Privacy
Last updated 10 September 2026. Written in plain English on purpose: if a sentence here needs a lawyer to read it, it is not doing its job.
The short version. Your résumé file is read inside your own browser and is never uploaded. This site sets no cookies and runs no third-party analytics or advertising scripts. Nothing about you is sold, and nothing about you is shown to an employer. Email support@withmagic.ai and everything held about you is deleted.
Your résumé is not uploaded
If you choose the résumé route, the file is opened and read by code running in your browser. The file itself never leaves your device and is never stored on any server. What is sent is the extracted text, which is used once to build your profile. If you prefer, use the questions instead and no file is involved at all.
What is stored
| What | Why it exists |
|---|---|
| Your opportunity profile — what you do, what you want, level, work type, location, minimum pay | It is what the matching runs against. It is versioned, so a correction you make is kept alongside the original rather than overwriting it. |
| An anonymous session id, generated in your browser and kept in local storage | It ties your answers to your results within one visit. It is not a cookie and it identifies a session, not a person. |
| Your email address, only if you type it in | To tell you once when the paid version opens. Nothing else is sent to it. |
| Product events — pages viewed, which intake step you reached, whether a preview ran, whether you clicked through to a job | To see where the product loses people. It records what happened, not who you are. |
| A salted hash of your IP address | Rate limiting, so one visitor cannot run the expensive part of the site in a loop. The address itself is not stored and the hash cannot be reversed to it. |
| The recommendations you were shown, with the model and version that produced them | So a past recommendation is still interpretable after the matching changes. |
What is never stored
- Your résumé file.
- Card or payment details. No payment is taken at all today, and when it is, it will be handled by a payment processor and card numbers will never reach this site.
- Your raw IP address.
- Anything from a tracking cookie, an advertising pixel, or a session recorder, because there are none.
Who processes it
- Cloudflare — serves this site and runs the code behind it.
- Neon — the Postgres database that stores the items listed above.
- Google (Gemini API) — reads your profile text and job descriptions to do the matching. Your profile text is sent as part of that request. It is not used to train a public model.
- Telegram or email — only once delivery exists and only if you ask for it.
Job listings themselves come from public company job boards (Greenhouse, Lever, Ashby). They are public postings, not personal data about you.
Employers never see you
No employer, recruiter or agency is given your name, your email, your profile, or the fact that you looked at their job. Nothing about you is sold, rented or shared for advertising. If that ever changes it will be an explicit choice you make, per employer, and one you can withdraw.
How long it is kept
Profiles, recommendations and events are kept while the product is in use, so that the matching can be improved and a past result can still be explained. Ask for deletion and it is deleted rather than flagged — the record goes.
Your rights
Ask and you will be told what is held about you, sent a copy, have it corrected, or have it deleted. One email is enough: support@withmagic.ai. No account, no form, no retention offer.
Children
This is a tool for people with professional work histories and is not intended for anyone under 16.
Changes
If this policy changes in a way that affects what is collected or who processes it, the date at the top changes and the change is described here rather than slipped in.