Privacy Policy
At NotGhosty, privacy is not a decorative banner—it is a core engineering architecture. This Privacy Policy outlines our uncompromising commitment to volatile memory resume processing, zero permanent CV storage, and candidate contact confidentiality.
1. Volatile RAM-Only CV Zero-Storage Privacy Guarantee
When you submit a resume to our Applicant Tracking System (ATS) Diagnostic Chamber, the document is buffered exclusively in volatile memory (RAM). The text parsing, entity extraction, and ATS compatibility scoring algorithms operate in transient memory. As soon as the structured diagnostics and score are generated, the raw document buffer is purged from memory. NotGhosty never writes candidate resumes to persistent hard drives, cloud object stores, or databases.
2. Talent Profile Contact Shielding
When a candidate opts into the searchable Talent Showcase, their raw contact information (email address and telephone number) is never rendered in public HTML or server-side DOM. Contact reveal requires active recruiter authentication, verification against Cloudflare Turnstile bot challenges, and explicit candidate connection requests.
3. Information We Collect
- Account Information: Email address, hashed password (Argon2id), full name, and chosen account role (Candidate or Recruiter).
- Application Telemetry: Anonymized interview progression reports, rejection timestamps, and ghost disclosures to power our objective Credibility Score engine.
- Recruiter Verification: Company name, verified corporate website, and professional phone number to prevent unauthorized scrapers from accessing candidate pipelines.
4. Cookies, Analytics & Third Parties
NotGhosty uses local storage exclusively for essential JWT session tokens. We employ Google Analytics 4 (gtag.js) for aggregate traffic monitoring and pageview metrics. We deploy zero third-party tracking pixels, zero cross-site advertising beacons, and we never sell, monetize, or broker personal data to data brokers.
5. Your Data Rights (GDPR & CCPA/CPRA)
Regardless of your geographic location, you retain full ownership of your data. You possess the right to access, rectify, export, or permanently delete your account and all associated profile records at any time. To request immediate data purge or exercise your statutory privacy rights, email [email protected].