Privacy Policy

Account data. Your email address, and your name if you give it to us. We use passwordless sign-in: we email you a one-time code rather than storing a password.

Content you create. The resumes, cover letters, cold emails, resignation letters, and job-application details (job description text, target company, recipient email) you build or paste into the editor. This is stored as structured data tied to your account so you can come back and edit it — it is not kept only on your device; it lives in our database until you delete it or close your account.

Files you upload for import. If you upload an existing resume (PDF, DOCX, or an image) to auto-fill the editor, the file itself is processed in memory for that one request only and is not saved to our systems afterward. Its content is sent to our AI provider (see “Who we share data with” below) to extract the text into the structured fields you then see and can edit.

Payment records. When you buy a credit pack, we store the order amount, currency, and Razorpay's own order/payment identifiers, so we can confirm a purchase and grant credits. We never receive or store your card, UPI, or bank details — Razorpay handles payment collection directly and is the data controller for that information.

Product-usage data. A single 1–5 star rating if you choose to leave one, and, if something breaks, a server-side error log (route name and error message — not the body of what you were working on) so we can fix real bugs.

We do not currently run any third-party analytics or advertising trackers on Verbcraft, and we don't buy or sell personal data.

To create and operate your account; to generate, tailor, and export your documents using AI; to process payments and grant the credits you've paid for; to send sign-in codes and service-related emails; to prevent abuse of free AI usage; and to fix bugs when they happen.

We don't sell your data. To run the product, specific pieces of it are processed by these service providers, each acting under their own privacy terms:

• Cloudflare — hosts the application and our database (Workers and D1). Your account and document data is stored on Cloudflare's infrastructure.
• Anthropic (Claude API) — receives the resume/job text (and, for file imports, the uploaded file's content) needed to generate or extract your documents. Anthropic processes this to return a result to us; we do not control Anthropic's own retention beyond what's in their terms.
• Razorpay — processes payments for credit-pack purchases. Razorpay collects and stores your payment method details directly; we only receive confirmation and identifiers back from them.
• Google — our sign-in emails are relayed through a Google Apps Script mailer, so your email address and one-time code pass through Google's infrastructure to reach your inbox.

We may also disclose data if required by law, or to protect the rights, safety, or property of Verbcraft, our users, or the public.

Verbcraft runs on Cloudflare's global network, and our AI and payment providers operate their own infrastructure, which may be located outside your home country — including outside the EEA/UK if you're located there. Where that applies, we rely on our providers' standard contractual safeguards for that transfer.

We keep your account and document data for as long as your account is active. If you delete a resume, letter, or application, it's removed from our database. If you close your account or ask us to, we delete your personal data within a reasonable period, except where we're required to keep payment records for legal, tax, or fraud-prevention purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. This includes rights under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act, 2023, to the extent each applies to you. Most of this you can already do yourself in the dashboard (edit or delete any resume, letter, or application). For anything else — including a full account deletion or a copy of everything we hold — email harsh@kalpantar.com and we'll act on it.

Verbcraft uses only the cookies needed to keep you signed in (session authentication). We don't use advertising or cross-site tracking cookies. If that changes in the future, we'll update this policy and, where required, ask for your consent first.

Verbcraft is intended for people old enough to be job-seeking and isn't directed at children. We don't knowingly collect personal data from anyone under 16.

If we make a material change to how we handle your data, we'll update the date at the top of this page and, for significant changes, make a reasonable effort to notify account holders directly.

Questions about this policy or a request about your data: harsh@kalpantar.com.