Privacy Policy
Version 1 — effective 2026-07-12
Account & profile data
When you create an account we store your name, email, and authentication credentials (via Better Auth). Onboarding and profile data — goal, experience, stack, focus subjects, weak areas, daily time, and preferences — is stored against your account to personalize your roadmap. If you upload a resume, its extracted text is stored so you can reuse it; you can replace or remove it from your profile settings.
Roadmap, notes & AI inputs
Your roadmap, progress, notes, bookmarks, quiz attempts, task submissions, and chat messages are private to your account. Text you send to an AI action (chat, task feedback, job-description prep) is sent to our AI provider to generate a response and is stored so you can see your own history — it is not used to train external models.
Anonymous community snapshots
If you explicitly choose to share a roadmap with the community, we store a separate, sanitized snapshot: a generated title, purpose, focus tags, and section/topic counts. It never includes your name, email, avatar, resume text, notes, or the private roadmap itself. This is opt-in per roadmap and you can unshare at any time, which removes the public snapshot immediately.
Visitor measurement
We measure aggregate visits so we understand how the product is used. This uses an opaque, first-party browser identifier generated only after you accept the optional analytics choice; we store a hash of it, not the identifier itself. Your IP address is never stored in full — the server converts it to an irreversible daily hash (HMAC) before anything is written to the database, and that hash is used only for basic abuse/duplicate-visit protection, not to identify you. Your hosting/CDN provider (Vercel) may keep its own short-lived request logs under its own policy, independent of this database. We do not sell or share visitor data for advertising.
Security logging
We keep minimal operational logs (errors, request timing, rate-limit triggers) to keep the service reliable and secure. These logs are not used for advertising or profiling.
Retention
Account, roadmap, notes, and other content you create are kept while your account exists. Event-level pseudonymous visitor data is kept for a limited period (currently up to 90 days) before being deleted or reduced to aggregate counts.
Your choices
You can withdraw the optional analytics choice at any time from the guest consent prompt shown on your first visit, edit or delete your profile data from your account settings, and request full account deletion by contacting us below.
AI & education limitations
This is an educational tool. AI-generated lessons, feedback, and analysis can be wrong or incomplete — verify anything important yourself, especially before an interview.
Changes & contact
We'll bump the version above when this policy changes materially. Questions or deletion requests: mehedisarkar2k@gmail.com. See also our Terms of Service.
This page describes our product safeguards in plain language and is not a substitute for legal advice for the jurisdictions we operate in.