Your career data belongs to you.

1. Data We Collect & Store

• Account Identity: Your name, email address, and authentication session (managed via Neon Better Auth).
• Career Documents (PII): Structured resume JSON, uploaded PDF files, cover letters, and mock interview transcripts. Uploaded resume PDFs are stored in private Cloudflare R2 object storage and accessed only via short-lived signed URLs.
• Job Preferences & Application History: Target roles, seniority, locations, salary floor, company blocklists, matched jobs, and application status notes.

2. How AI & Job Discovery Process Your Data

When you request AI bullet enhancement, cover letter generation, mock interviews, or ATS job matching, relevant sections of your resume and target job description are sent to Google Cloud Vertex AI (Gemini) over encrypted connections. Your data is never used to train public foundation models.

3. Your Rights Under GDPR & NDPR (Export & Deletion)

Under the Nigeria Data Protection Regulation (NDPR) and the European Union General Data Protection Regulation (GDPR), you have the right to access, export, rectify, and permanently erase your personal data at any time:

• Full Data Export: Open Settings > Data > Export JSON to download a complete machine-readable archive of all records linked to your account.
• Immediate Account & Cloud Deletion: Open Settings > Data > Delete Account to permanently erase your private R2 resume files and cascade-delete all database records tied to your user_id.

4. Google API Services User Data Policy & Microsoft Graph (Send-Only Scope)

Ascent's use and transfer to any other app of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Send-Only Scope Only: When you connect Gmail or Microsoft Outlook for cold outreach, Ascent requests only https://www.googleapis.com/auth/gmail.send or https://graph.microsoft.com/Mail.Send. Ascent never requests permission to read, scan, or modify your inbox messages.
• User Approval Required: Every outreach email and follow-up is placed in your review queue and is dispatched only after your explicit approval.
• Encrypted Token Storage & Instant Revocation: OAuth tokens are encrypted at rest with AES-256-GCM and are permanently deleted when you click Disconnect in Outreach settings.

5. Business Contact Provenance & Global Suppression List

Ascent discovers only professional business contact records (never personal webmail addresses) with documented provenance and verification timestamps. Any recipient who replies with an opt-out request, clicks the List-Unsubscribe header link, or requests removal is immediately added to Ascent's Global Suppression List and blocked from future outreach across the platform.