Privacy policy

Your account. Your email address and name. If you sign in with a password, it’s handled by our sign-in provider and stored only as a one-way hash; Weavio never sees it. If you sign in with Google, Google tells Weavio your name and email address.

What you give Weavio.

• Your résumé file, its text, and the details Weavio reads from it (roles, skills, experience).
• Weavio’s check of your résumé against each of your top jobs’ requirements: met, not met or unclear, with the short line of your résumé it relied on.
• Your job preferences: titles, seniority, locations, remote work, pay, company size, industries and dealbreakers.
• What you do with jobs: save, apply, pass, and the stages on your tracker, with any notes.
• Contacts you add to your network: names, companies, roles, email addresses, LinkedIn links and your notes. These are about other people, so only add what you have reason to keep.
• Your application details, for filling in forms: name, preferred name, pronouns, email, phone, city, region, country, postal code, profile links, and your answers on work authorization, sponsorship and relocation. Your sponsorship answer is also used to mark, on your own job cards, whether each posting sponsors visas. Weavio doesn’t send it to an AI service; it leaves your account only when the extension fills it in on an application form you’re completing. Weavio doesn’t store answers to voluntary questions about gender, race, veteran status or disability; it only remembers whether you want “I don’t wish to answer” chosen for you.
• Documents Weavio writes for you, such as tailored résumés and cover letters.
• Interview practice: the questions, your answers as text, and the feedback. If you answer out loud, your recording is sent to be transcribed and isn’t kept; the transcript is.

How you use Weavio. A record of actions in the app (for example, finishing an onboarding step or opening settings), tied to your account and kept for 90 days. It holds ids, counts and timings, not your résumé, job text or email. Weavio also counts its AI requests per account per day and extension requests per hour, to cap costs and stop abuse.

Page visits. Weavio counts visits to its pages with Vercel Web Analytics: the page’s address (without anything after a ? or #), the site that sent you, your country, and your browser, operating system and device type. It uses no cookies and isn’t tied to your account. Vercel tells visits apart with a code made from your connection that it discards within a day.

Cookies. Weavio sets cookies to keep you signed in and to remember your light or dark theme and your time zone. There are no advertising or third-party analytics cookies.

Jobs you open to apply. When you open a posting to apply, Weavio keeps its title and company in your browser for up to 7 days so it can ask whether you applied. That list stays on your device, and answering the question removes the job from it.

The extension does nothing on a page until you click its icon there. It can’t see your browsing history or other tabs, and it doesn’t run in the background on the sites you visit.

• Saving a job. When you click Save, the extension sends Weavio the page’s address, title, visible text and any structured job data on it. Weavio reads the job from that and adds it to your feed; a job saved this way is visible only to you. If the job is on a hiring platform Weavio recognizes (such as Greenhouse, Lever, Ashby or Workday), Weavio may fetch that job’s public listing from the platform, and may add the employer’s public job board to the listings Weavio gathers for everyone. That record doesn’t mention you.
• Tailoring a résumé. The extension asks Weavio for a résumé tailored to a job you saved, and keeps the file in your browser until you close it. If you choose to put it on the page, it stays there until you attach it, download it or leave.
• Filling in an application. When you click Fill in my details, the extension gets your application details from Weavio and types them into the form in your browser. Weavio doesn’t send them to the site; the site receives them only if you submit the form yourself. The extension never fills in passwords, payment details or ID numbers, and never submits a form.
• Connecting. Each browser you connect gets its own token, kept in the extension’s storage. Weavio keeps only a hash of it and when it was last used. Disconnect a browser any time in Settings → Extension.

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

To run the features you use: finding and scoring jobs against your résumé and preferences, learning from your decisions, tracking applications, writing tailored documents, interview practice, and filling in forms. Also to keep Weavio working and secure: fixing errors, preventing abuse, and capping costs.

Weavio doesn’t sell your information, use it for advertising, or use it to train AI models. Your decisions tune the ranking of your own feed, and no one else’s. People at Weavio look at account data only to fix a problem you’ve reported, to keep the service secure, or when the law requires it.

Weavio relies on these services. Each receives only what its part needs, and handles it under its own terms and privacy policy.

• Supabase: the database, sign-in and file storage, hosted in the United States (AWS, us-east-1).
• Vercel: hosts the website and the extension’s API, keeps short-lived request logs, and counts page visits.
• Anthropic (Claude): reads résumés, scores and summarizes jobs, checks your résumé against what a job asks for, reads pages you save with the extension, writes tailored résumés and cover letters, and runs interview practice. It receives the text each task needs, such as your résumé and a job description.
• Groq and Deepgram: for spoken interview practice only. They turn your recorded answers into text, and Deepgram reads questions aloud.
• Google: only if you sign in with Google.

Weavio also fetches public job listings from job boards and hiring platforms. Those requests carry nothing about you.

Your information stays until you delete it or your account. The record of actions in the app is deleted after 90 days. When you delete your account, everything in it is deleted at once; copies in database backups are gone within 7 days, and request logs expire on their own. Page visit counts aren’t tied to your account, so there is nothing of yours in them to delete.

• See and change your profile, résumé, preferences and application details in Settings.
• Disconnect any browser from the extension in Settings → Extension.
• Delete your account, and everything in it, in Settings → Account. It takes effect immediately and can’t be undone.
• For a copy of your information, or anything else about your privacy, write to admin@weavio.app. Depending on where you live, the law may give you rights to access, correct, delete or move your information; Weavio honors those requests for everyone.

Connections to Weavio are encrypted. Each account can read only its own data, enforced in the database itself, and extension tokens are stored only as hashes. No system is perfectly secure, but if something goes wrong that affects your information, Weavio will tell you.

Weavio is for people looking for work and isn’t meant for anyone under 16.

If this policy changes, the date at the top changes with it. If a change affects what Weavio collects or who it shares it with, Weavio will tell you in the app before it takes effect.

Questions or requests: admin@weavio.app.