Your data stays yours

Your account email and a hashed password. The résumés you upload, your profile (what you are looking for, your tracks, filters and gate answers), the jobs we match for you and what you do with them, your AI provider key if you add one, which is stored encrypted, and anything you send through the “What's missing?” box. If you tried to sign up while winq was full, we keep only your email, to tell you when a spot opens; email us to be removed.

When we score jobs for you, your profile and résumé text go to the AI provider you chose (Google, OpenAI or Anthropic), using your own key, under that provider's terms. The exception is your first résumé analysis and your first search, if you run them before you add a key. Those go to Fireworks AI, which runs DeepSeek V4.1 Flash, the model we use for them, on winq's own key and account, under Fireworks AI's terms for its paid API. Every later search uses your key. On every search, your first ones included, a short description of what you are looking for (your summary and the titles of your tracks, not your résumé) also goes to Google's Gemini embedding API, on winq's own key and account, so we can rank postings by how close they are to it. When we score, most of your profile (your summary, tracks, experience notes and gate answers, but not your résumé file) may also go to TypeSafe, the company behind the Jev model we use to judge postings, on winq's own account.

We use PostHog, hosted in the EU. It receives your email address and what you do in the app (pages visited, buttons clicked, but not the text on them), including which companies' jobs you open, save, apply to or tailor a résumé for. Session recordings have all text and every input masked, so they show layout and clicks only. It never receives your profile, your résumé, your gate answers or your keys.

When something fails in the app, PostHog receives the error message along with the analytics above. Our own server logs record what failed and for which account, and they stay with our host. When something breaks on our side, the server also sends PostHog a short alert naming what broke, with nothing that identifies you.

We do not share your data with anyone else, and we never sell it.

The Delete account button at the bottom of your profile page removes your account and everything above at once. If winq paid for your first analysis or search, we keep what it cost us (the model, tokens and dollars) with nothing that links it to you. We delete your PostHog record too, within 7 days. Database backups are normally deleted within 30 days, and your data goes with them.

Email [email protected].