Privacy Policy
Effective date: August 25, 2026
Job Search Forecast ("the Service") is operated by Referso ("we", "us"). This policy explains what we collect, why, who processes it, how long we keep it, and the controls you have. We have tried to write it the way we build the product: plainly.
What we collect
Your resume. The file you upload (PDF or DOCX) is processed to extract structured career signals: roles held, skills, industries, seniority indicators, strengths, gaps, and quality assessments. The raw file itself is permanently deleted immediately after analysis completes. We keep only the structured, extracted signals — never the original document.
Your answers. What you tell us in the quiz: target role, desired compensation, work model, employment situation, search intensity, timeline, flexibility, and interview self-rating.
Your email address, when you provide it to unlock your full forecast. It is verified with a one-time code.
Session and technical data. A session cookie that ties your quiz, resume analysis, and forecast together; IP address (used for rate limiting and abuse prevention); and basic request logs.
Your forecast. The generated analysis, scores, timelines, and narratives, linked to your session.
How we use it
To generate your forecast: your extracted resume signals and answers are combined with live job-market data and our proprietary outcome benchmarks to produce timelines, scores, diagnoses, and recommendations, delivered in the advisor style you choose.
To deliver and secure the Service: email verification, rate limiting, abuse prevention, and debugging.
To improve the product: aggregate, non-identifying usage measures (for example, a daily count of forecasts generated).
To tell you about Referso: if your forecast indicates you are a strong fit for Referso's application service, we may use your verified email to follow up about it. Referso operates this Service; your data is not sold or shared with unrelated third parties for their marketing.
AI processing
Forecast narratives, resume analysis, and answer generation use large language model providers as processors — currently including Anthropic, OpenAI, DeepSeek, and xAI. Relevant portions of your resume signals, answers, and forecast data are sent to these providers to generate your analysis. We send what the analysis needs, not your raw resume file. These providers process the data to provide the service to us; they are not permitted to use it to advertise to you.
Who else processes your data
Infrastructure and service providers acting on our instructions: cloud hosting and storage (including Amazon Web Services and Railway), our database provider, and our email delivery provider (for verification codes). Each receives only what its function requires.
Sharing and public content
Your forecast is private to your session. If you explicitly create a share link, the shared page shows an anonymized version (role family and market scores — never your name, email, or resume details). You control whether a share link exists.
We do not sell personal information.
Retention
Raw resume files: deleted immediately after analysis. Extracted signals, answers, and forecasts: kept while your session remains active so you can revisit your results, and for a reasonable period afterward for abuse prevention and service integrity, unless you delete them sooner. Verification records and rate-limit counters expire automatically.
Your controls
Delete everything:the "Delete my data" action on your results page permanently removes your forecast, extracted resume signals, answers, session, and share artifacts. You can also email us (below) to request deletion or a copy of your data.
Depending on where you live (for example the EU/EEA, UK, or California), you may have statutory rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. We honor these requests regardless of where you live.
Cookies
We use one essential session cookie to keep your quiz, analysis, and results connected. We do not use third-party advertising or tracking cookies.
Security
Data is encrypted in transit, access is restricted, and secrets are managed outside of code. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you as required by law.
Age
The Service is for people old enough to be in the job market and is not directed at children under 16. We do not knowingly collect data from children.
Honesty note about forecasts
Forecasts are estimates built from the information you provide and available market signals. They are not guarantees, offers of employment, or professional career, financial, or legal advice.
Changes and contact
If we change this policy materially, we will update the effective date above and note the change on this page. Questions, or a privacy request: contact@referso.com.