Security

    Your data is yours. Here's how we keep it safe.

    Data encryption

    All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Your resumes, personal information, and application history are never stored in plaintext.

    Authentication

    We use industry-standard OAuth 2.0 for authentication. Your passwords are never stored - authentication is handled through trusted providers. Sessions are short-lived and automatically expire.

    Data handling

    We only collect information necessary to apply to jobs on your behalf. We never sell your data to third parties. You can request a full export or deletion of your data at any time.

    Job application data is processed in real-time and not retained longer than necessary. AI processing happens on secure, isolated infrastructure.

    Responsible disclosure

    Found a vulnerability? We appreciate responsible disclosure. Please email security@plushly.ai and we'll respond within 48 hours.