Privacy Policy

Last Updated: August 7, 2026

Welcome to TalentRuby ("App"), which is owned and operated by Sandbays Technologies LLC ("we", "us", or "our"). We are committed to protecting your privacy and ensuring full transparency regarding how your personal information is processed, protected, and managed. This Privacy Policy applies to our mobile applications, web services, and related platform tools.

1. Information We Collect

To provide our job-matching and resume-tailoring services, we collect the following categories of personal information:

Account Information: Your email address, full name, and unique authentication identifiers managed via Firebase Authentication.
Career Documents & Master Profile: Uploaded resumes, work history, skill sets, education credentials, target job preferences, and job descriptions you submit for analysis.
AI Chat & Prompt Interactions: Inputs, text snippets, and job descriptions provided during active AI resume tailoring and cover letter generation sessions.
Usage & Subscription Data: Operational telemetry including search counts, resume generation limits, entitlement verification logs, and subscription metadata managed via RevenueCat.
Device & Diagnostic Telemetry: Anonymized app crash logs, device model, operating system version, and system performance metrics.

2. How We Use Your Information

We use your personal data strictly for the following operational purposes:

To deliver, maintain, and optimize our core resume tailoring, career matching, and cover letter generation features.
To process user inputs via secure AI model endpoints to rewrite experience bullets and align qualifications with target job posts.
To manage user accounts, verify active subscription status, and enforce application entitlements.
To safeguard platform integrity, detect fraudulent usage, and ensure technical performance.

3. Lawful Basis for Processing (EU & UK GDPR)

Under European and UK data protection laws, we process your personal data based on the following legal grounds:

Contractual Necessity: Processing account data, uploaded resumes, and job postings is necessary to fulfill our contract with you (providing tailored resumes and services).
Legitimate Interests: Processing diagnostic data, platform telemetry, and anti-abuse logs to maintain app stability, prevent security threats, and improve user experience.
Explicit Consent: Where required by applicable law, processing optional analytics telemetry and interactive AI processing operations.

4. Third-Party Service Processors

We do not sell, rent, or trade your personal information to third parties or advertising networks. We disclose data solely to infrastructure and service providers essential to app operation:

Google Cloud & Firebase: Authentication (Firebase Auth), real-time database storage (Firestore), and secure file storage.
Google Gemini API: Infrastructure provider utilized for real-time natural language processing and document generation.
RevenueCat: Secure receipt validation, entitlement management, and subscription status verification.
Apple App Store & Google Play Store: In-app payment processing and app distribution platforms.
Firebase Analytics & Crashlytics: Anonymized usage reporting, operational stability, and crash diagnostic tracking.

5. AI Data Handling & Zero Model-Training Guarantee

Your career documents and prompt inputs are processed under strict privacy guarantees:

No Model Fine-Tuning or Training: Your uploaded resumes, career profile data, and custom AI prompts are never used to train, retrain, fine-tune, or improve public or foundation AI models (including Google Gemini models).
Ephemeral Processing: AI prompt payloads are processed statelessly in memory during your session and are not retained by AI model providers after response delivery.
End-to-End Encryption: All data transmissions to and from AI endpoints are protected using TLS 1.3 transport encryption and AES-256 storage encryption at rest.

6. Cookies & Tracking Technologies

TalentRuby uses minimal essential cookies, local web storage, and SDK device identifiers strictly necessary to deliver services:

Essential Session Tokens: To keep you securely logged in across app sessions.
Diagnostic Telemetry: Anonymized Firebase Crashlytics and performance counters to identify application errors.

We do not use cross-site tracking cookies, behavioral ad-targeting scripts, or third-party advertising tracking technologies.

7. Data Retention & Retention Periods

We adhere to strict data minimization principles and retain data only as long as necessary:

Career Files & Profiles: Uploaded resumes and career history are retained in your account until explicitly deleted or until your account is closed.
Account Metadata: Stored securely as long as your account remains active.
AI Session Payload: Processed ephemerally during requests and not permanently stored post-generation.
Diagnostic & Security Logs: Retained for a maximum of 30 to 90 days for operational troubleshooting, after which they are automatically purged.

8. International Data Transfers

TalentRuby operates globally, and personal data collected through our services is processed and stored on cloud servers located in the United States (via Google Cloud / Firebase). For users residing in the European Economic Area (EEA), UK, or Switzerland, we ensure international transfers comply with applicable privacy laws through Standard Contractual Clauses (SCCs) and rigorous cloud security controls.

9. Data Security & Breach Notification

We maintain high-standard technical and organizational security controls, including encrypted storage, role-based access restrictions, and strict Firestore Security Rules. In the unlikely event of a data breach affecting your personal information, we will notify affected users and regulatory authorities in accordance with applicable legal requirements.

10. Your Rights & Choice (GDPR, CCPA/CPRA, & Global Privacy)

Regardless of your geographical location, you maintain full control over your personal information:

Right to Access & Export: You can view and export your profile documents directly from the App.
Right to Rectification: You can edit and update your career credentials at any time.
Right to Erasure (Account Deletion): You can permanently delete your account and all associated data directly within the App's Settings screen. Account deletion immediately triggers an automated purge of your Firebase Auth records, Firestore documents, and Cloud Storage objects.
Opt-Out of Data Sale / Sharing: We explicitly do not sell or share personal data for commercial gain.

11. Children's Privacy

TalentRuby is not intended for individuals under the age of 16. We do not knowingly collect or solicit personal information from children under 16. If we learn that we have collected personal data from a child under 16 without parental consent, we will delete that information immediately. If you believe a child under 16 has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services or legal obligations. We will notify you of any material changes by updating the "Last Updated" date at the top of this page and, where appropriate, sending an in-app notice.

13. Contact Us & Data Protection Officer

If you have any questions, complaints, or wish to exercise your legal privacy rights, please contact our Data Protection Officer at:

Email: contactus@talentruby.com
Attn: Privacy & Data Protection Officer
Sandbays Technologies LLC