Privacy policy

This page explains what Repofolio stores about you, why, and how to remove it.

What we collect

• From GitHub: your username, name, email and avatar, and, for the repositories you choose to scan, their names, descriptions, languages, file names, dependency lists and README text.
• What you create: CVs and their versions, cover letters, job applications and notes, interview questions and answers, roadmaps and career coach results.
• Usage: how many times you use each AI feature and the number of AI tokens used, to apply plan limits and control costs.
• Email: your email address from GitHub, used for payment receipts, plan reminders and (unless you turn them off) a weekly email with new jobs that match your skills.
• Payments: the plan, amount, date and status of each payment. Card and wallet details are handled by Safepay and never reach our servers.

What we do not collect

• We do not read or store the source code of your files; scans look at file names, dependency manifests and READMEs.
• Interview camera analysis runs entirely in your browser. Video is never recorded or uploaded; only summary numbers such as eye-contact percentage are saved with your interview.
• We never change anything in your GitHub repositories.

Who processes your data

• Supabase stores the database and handles sign-in.
• Vercel hosts the website.
• OpenAI receives the text needed to generate AI suggestions (for example a CV and a job ad). Data sent through the API is not used to train their models.
• Safepay processes payments.

We do not sell your data and do not show ads.

Your public profile

If you turn on your public profile, anyone with the link can see your verified skills and public repositories. Private repository names are never shown. You can turn it off in Settings at any time.

Shared CV links

If you create a share link for a CV, anyone with the link can view and download that CV. Your phone number is hidden on the link unless you choose to show it. Links are not listed by search engines, and you can turn a link off at any time; it then stops working immediately.

Keeping and deleting data

We keep your data while your account exists. Settings → Delete account removes your CVs, versions, interviews, applications, scanned skills and your login permanently. This also deletes your plan and payment history from Repofolio; Safepay keeps its own payment records as the law requires. We keep one thing: a count of how many free AI tries were used, linked to your GitHub account number (not your name, email or any content), so that deleting and re-creating an account does not reset the free plan.

Cookies and storage

Repofolio stores your sign-in session in your browser. We do not use advertising or tracking cookies.

Contact

Questions or requests about your data: support@repofolio.com.