate limited. Verification codes are hashed. Webhooks from the messaging platform are signature-checked before we act on them.

No system is perfect. If you find a weakness, tell us and we will fix it fast.

Supalander is for people aged 16 and over. If you believe someone younger has created an account, email us and we will remove it.

When a feature changes what we collect, this page changes with it, in the same release. The version and dates at the top tell you what you are reading. Material changes get a notice on the site before they take effect.