Privacy Policy

1. Who we are

Landed (“we”, “us”, “our”) operates the website at landed.sh and related services. We help job seekers tailor resumes to job descriptions using AI-powered tools.

2. Information we collect

2.1 Account information

• Email address and password (hashed) when you sign up with email
• Name and email from LinkedIn when you sign up or log in with LinkedIn
• Display name (optional, set in your profile)

2.2 Resume and job data

• Resume content you upload or create, including personal details (name, contact information, work history, education, skills)
• Job descriptions you provide for tailoring
• AI-generated content: tailored resumes, cover letters, outreach messages
• Match scores and improvement suggestions

2.3 Billing information

Payments are processed by Stripe. We never receive or store your card number, CVV, or full billing details. We store only your Stripe customer ID, subscription plan, and billing period dates.

2.4 Automatically collected data

• Analytics: We use Vercel Analytics and Vercel Speed Insights to collect anonymous page-view and performance data. These tools do not use persistent identifiers or cross-site tracking.
• Cookies: We set a single first-party session cookie (sb-auth-token) to detect whether you are logged in. No third-party tracking cookies are used.

3. How we use your information

• To provide and operate the resume-tailoring service
• To process your resume and job data through AI models for tailoring, enrichment, keyword matching, and content generation
• To manage your account, authentication, and subscription
• To enforce usage limits associated with your plan
• To generate and deliver PDF exports of your resumes
• To improve and monitor the performance of our service

4. AI processing and third-party providers

To provide AI-powered features, we send your resume content and job description text to third-party large language model (LLM) providers. These may include:

• OpenAI
• Anthropic
• Google (Gemini)
• DeepSeek

Data is sent to the provider configured for your account via API calls. These calls are transient — we do not separately log or store the data sent to or received from these providers beyond saving the results in your account. Each provider’s own privacy policy governs their handling of data received through their APIs.

5. Third-party services

6. Public sharing

You may choose to enable public sharing for a resume. When enabled, anyone with the share link can view your resume content (name, contact details, work history, education, skills, and projects) and download it as a PDF. You can disable sharing at any time, which immediately revokes access.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data, resumes, and associated records from our database. Backups may retain data for up to 30 days after deletion. Stripe retains billing records independently as required by law.

8. Data security

We protect your data using industry-standard measures including encrypted connections (HTTPS/TLS), hashed passwords, row-level security on the database, and scoped API authentication via JWTs. Payment data is handled entirely by Stripe and never touches our servers.

9. Your rights

Depending on your jurisdiction (including under UK GDPR), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

10. Children’s privacy

Landed is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through an in-app notice. The “last updated” date at the top reflects the most recent revision.

12. Contact us

If you have questions about this privacy policy or your personal data, contact us at:

privacy@landed.sh