Privacy Policy

Last updated: October 11, 2026

Refacet is run by sjwwhenever ("we"). This policy explains what data Refacet handles, where it goes, and the choices you have. Refacet comes in two forms that handle data very differently: the desktop app, which keeps your data on your own computer, and the web app at app.refacet.app, which stores it on our servers so you can use it from a browser.

Desktop app

Your profile, experiences, chats, job matches and resumes are stored in a database on your computer. We do not receive a copy.

• AI features send the relevant text directly from your computer to the AI provider you selected, using your own API key. We are not in that path.
• Update checks contact update.refacet.app with the app version, operating system and CPU type, which like any web request also reveals your IP address. We use this only to deliver updates.
• Semantic search uses a small language model that is downloaded once from Hugging Face and then runs entirely on your computer.

Web app

What we store

• Account: your email address. If you sign in with Google we also receive Google's account identifier, and nothing else from Google (no name, photo or contacts). If you use a password we store only a one-way hash of it, never the password itself. Account emails (confirming your address, resetting your password) are sent through Resend, which receives your email address and the message.
• Your content: profiles, experiences, projects, skills, education, certifications, awards, chat history, job descriptions you analyse, match results and resume snapshots (including preview images). To power search over your chats we also store numeric representations (embeddings) of chat messages.
• Credits and payments: your credit balance and a record of each change, including how many tokens each AI request used (not its content). Payments are handled by Creem, our merchant of record: we receive your Creem customer ID and the status of your purchases, never your card details.
• Imported files: resumes or LinkedIn exports you upload are read on the server and the file is deleted immediately. Only the information you then choose to save is kept.

Each user's data is kept in a separate database.

Where it is stored

• Servers operated by Railway Corporation in the European Union (Amsterdam).
• Nightly backups in Cloudflare R2 (encrypted at rest by Cloudflare), kept for 30 days.

AI processing

When you use an AI feature (chat, polishing, translation, job matching, resume extraction), our server sends the content needed for that request to DeepSeek, using Refacet's API key, where it is processed under DeepSeek's terms and privacy policy. We do not use your content to train models.

Cookies

The web app sets one cookie to keep you signed in (up to 30 days, removed when you sign out) and, during Google sign-in only, a short-lived cookie (10 minutes) that protects the login against forgery. We use no advertising or cross-site tracking cookies.

This website

www.refacet.app uses Vercel Web Analytics to count page views. It does not use cookies and does not identify individual visitors.

Free tools

The free tools on this website (such as the resume bullet improver) work without an account. What you type is sent to DeepSeek through our server to produce the answer, and is not stored. To stop the tools being abused, our server keeps your IP address in memory for up to 24 hours to count how often it is used; it is not written to disk or linked to anything else.

What we don't do

• We do not sell or rent your data.
• We do not show ads or share your data with advertisers.
• We do not read your content except when needed to fix a problem you report, or when required by law.

How long we keep data

We keep your web app data for as long as your account exists. After you ask us to delete your account, we remove it from our servers, and it disappears from backups as they expire (within 30 days).

Your choices and rights

You can edit or delete your content in the app at any time. You can also ask us to send you a copy of your data, correct it, or delete your account, by writing to sjwwhenever@gmail.com. Depending on where you live (for example in the EU or UK), you may have further rights, including objecting to processing and complaining to your local data protection authority.

Children

Refacet is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date at the top of this page. For significant changes to how we handle web app data, we will also let signed-in users know.

Contact

Questions or requests: sjwwhenever@gmail.com.