Privacy Policy

• Your draft is private. Nothing about you is public until you publish, and only what you choose to publish.
• Your contact details are never public. The email, phone number and address on your resume stay private.
• We don't sell your data, and we don't use it for advertising.
• We use analytics to improve Tazilo. Third-party analytics tools show us how people use the product - never the content of your resume, profile or conversations.
• AI helps run Tazilo, not the other way round. We send your content to our AI model providers only to provide the service, and only to providers whose terms don't allow them to train their models on it.
• You can delete everything. Deleting your account removes your profile, your conversations with the coach and your uploaded resume.

Account information. Your email address, name, and a profile picture if you add one. Your password is handled by our authentication provider and stored only in hashed form.

Your resume. The file you upload, and what we extract from it: your work history, education, skills, headline and summary, and the contact details on it (email, phone number and address).

Your profile. Your draft and every edit to it, your handle, the level of detail you choose to share, what you publish, and your privacy-radar decisions (which flagged details you kept or softened). We keep a record of those decisions and of each publish, so there's a clear history of what you agreed to share.

Conversations with the coach. What you tell the coach and its replies, saved as your career journal so it can remember earlier conversations.

Beta status. Whether you're in the beta or on the waitlist, and when you joined.

Technical information. Like most websites, our servers record basic request information such as IP address, browser type and pages requested, which we use for security and troubleshooting. For the MCP server, IP addresses are converted to a one-way hash before we count requests for rate limiting.

Usage information. We use third-party analytics tools to understand how people use Tazilo - for example, which pages are visited, which features are used, how people move through sign-up and onboarding, and where they get stuck. This can include your device and browser type, approximate location (from your IP address), the page you came from, and an identifier that links your visits together. We use it to improve Tazilo. We never send the content of your resume, your profile or your conversations with the coach to analytics tools.

Cookies. We use essential cookies to keep you signed in and remember preferences such as light or dark mode, and analytics cookies (or similar technologies) to measure how Tazilo is used. We don't use advertising cookies. Where the law requires your consent for analytics cookies, we ask for it first.

We use your information to:

• draft your profile from your resume, and keep it current through the coach;
• check your profile before you publish - flagging sensitive details, and making sure your private contact details don't end up in public text;
• publish the profile you choose, generate your PDF resume, and answer questions about your published profile through the MCP server;
• run the beta waitlist and keep Tazilo secure - including rate limits that prevent abuse;
• understand how Tazilo is used, so we can fix problems and improve it;
• send you service emails, such as sign-in and verification codes, your beta invitation, and account notices; and
• comply with the law and enforce our terms.

We don't send marketing emails without your permission, and we don't build advertising profiles.

Tazilo uses large language models from third-party AI providers to read your resume, power the coach, write the one-line summaries of your roles, flag details you may not want public, and answer AI agents' questions about published profiles. We choose the models that work best for each task, and the providers we use may change over time.

To do this, we send the relevant content to those providers: your resume when you upload it, your conversations with the coach and your draft when you chat, and only your published profile when an agent asks about it. They process it as our service providers, only to return results to us. We use only providers whose terms don't allow them to train their models on your content, and we don't train AI models on your data either.

To check that these features work well - that answers are accurate, fast and affordable - we log a sample of AI requests and responses with our monitoring provider, including questions AI agents ask about published profiles. These logs never include your resume file or the contact details we extract from it, have email addresses and phone numbers removed, and are kept for a limited period.

When you publish, these become visible to anyone with your link at tazilo.ai/@your-handle - and may be indexed by search engines and read by AI agents through the MCP server:

• your name, handle, headline and summary;
• your skills and education; and
• your experience, at the level of detail you chose.

Never public: your contact details, your resume file, your unpublished draft, your conversations with the coach, and your privacy-radar decisions.

We share information only with service providers that help us run Tazilo, under contracts that limit how they can use it:

• Supabase - our database, sign-in and file storage;
• AI model providers - the language models described above;
• our hosting provider - which serves the website and app;
• our email delivery provider - which sends service emails;
• an error and performance monitoring provider - which alerts us to errors and slowdowns, and helps us monitor the quality and cost of AI features, as described above; and
• analytics providers - which help us measure how Tazilo is used, as described above.

We may also disclose information if the law requires it, to protect the safety or rights of our users or others, or as part of a merger or sale of Tazilo, in which case this policy would continue to apply. We don't sell personal information or share it for cross-context behavioral advertising.

We keep your information while your account exists. When you:

• delete your account - we delete your profile, your contact details, your conversations with the coach, your privacy-radar record and your uploaded resume;
• clear your chat history - we delete your conversations. We keep only the time of messages from the last 24 hours, so rate limits still work, then delete those too;
• republish your profile - answers we stored for AI agents about the previous version are no longer used, and are deleted when your account is.

Rate-limit counters for the MCP server are kept for about two days. Server logs and backups may keep information for a limited time before they're overwritten.

Tazilo is served over encrypted connections (HTTPS). Each account's data is isolated at the database level, uploaded resumes are kept in private storage, and you can turn on two-factor authentication in your settings. No system is perfectly secure, so we can't guarantee absolute security, but we work to protect your information and will tell you if a breach affects you as the law requires.

You can, at any time:

• see and edit your profile in the app;
• download your profile as a PDF resume;
• clear your conversations with the coach in Settings;
• delete your account in Settings, or by emailing us at support@tazilo.ai;
• ask us for a copy of your personal information; and
• decline analytics cookies when we ask, change your answer at any time, block or clear them in your browser, or email us to opt out.

Depending on where you live - for example, the EU, the UK, or US states such as California - you may also have rights to access, correct, delete or port your information, to object to or restrict how we use it, and to not be discriminated against for using these rights. To use any of them, email us at support@tazilo.ai. We may need to verify your identity first, and we'll respond within the time the law requires. You can also complain to your local data protection authority.

Tazilo is operated from the United States. Your information may be processed in the United States and in other countries where our service providers operate, which may have different data protection laws than where you live. Where required, we rely on appropriate safeguards for these transfers.

Tazilo is for people aged 18 and over. We don't knowingly collect information from anyone younger. If you believe a minor has created an account, email us at support@tazilo.ai and we'll delete it.

We may update this policy as Tazilo changes. If a change is significant, we'll tell you by email or in the app before it takes effect. The date at the top shows when it was last updated.

Tazilo is operated by Tazilo Labs. For questions about this policy or your information, email us at support@tazilo.ai. See also our Terms of Service.