Privacy Policy
Effective date: April 2026
This Privacy Policy explains how Alenea ("we", "us", or "our") collects, uses, and protects information when you use our job-matching platform at alenea.com. By using Alenea you agree to the practices described here.
1. Information we collect
Account information. When you register we collect your email address and, optionally, your display name. If you sign in with Google, we receive your name, email, and profile picture from Google.
Profile and CV data. To generate job matches we ask you to upload a CV and set job-search preferences (target roles, locations, salary range, preferred keywords). This information is stored in your account and used only to power your results.
Application notes and tracker data. Notes, status updates, and interaction logs you add to job applications are stored in your account.
Usage and analytics data. We collect anonymised page-view and interaction data (pages visited, button clicks, session duration) to understand how the product is used and improve it. This data does not personally identify you.
Payment information. If you subscribe to Pro or purchase a Sprint, payment details are processed directly by Stripe. We never see or store your full card number — only a subscription status and the last 4 digits of your card that Stripe returns to us.
2. How we use your information
We use the information we collect to:
- Provide and improve the job-matching, alert, and tracking features.
- Generate tailored resumes and cover letters using AI (OpenAI).
- Send transactional emails (match alerts, weekly digests, account notifications).
- Process payments and manage subscriptions.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell your personal data to third parties.
3. Third-party services
We share data with the following service providers only to the extent necessary to operate the platform. Each provider has their own privacy policy.
| Provider | Purpose | Data shared |
|---|---|---|
| Google Firebase | Authentication, database, file storage | Email, profile data, CV, preferences, notes |
| Stripe | Payment processing and subscription management | Email, billing address, payment method metadata |
| Resend | Transactional email delivery | Email address, match data for digests |
| OpenAI | AI document generation (resume, cover letter) | Job description, profile summary, skill list |
| SerpAPI / job boards | Job listing discovery and search | Search query parameters only |
| Vercel | Hosting and anonymised analytics | Anonymised page-view data, no PII |
4. Cookies and session storage
We use a single session cookie (__session) to keep you signed in. This cookie is HttpOnly, Secure, and expires after 14 days of inactivity. No advertising or tracking cookies are set by Alenea.
Vercel Analytics may set or read anonymous performance cookies. You can opt out using your browser's cookie controls; doing so will not affect core functionality.
5. Data retention
Your account data is retained for as long as your account is active. If you delete your account we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. Stripe billing records, which are retained for 7 years).
Anonymised analytics data is retained indefinitely because it cannot be used to identify you.
6. Your rights
Depending on your location you may have the following rights regarding your personal data:
- Access. Request a copy of the personal data we hold about you.
- Correction. Ask us to correct inaccurate or incomplete data.
- Deletion. Request erasure of your personal data ("right to be forgotten").
- Portability. Receive a machine-readable export of your data.
- Objection. Object to processing of your data for certain purposes.
To exercise any of these rights, email us at support@alenea.io. We will respond within 30 days.
7. Data security
All data in transit is encrypted via TLS. Data at rest is stored in Firebase (Google Cloud), which applies AES-256 encryption. Access to production systems is restricted to authorised personnel only.
No method of transmission over the internet is 100% secure. While we implement industry-standard safeguards, we cannot guarantee absolute security.
8. Children
Alenea is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced via email or an in-app notice at least 14 days before they take effect. Continued use of Alenea after the effective date constitutes acceptance of the updated policy.
10. California residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know. You may request details about the categories and specific pieces of personal information we have collected about you, and why.
- Right to delete. You may request deletion of your personal information, subject to certain exceptions.
- Right to correct. You may request correction of inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioural advertising.
- Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise your rights, email support@alenea.io with the subject "California Privacy Request". We will respond within 45 days as required by law.
You may also use the "Do Not Sell or Share My Personal Information" link in our website footer to opt out, although we confirm we do not sell personal data.
11. Contact
Questions about this Privacy Policy? Contact us at support@alenea.io.