Your career, your control.
In effect August 2026. Next review November 2026.
Who is responsible for your data
Not yet published. The registered legal entity, its address and the governing law are with counsel and are not settled. Rather than print a brand name where a counterparty belongs, we say so: Falcyn is pre-general-availability and no paid plan is open. For questions about your data in the meantime, the privacy contact below reaches a person.
What we collect
We collect what's necessary to do your job search: the resume you upload, the LinkedIn profile you import, your preferences for roles and locations, and the applications you choose to send.
We do not sell or rent your data, and we do not share it for advertising. We do use a small number of service providers to run Falcyn — hosting, authentication, payments, email delivery and the AI model that writes your drafts. They process your data on our instructions and for no other purpose. Every one of them is listed below.
Who receives your data
These providers receive personal data. The list is generated from the same registry the code uses, so it cannot quietly fall out of date — adding a provider without listing it here fails our build.
| Provider | What it does | Lawful basis | Model training | Your control |
|---|---|---|---|---|
| Anthropic | LLM inference over user content (resume tailoring, cover letters, scoring) | Not yet published — see the note below | Contractually barred from training on it | No opt-out — it is part of how the service works |
| Clerk | authentication + user identity | Not yet published — see the note below | Runs no models on it | No opt-out — it is part of how the service works |
| Cloudflare R2 | object storage (resumes, documents, knowledge base) | Not yet published — see the note below | Runs no models on it | No opt-out — it is part of how the service works |
| Neon | managed Postgres hosting (the primary store) | Not yet published — see the note below | Runs no models on it | No opt-out — it is part of how the service works |
| Resend | transactional + digest email delivery to the user | Not yet published — see the note below | Runs no models on it | You can turn this offSettings → notification consent (QW-2); the digest sends only while it is on |
| Stripe | billing + subscriptions | Not yet published — see the note below | Runs no models on it | No opt-out — it is part of how the service works |
We also use providers that do not receive your personal data — error monitoring, analytics, key management, alerting, secrets and code hosting: AWS KMS, Doppler, GitHub, NewsAPI, PagerDuty, PostHog, Sentry.
Where a row says not yet published, our counsel has not finished that determination and we would rather say so than print a plausible guess. Data-transfer regions and each provider's own retention period are in the same position. We will publish them here when they are settled.
How we store it
Personal data lives in an encrypted vault separate from operational data, encrypted per account with keys that are themselves encrypted (envelope encryption). Access is narrow and audited: vault reads leave an audit trail, and your resume contents never appear in logs or analytics.
How long we keep it
Most of what Falcyn holds lives for as long as your account does and goes when your account goes. A smaller set has a defined window.
| Kind of data | Stores | Kept while your account exists | On a defined window | Kept by design |
|---|---|---|---|---|
| Operational records | 77 | 24 | 24declared, not yet enforced | 29 |
| Your personal data | 75 | 68 | 5declared, not yet enforced | 2 |
| Pseudonymous records | 4 | 4 | 0 | 0 |
| Public content | 5 | 1 | 1declared, not yet enforced | 3 |
| Sensitive personal data | 22 | 18 | 4declared, not yet enforced | 0 |
| Telemetry | 1 | 1 | 0 | 0 |
Where the table says a window is declared rather than enforced, it means the register records the intent but cannot yet prove an executable purge runs on that schedule. We would rather show you that distinction than print a commitment we cannot demonstrate. Making every declared window enforceable is tracked work, not an aspiration. Owner: founder; target 2026-11-02.
What we store in your browser
Falcyn uses strictly necessary cookies for authentication and API authorisation, and no tracking cookies at all. What each one is for is listed below, together with everything else Falcyn keeps in your browser — and a new browser store added anywhere in the code fails our build until it appears here.
| Name | Where | Set by | Category | What it is for |
|---|---|---|---|---|
falcyn.market.lastVisit | Browser local storagedashboard | Falcyn, in your browser | Remembers a preference | marks what was new on the market page since the previous visit |
falcyn.onboarding.calibration.v1 | Browser local storagedashboard | Falcyn, in your browser | Remembers a preference | remembers onboarding reveal pacing so a refresh does not replay it |
falcyn.tier_preview.dismissed.{}the highlighted part varies per item | Browser local storagedashboard | Falcyn, in your browser | Remembers a preference | remembers a dismissed tier-preview banner until its expiry changes; the hole is that expiry |
falcyn:signup_tracked:{}the highlighted part varies per item | Browser local storagedashboard | Falcyn, in your browser | Remembers a preference | de-duplicates the one-time signup count across reloads; the hole is the user id |
falcyn-capability | Cookieapi | Falcyn, from our server | Necessary — the feature does not work without it | short-lived capability token for API calls; HttpOnly, Secure, SameSite=strict, scoped to /v1, one hour |
falcyn.plan_intent | Browser local storagedashboard | Falcyn, in your browser | Necessary — the feature does not work without it | carries the plan a visitor chose across the sign-up redirect, then deletes itself on read |
| Clerk session cookie names pending authenticated verification | Cookiedashboard | A provider we use | Necessary — the feature does not work without it | Clerk session cookies — how you stay signed in; set by Clerk's own code, not ours |
| names vary per item — see the purpose | Extension storageextension | Falcyn, in your browser | Necessary — the feature does not work without it | extension service-worker health and handshake state read back during self-checks |
Automated decisions and profiling
Falcyn scores, ranks and drafts. It does not decide anything about you that has legal or similarly significant effect: no employer sees a Falcyn score, no application is sent without you sending it, and no output changes your price, your access or your standing with anyone.
Every result is a proposal you read before acting on. Falcyn never submits an application, sends a message, or contacts a third party for you.
What runs automatically, and on what:
- fills a form you opened, with values you review before submitting
- suggests job-search habits and micro-coaching prompts
- drafts positioning narrative over your own derived reads
- plans community participation
- estimates a compensation range for a role from market data
- drafts negotiation talking points
- summarises public information about an employer
- suggests and routes community resources
- matches open roles to your stated preferences and profile
- drafts resumes and cover letters from your profile and a job description
- drafts outreach for an opportunity that has not been posted
- simulates how an evaluator might read your candidacy
- generates practice questions and prepares answers from your history
- summarises labour-market conditions for your target roles
- decides which digests and alerts to send you, under consent you control
- drafts relationship check-ins for you to send
- plans content you may choose to publish yourself
- extracts skills, bullets and experience from the resume you upload
- coaches how to ask for a referral
- scores how well your resume fits a specific job description
You can stop any of it by deleting the underlying input from Data & privacy or by closing your account; scores are derived from your profile and do not outlive it.
What the AI sees
When the AI tailors a resume or drafts a cover letter, the relevant pieces of your profile are sent to Anthropic under terms that prohibit training on your data — the same provider named in the table above. Your synced email is never sent to a hosted model at all: classification of application replies happens with deterministic rules on our side.
Consent and submission
Falcyn never emails employers, submits applications, or contacts third parties on your behalf — full stop. It drafts and prepares; you review and you send, every time. Messages Falcyn sends to you (digests, alerts) run under standing consent you control in Settings.
Export and deletion
You can export your data in plain JSON from Data & privacy in your account, and request deletion of your account with one click: erasure runs immediately in practice and completes within 30 days at the outside, as the law requires. That deadline is not copy — it is the execution window the erasure worker enforces, read straight from the code when this page was built.
Two honest caveats rather than one clean sentence. A handful of stores holding personal data are not yet in the export — access control, abuse forensics, pre-signup marketing leads, and two internal archives. And two records survive deletion by design: the record that you asked for erasure, and the consent ledger. Deleting the proof that you exercised a right would defeat the point of it. The full breakdown is here — counted from the registry, not summarised by hand.
Your rights
Each right below names the thing you actually do to exercise it. Where we cannot deliver a right, it says so rather than being left off the list.
- See what Falcyn holds about youHow: Data & privacy in your account — the same self-service export
- Take your data elsewhere in a machine-readable formHow: Data & privacy → export, JSON, no support ticket
- Have your account and its data deletedHow: Data & privacy → delete account; the erasure worker executes within the published window
- Correct something Falcyn holds that is wrongHow: edit the underlying profile or document — derived scores and drafts regenerate from it
- Stop Falcyn processing somethingHow: delete the underlying input, or close the account
- Pause processing while a dispute is resolved, without deletingNot available — No mechanism suspends processing while retaining data. Deletion is the only stop we can actually perform, and claiming otherwise would describe a workflow that does not exist.
Who can use Falcyn
Falcyn is a paid service for working adults and is not directed at children. We do not knowingly collect data from anyone under this age; if we learn we have, we erase it.
Regional rights
Not yet published. This section states what the law entitles you to and what we commit to doing, and it is with counsel. We are not going to guess at it here — a plausible-sounding paragraph would read as settled and it is not. Until it is published, the privacy contact below reaches a person who can answer.
Complaining to a supervisory authority
Not yet published. This section states what the law entitles you to and what we commit to doing, and it is with counsel. We are not going to guess at it here — a plausible-sounding paragraph would read as settled and it is not. Until it is published, the privacy contact below reaches a person who can answer.
If there is a breach
Not yet published. This section states what the law entitles you to and what we commit to doing, and it is with counsel. We are not going to guess at it here — a plausible-sounding paragraph would read as settled and it is not. Until it is published, the privacy contact below reaches a person who can answer.
Questions
Email privacy@falcyn.ai and we'll get back within a business day.