Privacy Policy
Last updated: April 29, 2026
Vanara.ai is open source. The code is public. We wrote it for ourselves and released it because we think the job market needed this. We try hard not to collect data we don't need.
Your Groq API key is stored in your browser's localStorage. It is sent with each request in an X-Groq-Key header. Our server forwards that key straight to Groq and forgets it. It is never written to a database. It is not logged.
You control the key. You rotate it. You delete it. We have no way to see it after the request completes.
Signing in is optional. Vanara.ai works without an account in stateless mode, though without sign-in we can't save your optimization history.
When you sign in, Google gives us your email address and basic profile info through Supabase auth. We use this to identify you across sessions and save your resume uploads and optimization runs so you can come back to them later. That's the only thing we do with it.
We do not share it with anyone. We do not email you marketing. You can sign out and delete your data at any time by contacting us.
When you're signed in, we store your uploaded resumes and optimization results in Supabase Postgres. This is so you can reload them later. Resume files are stored in Supabase Storage. All of it is tied to your account.
Data goes to Groq's API when you run an optimization, so Groq processes your resume and the job description. Their privacy policy applies to that step.
Beyond that: no third-party analytics, no ad pixels, no session replay, no data sold to anyone.
Our server logs basic request metadata for debugging: timestamps, endpoint paths, status codes. We do not log resume content, job descriptions, or API keys. Logs are retained for 30 days then rotated out.
We use a session cookie from Supabase to keep you signed in. That's it. No tracking cookies. No third-party cookies.
Email vanara.ai@yahoo.com from your account email and we'll delete your account, resumes, and optimization history within 7 days.
Vanara.ai is MIT licensed and fully open source. Read the code: backend · frontend. If we say we don't store something, you can grep the source and confirm.
If this policy changes, we'll update the date at the top and note the change in the commit history of this page.
Questions: email vanara.ai@yahoo.com.