Privacy Policy
Last updated: April 22, 2026
1. Data Controller
Iris Digital, SIREN 524 317 872, France.
Contact: contact@postulus.com
2. Data We Collect
| Data | Purpose | Retention |
|---|---|---|
| Job title, company, experience, skills | Generate your cover letter | Unpaid: 2 hours. Paid: 24 hours (to allow re-download), then auto-deleted |
| Uploaded resume (PDF) | Extract experience summary | Processed in memory only — never stored on disk |
| Payment info (card details) | Process payment | Handled entirely by Stripe — we never see or store card numbers |
| IP address, browser info | Security, rate limiting, abuse prevention | Deleted regularly |
We do not collect: names, email addresses, phone numbers, or any account information. No account is required to use Postulus.
3. Legal Basis (GDPR Art. 6)
- Contract performance (Art. 6.1.b): processing your job data to deliver the cover letter you purchased
- Legitimate interest (Art. 6.1.f): security logs, rate limiting, fraud prevention
4. Operational Metrics
To monitor service quality (latency, error rates, token usage), we retain aggregated technical logs for up to 90 days. These logs never contain your job posting, background, or generated letter — only the selected tone, language, duration, status code, and AI token counts. This data is used exclusively for internal monitoring.
5. Third-Party Services
- Stripe (payment processing) — Privacy Policy
- Anthropic (AI text generation) — your job data is sent to Anthropic to generate the letter. Privacy Policy
No analytics, tracking, advertising, or social media scripts are used.
6. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Request deletion of your data
- Object to processing
- Data portability
- Lodge a complaint with your local data protection authority (in France: CNIL)
Since we auto-delete job data within 2 hours and don't require accounts, most data is already gone by the time you might request it. Contact us at contact@postulus.com for any privacy request.
7. Cookies
Postulus does not use cookies. No cookie banner needed.
8. International Transfers
Your job data is sent to Anthropic (US) for processing. This transfer is covered by Anthropic's Data Processing Agreement and Standard Contractual Clauses.
9. Changes
We may update this policy. The "last updated" date at the top will reflect changes.