Privacy Policy

RaetOS is a career operating system. The product works by organizing career source material, captured job postings, generated resumes, application packets, and tracker records in one account.

This policy applies to RaetOS websites, authenticated app pages, browser extension workflows, and related account services.

RaetOS is operated by RaetOS LLC, a Michigan limited liability company, which acts as the data controller for the personal product. An organization using a workspace may separately control records it maintains about its participants.

• Account data: name, email address, password hash if you use password sign-in, connected sign-in provider, account settings, and profile fields you choose to save.
• Account security data: multi-factor authentication setup, recovery-code hashes, trusted-browser records, and active or revoked sessions when you use those features.
• Terms acceptance data: the version and document hash you accepted, the acceptance wording and action, and the recorded timestamp. Legacy agreement is not inferred from account use.
• Text messaging data: mobile number, verification status, consent date, consent source and version, delivery records, and opt-out status when you use SMS features.
• Timezone: the IANA timezone name your browser reports, such as America/Detroit, for reminder scheduling. RaetOS does not request device location permission. Separately collected IP addresses can indicate an approximate location.
• Career data: work history, bullets, skills, projects, education, certifications, clearance details, target roles, resumes, uploaded files, and generated outputs.
• Job and application data: captured job descriptions, job URLs, company names, locations, queue status, application packets, tracker status, interview prep, cover letters, and notes.
• Career capture and Network data: saved work evidence and responses, contact names, roles, companies, email addresses, profile links, notes, application links, and message drafts you create.
• Correspondence: your name, return email address, chosen recipient, subject, message, and information you provide when contacting us.
• Extension data: job posting details you choose to send from supported pages, local sent-board counts, and connection status.
• Security and usage data: login/session metadata, device/browser information, IP address, timestamps, errors, and basic product usage needed to operate and protect the service.

• To provide account access, authentication, settings, and user profile features.
• To build and maintain your Master Resume as a structured career record.
• To analyze captured job postings and compare them against your career record in the Decision Engine.
• To generate resumes, application packets, ATS text, cover letters, interview prep, and related career outputs you request.
• To maintain My Queue, Resume, Application Packets, Tracker, Network, and saved career evidence across your account, and compose messages you request.
• To schedule enabled email and SMS reminders using your timezone and notification preferences, and send account notifications.
• To route and respond to Contact messages and other correspondence.
• To prevent abuse, investigate errors, secure accounts, and support privacy or security requests.

The public Contact form sends your message to the RaetOS mailbox you select, without requiring an account. Your return email address lets us reply. Email delivery providers process the message, and Cloudflare verifies the security challenge before it can be sent.

Delivered correspondence is held in our mailboxes separately from your app account. Deleting your account does not automatically delete these messages. Contact us about correspondence you want reviewed for correction or deletion. Please avoid including passwords or sensitive information that is unnecessary for your request.

RaetOS uses cookies and browser storage for authentication, session protection, preferences, and extension connection or local workflow state. Cloudflare also processes browser and network signals for bot verification and traffic protection.

See the Cookie Policy for details. Clearing browser storage can sign you out or reset local preferences; it does not delete records stored in your account.

If you choose text verification or separately opt in to career reminders, RaetOS uses your mobile number only for those selected purposes. Verification consent and reminder consent are recorded separately.

• RaetOS may use AWS End User Messaging and mobile carriers to deliver text messages.
• RaetOS does not sell mobile numbers or SMS consent records.
• RaetOS does not share mobile numbers or SMS consent with third parties or affiliates for their marketing or promotional use.
• You can stop messages by replying STOP and disable reminders in Settings. Provider opt-out restrictions can also prevent verification codes from being delivered. Codes are sent only when requested.
• SMS consent and delivery records may be retained as needed to honor opt-outs, prevent abuse, and document compliance.

RaetOS may allow sign-in with Google or Microsoft. These providers are used for authentication and basic profile retrieval only.

The providers also handle your sign-in under their own policies: Google and Microsoft. Deleting RaetOS does not delete your account with either provider.

RaetOS uses AI to analyze career records, captured job descriptions, resumes, interview prep, and related career content when you request those features. Message composition can include selected contact details, notes, your profile, and context you provide. Include only information you want processed for that request.

• AI outputs are suggestions. You decide what to save, edit, download, send, or use.
• RaetOS does not make employment, hiring, credit, housing, or similarly significant automated decisions about you.
• When third-party AI providers process your content, they are used to return the requested product output, not to sell your data.
• RaetOS does not use your Google or Microsoft sign-in data to train generalized AI models.

Requests are routed through OpenRouter to underlying model providers, with direct OpenAI requests used as a fallback. OpenRouter's own prompt retention is opt-in, but underlying providers have separate logging, retention, and training policies. We do not promise zero retention or a universal training exclusion across every route. See OpenRouter provider policies.

OpenAI states that API content is not used to train its models unless the customer opts in. Its API can retain abuse-monitoring logs, and retention depends on the endpoint and approved account controls. See OpenAI API data controls.

RaetOS does not sell personal data. We do not share personal data for cross-context behavioral advertising.

We use service providers to operate the product, including hosting, database, authentication, email delivery, security, error monitoring, and AI processing. These providers are used to deliver RaetOS and support the features you choose to use.

• Neon and Railway: database storage and app hosting, including stored account records and operational logs. See Neon's current Databricks privacy notice and Railway's data processing terms.
• Resend or a configured SMTP provider: recipient and sender information, email contents, and delivery metadata for Contact messages and account notifications. The active delivery route determines which provider processes a message. See Resend's data processing terms. Provider logs and delivered copies in mailboxes have separate retention.
• AWS: file storage where used, including profile images, operational audit archives, and SMS delivery through AWS messaging services and carriers where enabled. See AWS data privacy information.
• Cloudflare: bot verification and traffic protection, including IP addresses, browser information, and challenge or network signals. See the Turnstile privacy policy and Cloudflare privacy policy.
• Sentry, where enabled: error and performance diagnostics, which can include request context, browser details, and information associated with an error. Retention varies by data category and account settings. See Sentry's privacy policy.
• PostHog: an older standalone public page includes an analytics script that can collect page and interaction events and store visitor or session identifiers when opened. The main app layout does not load it; live collection settings have not been verified. See PostHog's privacy policy and our Cookie Policy.
• Google, Microsoft, OpenRouter, and OpenAI: sign-in and AI processing as explained above.

We may also disclose information when required by law or when necessary to investigate abuse, protect accounts, or respond to a security incident.

Our providers may process information in the United States and other countries. Storage regions, backup locations, model routes, and delivery networks depend on the service and its configuration. We do not promise that every copy remains in a single country. Provider terms describe their transfer arrangements; these do not establish a particular RaetOS account configuration or certification.

• Account and career records are retained while your account is active, unless you delete specific records or request account deletion.
• Account deletion removes account-owned personal records and initiates associated file cleanup. It is not an immediate erasure of every copy held by every provider.
• Database restore history, backups, hosting logs, email delivery logs, and monitoring records can remain until the relevant provider or configured retention process removes them. These periods differ by service and data category.
• Security and audit records can remain after account deletion to investigate abuse and maintain an audit trail. Account identifiers may be removed or replaced, but retained network metadata or archived records can still contain personal information.
• Correspondence already delivered to our mailboxes is managed separately. Some information may also be retained for legal obligations or unresolved disputes.
• If you participated in an organization workspace, records maintained by that organization can remain under its retention policy after your personal account is deleted. Ask the organization about those records.

• Access and update profile, preference, security, extension, and resource settings from Settings.
• Export supported account records as a ZIP from Settings, with readable text, CSV spreadsheets, and a JSON data file. The export is not a complete backup of every setting, log, or history entry.
• Delete individual working records using the actions available for that record. Bulk cleanup has its own scope and does not delete every application record.
• Disable reminders, manage SMS consent, review sessions, and manage multi-factor authentication in Settings.
• Delete your personal account using the confirmed deletion flow in Settings, subject to the retention exceptions above.
• Disconnect browser extension access by signing out of the extension or revoking active sessions.
• Request correction, export, or deletion by contacting privacy support.

RaetOS uses authentication controls, hashed passwords, session management, bot protection on sign-in, access controls, and operational monitoring to protect accounts.

No internet service can guarantee perfect security. If you believe your account or data may be at risk, contact [email protected].

We may update this Privacy Policy as RaetOS changes. If a material update affects how we collect or use personal data, we will provide notice through the product, by email, or by updating this page.

For privacy questions, data requests, or account-data concerns, contact [email protected].

For security concerns, contact [email protected].