Privacy Policy

1. What Data We Collect

When you use Surface, we collect the following information:

• Account information — Email address and user ID, provided by Clerk (our authentication provider).
• Search prompts — The job descriptions you submit to find matching jobs.
• Usage data — When you search, which results you view, and how many searches you perform.

2. How We Use Your Data

• Job scoring — Your prompts are sent to an LLM (Large Language Model) to score jobs. Prompts are hashed and cached so identical searches don't incur extra costs.
• Rate limiting — We track daily search counts per user to enforce fair usage limits.
• Improving the product — Aggregated, anonymized usage patterns help us understand how to improve the service.

3. Third Parties

• Clerk — Handles authentication. See Clerk's privacy policy.
• Cloudflare — Hosts our infrastructure (Workers, Pages, D1). See Cloudflare's privacy policy.
• LLM providers — Your anonymized prompts may be processed by third-party AI providers (e.g., DeepSeek, OpenRouter) for scoring. Prompts are not linked to your identity when sent to these providers.

4. Data Retention

• Account data — Retained until you delete your account.
• Search history — Retained to provide the history feature. You can request deletion by contacting us.
• Rate limit counters — Reset daily at midnight UTC.
• Scoring cache — Stored indefinitely for efficiency. Contains only hashed prompts, not raw text.

5. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. We will respond within 30 days.

6. Contact

For privacy-related inquiries, email us at privacy@labaslabas.dev.