Privacy Policy

Effective Date: April 1, 2026

This Privacy Policy explains how Human, Actually ("Human, Actually," "we," "us," or "our") collects, uses, discloses, and stores information when you use our website, application, and related services (collectively, the "Service").

Before publishing this policy, confirm the business and contact details below remain current.

• Legal entity: Unthinking AI, LLC
• Contact email: info@ai-created.com

1. Scope

This Privacy Policy applies to information we collect through the Service, including when you:

• create or use an account;
• sign in using Google;
• upload, paste, or submit resumes, job descriptions, notes, URLs, GitHub links, interview answers, or other materials;
• connect and use a third-party AI provider through your own API key; and
• contact us or request support.

This Privacy Policy does not govern the privacy practices of third parties, including Google, OpenAI, Anthropic, Google Gemini, GitHub, or websites you choose to connect to or import from. Those parties have their own terms and privacy policies.

2. Information We Collect

We collect the following categories of information:

A. Account and profile information

If you sign in through Google, we may receive information such as your name, email address, profile image, and authentication identifiers associated with your login.

B. Settings and credentials

We collect settings you choose within the Service, such as your selected AI provider, model preferences, and the API key you provide for your selected AI provider.

If you initiate a protected-site crawl, we may temporarily collect credentials you provide for that specific crawl, such as a username, password, or session cookie.

C. Content you submit

We collect content you upload, paste, type, or otherwise provide to the Service, including:

• resumes and CVs;
• job descriptions;
• notes, writing samples, and interview answers;
• free-form interview or coaching chat messages you exchange through the Service;
• portfolio, company, and other source URLs;
• GitHub profile and repository links;
• instructions you provide when refining outputs; and
• any other text, files, or content you choose to submit.

D. Imported and extracted content

When you ask the Service to ingest or analyze a source, we may collect:

• extracted text from uploaded files or pasted content;
• text fetched from URLs you provide;
• text collected from pages we crawl at your direction;
• metadata about source documents and pages; and
• related technical records needed to complete ingestion and analysis.

E. Derived application data

We generate and store derived data to operate the Service, such as:

• structured candidate facts;
• job requirements and requirement-match records;
• interview questions and answers;
• locally stored interview or coaching chat transcripts;
• generated artifacts such as resume drafts, summaries, bullets, and cover letters;
• analysis results, evidence references, confidence scores, and related metadata; and
• job and processing records used to run background tasks and troubleshoot failures.

F. Device, session, and usage information

Like most online services, we and our infrastructure providers may automatically receive technical data such as IP address, browser type, device information, timestamps, request metadata, and session identifiers necessary to operate, secure, and debug the Service.

We also use authentication and session technologies needed for login and account security.

3. How We Collect Information

We collect information:

• directly from you;
• from your Google sign-in when you authenticate;
• from files, URLs, GitHub links, and other sources you ask us to process;
• from AI providers you choose to use through the Service;
• from websites or systems you direct us to crawl or access on your behalf; and
• automatically through the operation of the Service and related infrastructure.

4. How We Use Information

We use information to:

• provide, maintain, and secure the Service;
• authenticate users and manage accounts and sessions;
• ingest, organize, analyze, and transform application materials you submit;
• generate resume, cover-letter, interview, and related outputs;
• process requests using the AI provider you select;
• detect abuse, investigate misuse, and enforce our Terms of Use;
• diagnose errors, monitor performance, and improve reliability;
• comply with legal obligations and protect rights, safety, and property; and
• communicate with you about the Service.

We do not use your content to create fake qualifications or knowingly generate unsupported claims for you. You remain responsible for reviewing and deciding whether to use any output.

5. AI Providers and Third-Party Processing

Human, Actually is a bring-your-own-key product. If you provide an API key and choose OpenAI, Anthropic, or Google Gemini as your AI provider, we will send relevant content to that provider as needed to perform the features you request.

Depending on the feature you use, this may include:

• resumes, job descriptions, notes, and other submitted text;
• extracted text from websites or imported sources;
• prompts, edits, refinement instructions, and interview messages;
• generated context derived from your submitted content; and
• PDF files or extracted content for text extraction or generation tasks.

If OpenAI is your selected provider, some content may also be sent to OpenAI's moderation endpoint when moderation is used.

We do not send protected-site credentials themselves to AI providers. Protected-site credentials are used only to access the resource you direct us to access, and the resulting extracted content may then be processed through the Service.

Your use of any third-party AI provider is also subject to that provider's own terms, pricing, and privacy practices.

6. How We Disclose Information

We may disclose information in the following circumstances:

• AI providers you choose. We disclose content to the AI provider you configure in order to perform the requested analysis or generation.
• Infrastructure and service providers. We may disclose information to hosting, database, queueing, authentication, storage, security, and other vendors that help us operate the Service.
• Sources and destinations you direct. If you ask us to access a website, GitHub resource, or protected source, information necessary to make that request may be sent to that destination.
• Legal and safety reasons. We may disclose information if we believe doing so is reasonably necessary to comply with law, legal process, or government request, or to protect rights, safety, security, or property.
• Business transfers. We may disclose information in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, subject to applicable law.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

7. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain records, resolve disputes, enforce agreements, and comply with legal obligations.

In general:

• account and case-related information is retained until you delete it, request deletion, or it is no longer reasonably needed for the purposes described in this Privacy Policy;
• generated outputs, source materials, extracted text, and analysis records may remain associated with your account until removed;
• protected-site credentials are encrypted and designed to expire automatically after approximately 30 minutes unless revoked sooner; and
• backup, log, and disaster-recovery copies may persist for a limited period after deletion.

You can delete your account through the Service settings. If you need help with deletion or no self-service option is available, contact us at info@ai-created.com.

8. Your Choices and Rights

A. In-product controls

You can currently:

• delete individual source documents in the product;
• delete entire application cases in the product;
• delete your account and associated application data in the product; and
• change certain settings, including your selected AI provider and stored provider key.

B. Access, correction, and deletion requests

You may request access to, correction of, or deletion of your personal information by contacting us at info@ai-created.com.

We may need to verify your identity before acting on a request, and we may deny or limit requests where permitted by law.

C. California rights

If the California Consumer Privacy Act, as amended ("CCPA"), applies to our processing of your information, California residents may have rights to know, access, correct, delete, and receive information about our data practices, as well as the right not to be discriminated against for exercising applicable rights.

We do not sell personal information or share personal information for cross-context behavioral advertising.

If you are a California resident and wish to exercise rights that apply to you, contact us at info@ai-created.com.

D. Do Not Track

Some browsers offer a "Do Not Track" setting. We do not currently respond to browser-based Do Not Track signals in a way that changes the Service experience.

Human, Actually is not designed to track your activity across third-party websites for cross-context behavioral advertising. However, third-party providers that support the Service may receive network or device information when you use the Service, and their practices are governed by their own policies.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

For example:

• high-sensitivity stored secrets, such as user-supplied AI provider keys and protected-site credentials, are encrypted before storage;
• access to account and case data is restricted through authentication and ownership checks;
• database-backed session handling is used to restrict access to authenticated users; and
• application flows are designed to reduce unnecessary disclosure and caching of sensitive responses.

We primarily store Service data in managed application databases and related service infrastructure rather than in a user-facing file-storage system as part of the normal deployed Service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

If you use the Service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States or other jurisdictions where we or our service providers operate.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the Service, contact us at info@ai-created.com so we can review and address the issue.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a new effective date and may provide additional notice where appropriate.

13. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact:

Unthinking AI, LLC
info@ai-created.com