Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how we handle personal data when you use:

our website at https://ansacareers.com, including our career-advice blog and contact form (the “Website”);
JobMatch, our job-search and application tool at https://app.ansacareers.com (the “App”); and
the JobMatch desktop agent that you can install on your computer (the “Agent”).

Together we call these the “Service”.

The Service is run by [Proprietor’s full legal name], trading as Ansa Careers, a sole proprietorship registered in Nigeria and based in Port Harcourt (“Ansa Careers”, “we”, “us”). For the personal data described in this policy, we are the “controller”, which means we decide why and how it is used. The exception is where this policy says someone else is responsible.

This policy does not cover third-party websites, job boards or services that you reach through the Service. Their own privacy notices apply to them.

2. Personal data we collect

Account and sign-in data. Your email address, your display name if you give one, and your password (which we store only in scrambled, hashed form). If you sign in with Google or LinkedIn, we receive the profile details that provider shares with us, such as your name, email address and profile picture link. We never receive your password for those services.

Resume and career data you provide. Resume files you upload (we keep the original file and the text taken from it), resume version names, and any job-search preferences, notes, application statuses and dates you enter. A resume usually contains your name, contact details, work and education history and skills, plus anything else you choose to include. Please leave out sensitive details that a job application does not need, such as health information, government ID numbers, or your religion, ethnicity or political views.

Job data. Job postings that you add or that the Agent retrieves for you (title, company, location, description and source), along with the match analysis, scores, cover letters and tailored resumes generated for you.

Usage and allowance data. The number of AI operations and tokens used in the current period, the feature and AI model used, whether the operation worked, the estimated cost, and when it happened. We use this to apply plan limits and to understand what the Service costs to run.

Agent data. When you pair the Agent, we store a label for your machine, a pairing code (until it is used), a hashed access token, and a “last seen” time. The Agent sends us the job postings it finds for you. As our download page explains, the Agent does not read your files or browsing history.

Subscription and billing data. Which plan you are on, your subscription status, your billing-period dates, and the customer and subscription identifiers assigned by our payment provider. We do not receive or store your full card or bank details. Lemon Squeezy collects payments (see section 5).

Support and contact data. Your name, email address and the content of messages you send through the contact form or by email, along with our replies.

Technical data. Your IP address, browser and device type, and request and error logs created when you use the Website or App. Where a log records an error linked to your account, it may include your email address or account identifier.

Cookies and similar technologies. See section 7.

3. Where the data comes from

You, when you register, upload resumes, add jobs, use features, contact us or buy a plan.
Your devices, through your browser and the Agent, which send technical data and the job postings retrieved for you.
Sign-in providers (Google and LinkedIn), if you choose to use them.
Lemon Squeezy, which tells us about your purchase and subscription status, along with the account identifier we attached at checkout, so that we can give you the right plan.
Job boards and applicant tracking systems, the public sources of the job postings retrieved for you. Postings are not normally personal data, but they may name a recruiter or contact.

4. Why we use personal data, and our legal bases

The laws that apply to you may require us to name a legal basis for each use of your data. These are the ones we rely on:

To create and run your account and provide the Service (including matching, cover letters, tailored resumes, tracking and the Agent): performance of our contract with you (the Terms).
To process your subscription and apply plan limits: performance of our contract with you.
To keep the Service secure and prevent abuse (rate limits, bot checks, fraud and misuse prevention, debugging): our legitimate interests in running a safe and reliable service, balanced against your rights.
To answer support requests and contact-form messages: performance of a contract if you are a user, and otherwise legitimate interests in replying to enquiries.
To send service and transactional emails (account confirmation, password resets, security and billing notices, and material changes to our terms): performance of a contract and legitimate interests.
To improve the Service using aggregated or de-identified usage information: legitimate interests.
To meet legal obligations (tax, accounting, and responding to lawful requests): legal obligation.
To send marketing emails: your consent, which you can withdraw at any time. We do not currently send marketing emails.
To transfer data outside Nigeria where the law requires your consent for the transfer: your consent, collected when you register.

Where we rely on consent, you can withdraw it at any time. Withdrawing does not affect processing we carried out before then.

We share personal data only as needed to provide the Service. These are the main recipients and the role each one plays:

Lemon Squeezy (payments and merchant of record). Paid plans are sold through Lemon Squeezy. As merchant of record, it is the seller of the subscription to you. It takes payment, calculates and remits sales taxes, issues receipts and handles chargebacks. When you buy, Lemon Squeezy collects your payment and billing details under its own terms and privacy policy, and it is responsible for that data in its own right. We receive what we need to provide your plan, such as your email address, plan, subscription status and customer identifier. Its contracting entity is named in its terms as Link, LLC f/k/a Lemon Squeezy LLC.

OpenAI (AI features). To generate match analyses, cover letters and tailored resumes, we send the relevant resume text and job details to OpenAI’s API, which processes them on our behalf. OpenAI’s API documentation says that data sent to the API is not used to train its models unless the customer opts in, and that API logs may be kept for up to 30 days to monitor for abuse. Your resume is only sent to OpenAI when you use an AI feature.

Resend (email delivery). Sends account and service emails for us, and delivers contact-form messages to us.
Cloudflare (Turnstile). Protects our sign-in, registration and contact forms from bots by checking signals from your browser. Cloudflare’s own privacy terms apply to that check.
Sign-in providers (Google and LinkedIn). If you choose them, they sign you in under their own privacy policies and tell us your basic profile details.
Hosting, database, caching and messaging providers. They store and process data for us under contract, and some of them operate outside Nigeria.

Professional advisers, authorities and successors. Lawyers, accountants and insurers where needed. Courts, regulators or law enforcement where the law requires it or to protect rights and safety. A buyer or successor if the business is transferred, in which case we will tell you if the use of your data would change materially.

Job boards and the Agent. The Agent runs on your computer and connects to job boards through your own internet connection. Those sites will see your IP address and your search terms, just as if you had looked yourself. We do not give job boards your resume or account data.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

6. Automated processing and AI

JobMatch uses AI to score how well a job posting matches your resume and to draft cover letters and tailored resumes. These outputs are suggestions for you. They are not decisions about you made by us or by an employer, and they have no legal or similarly significant effect on you. AI can get things wrong or leave things out, so please review the output before you use it. We do not use your resume to make decisions about you for any other purpose.

7. Cookies and similar technologies

Session cookie (App, strictly necessary). When you sign in, we set a first-party cookie that keeps you signed in. Scripts cannot read it, it is only sent over HTTPS in production, and it lasts up to 14 days. The App cannot work without it, so it does not need your consent.
Local storage (App, functional). We save a small flag in your browser to remember that you dismissed the setup checklist. It is not sent to us.
Cloudflare Turnstile (forms). Loaded on forms to detect bots. It may use browser storage or similar technology for that purpose.
Google Fonts (Website). Our marketing Website loads a font from Google Fonts. This means your browser sends a request, including your IP address, to Google.
Analytics and advertising. We do not currently use analytics, advertising or social-media tracking cookies on the Website or App.

You can block or delete cookies in your browser settings, but the App will not work without its session cookie.

8. Your choices and rights

Depending on where you live, you may have the right to: be told how we use your data; access your data; correct inaccurate data; delete your data; restrict or object to certain uses; receive your data in a portable format; withdraw consent where we rely on it; and complain to a data protection authority. We offer these rights to all users, wherever you are, as far as is workable and subject to the limits below.

How to use them.

Export: the App lets you download a copy of your profile, jobs, resumes and search runs as a JSON file.
Delete: the App lets you delete your account. Doing so cancels any active subscription with the payment provider (see our Refund and Cancellation Policy) and deletes the data linked to your account from our systems. It cannot be undone.
Anything else: email support@ansacareers.com. We will reply without undue delay and within the time the applicable law requires.

Verification and limits. We may ask you to confirm that you control the account before we act on a request, so that we do not disclose or delete data for the wrong person. We may decline or limit a request where the law allows or requires it. Examples are where we must keep records for legal or accounting reasons, or where the request is clearly unfounded or excessive. Lemon Squeezy keeps its own purchase and invoice records, which we cannot delete. You can contact it directly about those.

Complaints. You can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live or work (in the United Kingdom, that is the Information Commissioner’s Office). We would appreciate the chance to put things right first.

9. International transfers

We operate from Nigeria, and the Service and its providers process data in other countries, including the United States. For example, Lemon Squeezy says it processes personal information in the United States, and our AI provider and others may do the same. If you use the Service from outside Nigeria, your data will be transferred to and processed in Nigeria and other countries whose data protection laws may differ from yours.

Where the law requires safeguards for these transfers, we rely on the mechanisms it allows. These include an adequacy decision, contractual protections (such as standard contractual clauses or data processing terms with providers), or your consent.

10. How long we keep data

We keep personal data only for as long as we need it for the purposes in this policy:

Account, resume, job, analysis and Agent data: while your account is open. When you delete your account, we delete the data linked to it from our live systems. Copies in backups are removed in the ordinary course.
Usage events and billing identifiers: while your account is open, and afterwards only as needed for accounting, tax and dispute purposes.
Contact messages and support emails: up to 24 months after the last message.
Server logs: a short time, currently around 31 days.
Payment records: Lemon Squeezy keeps invoices and transaction records under its own legal and tax obligations and its own policies.

We may keep data for longer where we need to comply with the law, resolve disputes or enforce our agreements.

11. Security

We use measures that suit the risks, including encrypted connections (HTTPS), hashed passwords and Agent tokens, protected session cookies, bot protection and rate limiting on public forms, and access controls for each account. No system is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your devices up to date. If a personal data breach affects you and the law requires us to report it, we will tell you and the relevant authority within the legal time limit.

12. Children

The Service is for people aged 18 or over and is not aimed at children. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email support@ansacareers.com and we will delete it.

13. Marketing communications

We will only send you marketing emails if you have opted in, and you can unsubscribe at any time using the link in the email or by contacting us. Whether or not you opt in, we will still send the messages you need, such as account confirmations, password resets, security alerts, billing notices and changes to our terms. Lemon Squeezy may also send you receipts and order emails under its own policies.

14. Region-specific information

Nigeria. We process personal data in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission’s General Application and Implementation Directive 2025.
European Economic Area and United Kingdom. Because the Service is available worldwide, the GDPR or UK GDPR may apply to how we handle your data. If so, the legal bases are those in section 4, you have the rights in section 8, and you can complain to your local supervisory authority.
United States. Some US state privacy laws give residents rights over their data, but they only apply to businesses that meet certain thresholds. We offer the rights in section 8 to all users. We do not sell personal data or share it for targeted advertising.
Other countries. Local law may give you extra rights, and this policy does not limit them.

15. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new date. For material changes, we will tell registered users by email or in the App before the change takes effect, and where the law requires your consent, we will ask for it.

16. Contact

Questions or requests about privacy: support@ansacareers.com.