Privacy Policy

Effective: April 11, 2026

1. Who We Are

Anavantage is operated by D-Abacus ("we", "us", "our"). We are based in Texas, United States. For privacy questions, contact us at support@d-abacus.com.

2. What We Collect

Data	Why
Email address, name	Account creation, communication
Resume text	Skill extraction, question generation, resume tailoring
Job descriptions	Match scoring, tailored interviews
Interview transcripts and answers	Scoring, feedback, scorecards
Voice audio (browser only)	Real-time speech-to-text via Chrome Web Speech API. Audio is not stored on our servers.
Usage data (pages visited, actions taken)	Activity logging for admin, product improvement
Feedback submissions	Product improvement

3. How We Use Your Data

To provide and operate the Service (mock interviews, scoring, resume tailoring)
To generate personalized questions, feedback, and recommendations
To improve the quality of our prompts and features
To communicate with you about your account or the Service
To detect and prevent abuse or unauthorized access

We do not sell your personal data. We do not use your data for advertising.

4. Third-Party Services

Your data is processed by the following third-party services as part of normal operation:

Service	What they receive	Purpose
Clerk	Email, name, auth tokens	Authentication
Anthropic	Resume text, job descriptions, answers	Question generation, evaluation, resume tailoring
ElevenLabs	Question text, coaching tip text	Text-to-speech
Google Cloud	Question text (fallback TTS only)	Text-to-speech fallback
Turso (LibSQL)	All application data	Database storage
Vercel	Request logs	Hosting and deployment
Reddit	Page views, sign-up & purchase events (only after you accept cookies)	Advertising measurement and attribution

Each of these services has its own privacy policy. None of them sell your data to third parties.

5. Cookies

We use strictly necessary cookies required for authentication (Clerk session cookies). These are always active because the app cannot function without them, and they do not require consent.

With your consent, we also use the Reddit advertising pixel, which sets analytics cookies (e.g. _rdt_uuid) to measure the performance of our Reddit ads — for example, whether a visit, sign-up, or purchase followed an ad. We show a cookie consent banner on your first visit: these advertising cookies are only set after you choose “Accept,” and you can decline them and still use every feature. We do not currently send your email, phone number, or other personal identifiers to Reddit.

6. Data Retention

Your account data is retained for as long as your account is active.
If you delete your account, all associated data is permanently removed within 30 days.
Activity logs may be retained for up to 90 days for security and debugging purposes.

7. Your Rights

Depending on your location, you may have the following rights:

Right	Description
Access	Request a copy of all personal data we hold about you
Correction	Request correction of inaccurate data
Deletion	Request permanent deletion of your account and all associated data
Portability	Request an export of your data in a machine-readable format
Opt out of sale	We do not sell personal data, so this right is already satisfied

To exercise any of these rights, email us at support@d-abacus.com. We will respond within 30 days.

8. Data Security

All data is transmitted over HTTPS (TLS encryption in transit).
Database is encrypted at rest (Turso/LibSQL).
Authentication is handled by Clerk with industry-standard security.
API routes enforce authentication and ownership checks before accessing any data.
Admin access is restricted to designated user IDs.

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we will delete their account and data.

10. California Residents (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect and how it is used
Request deletion of your personal information
Opt out of the sale of personal information (we do not sell your data)
Not be discriminated against for exercising your privacy rights

11. European Residents (GDPR)

If you are in the European Economic Area, our legal bases for processing are:

Contract: Processing necessary to provide the Service you signed up for
Legitimate interest: Product improvement, fraud prevention, security
Consent: Where required (e.g., optional communications)

You may withdraw consent at any time. You may lodge a complaint with your local data protection authority.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. Material changes will be communicated via email or in-app notification.

13. Contact

For privacy questions, data requests, or to exercise your rights, contact us at support@d-abacus.com.