Privacy Policy

CyberMatch is a cybersecurity hiring platform that helps employers write better job descriptions and helps candidates understand where they stand. This policy explains what data we collect, how we use it, and your rights.

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We do not receive or store your Google password.

Job descriptions: Text you paste into the analyzer is stored so you can access your analysis history. We do not share individual job descriptions with third parties.

Wall submissions: If you submit a job posting URL for The Wall, the URL, fetched text, and your analysis are stored. Approved submissions are displayed publicly with company names anonymized by default.

Assessment responses: If you take a skills assessment, your responses are sent to an AI model for scoring. Only the scores and feedback are stored — raw answers are not retained after scoring.

Usage data: We track which features you use and how often (e.g., number of analyses per month) for billing and rate limiting purposes.

Analytics: We use Vercel Analytics to collect anonymous, aggregated usage metrics (page views, performance). This does not include personal information.

We use your data to:

• Provide job description analysis and scoring
• Generate recruiter assist packs and role recommendations
• Display your analysis history when you log in
• Enforce usage limits on free accounts
• Process subscription payments through Stripe
• Improve our scoring algorithms using aggregated, anonymized data
• Moderate Wall submissions for accuracy and appropriateness

We do not sell your personal data or individual job descriptions to third parties.

We may use anonymized, aggregated data from job description analyses to build benchmarking datasets (e.g., "average Reality Score by role"). This data cannot be traced back to individual users or companies. Building this dataset is core to how CyberMatch improves over time.

CyberMatch uses the following third-party services that may process your data:

• Supabase — authentication and database hosting
• Google — OAuth sign-in provider
• Stripe — payment processing for subscriptions
• Vercel — application hosting and analytics
• Anthropic — AI-powered analysis features (job description rewrite suggestions, assessment scoring)

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

We use essential cookies for authentication (maintaining your login session via Supabase). We do not use advertising or tracking cookies. Vercel Analytics uses privacy-friendly, cookieless analytics.

Your analyses and assessment results are stored indefinitely so you can access your history. If you delete your account, all associated data (analyses, assessments, usage records) will be permanently deleted.

Job postings submitted to The Wall are reviewed by our team before being published. Company names are anonymized by default. The purpose of The Wall is to highlight patterns in unrealistic job postings, not to target specific companies. Submitters agree that approved submissions may be displayed publicly.

You have the right to:

• Access your data — view it in your analysis history and account
• Correct your data — update your profile through Google
• Delete your data — request account and data deletion
• Export your data — request a copy of your stored analyses

To exercise any of these rights, contact us via our contact page.

We may update this policy from time to time. Material changes will be communicated via the application. Your continued use of CyberMatch after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Reach us through our contact page.