Your career story powers the discovery.Your choices govern everything else.

Undersold is the controller of personal information collected through the Undersold website and product, except where a provider acts as an independent controller for its own legally defined purposes. This notice applies to visitors, account holders, free users, and subscribers.

Privacy questions and rights requests can be sent to privacy@undersold.ai. We may need to verify that a requester is the person associated with an account or resume session before releasing or deleting data.

• Provide the service and fulfill our contract: authenticate users, analyze resumes, run requested voice or text workflows, generate deliverables, save work, and manage billing.
• Security and legitimate interests: prevent abuse, enforce limits, debug failures, protect accounts, maintain reliability, and understand aggregate operating costs.
• Your consent: optional browser analytics and the separately controlled use of a de-identified transcript in the improvement set. Either choice can be withdrawn.
• Legal obligations: financial records, lawful requests, dispute handling, fraud prevention, and enforcement of applicable terms.

Undersold does not make employment or hiring decisions and does not use the product to determine eligibility for employment, credit, housing, insurance, or another legally significant opportunity.

Providers receive only the information reasonably needed for their function. Information may also be disclosed when required by law, to protect people or the service, in a corporate transaction with appropriate safeguards, or when you direct us to disclose it.

Some providers process information in the United States or other countries. Where required, we rely on appropriate contractual or legal transfer safeguards. Provider locations and subprocessors can change as their infrastructure evolves.

Undersold is built to hold a durable record of your working life, so career data is kept until it is deleted rather than expiring on a timer. That is a real tradeoff and we would rather state it than hide it: a record that lasts for years is more useful to you, and it also means more information exists to protect. Deletion on request now carries the weight the old timers carried, so we make it available to everyone at any time and we do not charge for it.

• Career content is retained indefinitely: resumes, banked accomplishments, discovery sessions, transcripts, edits, and generated documents. This includes anonymous resume sessions, which are no longer deleted on a 30-day schedule.
• First-party analytics and product events are retained indefinitely so year-over-year comparisons remain possible. Optional browser analytics are still collected only after you allow them.
• Raw guided-audio clips are the exception. They are deleted after confirmed transcription when possible, with a 24-hour cleanup backstop, because the transcript is the artifact you keep.
• Security and diagnostic logs, including browser content-security violation reports, are still cleared on a 30-day schedule. Those are operational noise rather than part of your record.
• Billing, security, audit, and legal records may be retained for the period reasonably required by tax, accounting, fraud, security, or legal obligations, including after you delete other data.

How to get rid of it. If you have an account, the account page lets you export your data and permanently delete the account itself, which removes your sessions and cancels any active subscription. Anonymous resume sessions can be deleted from inside the session itself: the browser that created the session sees a delete control on the sign-up step, and using it erases the uploaded resume, your answers, recorded audio, and everything built from them. If you no longer have that browser or the link, send the session link to privacy@undersold.ai and we will delete it after verifying the request. Deletion removes the underlying records; copies can persist in backups until the backup window lapses, and the billing, security, and legal records described above are kept where law requires.

We use access controls, MFA for the operator portal, encryption in transit, provider access restrictions, rate limits, content reduction before AI processing, and deletion workflows. No system can promise absolute security, so please do not submit secrets or third-party information you are not authorized to share.

Depending on where you live, you may have rights to know or access personal information, correct it, receive a portable copy, delete it, restrict or object to processing, withdraw consent, opt out of certain uses, or appeal a denied request. You may also use an authorized agent where local law permits.

Undersold does not sell personal information. The Meta Pixel, which can count as sharing for cross-context behavioral advertising under some state laws, runs only after you allow analytics, and turning analytics off or sending a Global Privacy Control signal stops it. We will not discriminate against you for exercising a privacy right. Send requests to privacy@undersold.ai. You may also complain to your local privacy or data-protection authority.

Browser analytics choices apply prospectively. Turning analytics off stops new optional client events and removes the current-tab acquisition marker; it does not automatically erase events previously collected. You can request deletion using the address above.

Undersold is not directed to anyone under 18, and we do not knowingly collect their personal information. This matches the eligibility rule in our Terms of Service. Contact us if you believe someone under 18 has provided information so we can investigate and delete it as appropriate.

We may update this notice as the product, providers, or law changes. Material changes will be highlighted, and a new browser analytics choice will be requested when a change makes the prior choice no longer sufficiently informed.