The Privacy Policy and the Security page on kattia.io are the full reference.
You own your content
You keep ownership of the applications, notes, attachments and other content you add. You give Kattia a limited licence to store, process and display it so the product works.
How Kattia uses your data
Kattia uses your data to:
Run the product, including pipeline tracking, AI features and, if you connect Google, inbox sync and calendar events.
Process payments and manage subscriptions.
Understand usage and improve the product.
Send transactional email, such as account and billing messages.
Answer support requests.
Kattia does not sell your data. Kattia does not use your application content to train public AI models.
How Kattia protects your data
In transit: all traffic uses TLS 1.2 or higher.
At rest: data in the database is encrypted by the infrastructure provider.
Isolation: row-level security policies in the database make sure you can read and write only your own data.
Sessions: your session lives in a cookie managed by Supabase Auth, our sign-in provider.
Google access: if you connect Google, the refresh token that keeps you connected is stored encrypted.
Services that process your data
Services that process your data include:
Service | What it does |
Supabase | Database and authentication |
Vercel | Hosting and request logs |
Stripe | Payments. Kattia never sees full card numbers. |
An AI model provider | AI processing |
Sign-in, and Gmail and Calendar access if you connect them | |
Resend | Transactional email |
Intercom | This help centre and Contact support |
PostHog | Product analytics and error capture |
Google Analytics | Anonymous traffic analytics |
Sentry | Error monitoring |
Each service has its own privacy terms.
AI and your data
When you use an AI feature, Kattia sends the content that feature needs, such as a job description or your resume text, to an AI model provider for processing.
Suggested roles are on by default. While they're on, Kattia sends your target role, location, resume and, if you allow it, your applications to an AI model provider to find and rank roles. Job-listing services see only the searches. Turn this off in Settings › Suggested roles.
Keep, export and delete your data
Keep: your data stays while your account is active.
Export: go to Settings › Account, find Export your data and select Download data. You get a JSON copy of your profile, applications and related content.
Delete: go to Settings › Account, select Delete account… and confirm with your email address. Kattia schedules permanent deletion of your profile, pipeline, interview notes, calendar, inbox sync and any active subscription. You have 30 days to change your mind. To cancel, sign in and select Cancel deletion in Settings › Account.
After deletion, backups are kept for 30 days and then purged. Billing records are kept for 7 years where the law requires it.
Kattia stores the sender, subject, date and text of each job-related email a sync reads, so it can match and show them. Disconnecting deletes them. See What Kattia can access in your email and calendar.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data. To use these rights, email [email protected]. Kattia replies within 30 days.
Changes to the policy
When the Privacy Policy changes, Kattia updates its "Last updated" date. Kattia emails active users about material changes.