← Back to Morning Tea Jobs

Privacy Policy

Effective Date: October 26, 2026 · Operated by Biwada LLC

1. Summary of Our Privacy Commitments

• No Data Broker Sales: We never sell or rent your resume, contact details, or job search activity to third-party data brokers, advertisers, or current employers.
• Sensitive Demographic Firewall: We do not ask for, collect, or auto-fill Sensitive Personal Information (“SPI”) such as Social Security Numbers, race/ethnicity, gender, sexual orientation, disability status, veteran status, or criminal history. Our browser pre-fill engine explicitly skips demographic and legal attestation fields so you answer them directly on the employer’s form if you choose.
• 1-Tap Account & Data Deletion: You can permanently delete your account, resumes, swipe history, and relay messages at any time directly inside the app (“Delete account & data”) or by emailing privacy@morningteajobs.com.

2. Categories of Information We Collect

• Account & Contact Identifiers: Name, personal forwarding email address, phone number (optional, used strictly to pre-fill your own job applications), and hashed passcode (`PBKDF2-SHA256`).
• Career & Preference Data: Target role tracks, work-mode preference, minimum salary floor, dealbreaker company exclusions, US work authorization yes/no toggle, and uploaded or pasted resume text/PDFs.
• Rejection Shield Relay Metadata: Inbound emails sent by employer ATS systems or recruiters to your assigned candidate relay alias, classified to extract one-time security codes (“OTPs”), suppress automated rejections/receipts, and forward genuine interview invitations to your personal inbox.
• Billing Metadata: Subscription tier status and external customer/subscription identifiers from Stripe, Apple App Store, or Google Play Store (we never store raw payment card numbers).

3. How We Use Information & Anonymized Employer Velocity Signals

We process your information strictly to curate matching daily job cards, prepare truthful role-aligned PDF resumes, stage form inputs inside your session, and operate your Rejection Shield inbox. Aggregated, de-identified response-timing counts (for example, whether an employer portal sends automated rejections within two hours without human interviews) are used to calculate employer hiring-pulse scores so members avoid inactive “ghost” listings. Individual candidate identities are never disclosed to other members.

4. AI Processing & Infrastructure Subprocessors

We use enterprise infrastructure providers solely to deliver the Service. Paid enterprise Google Cloud Vertex AI endpoints do not use customer prompts or resume content to train foundation models.

5. Data Retention, Security & Your State/Global Privacy Rights (CCPA/CPRA, GDPR)

All traffic is encrypted in transit via TLS 1.2+, session tokens are stored only as `SHA-256` digests, and candidate database queries enforce strict per-user Row-Level Security (`user_id` isolation). Depending on your jurisdiction (including California, Virginia, Colorado, Texas, North Carolina, the UK, and the EEA), you have the right to access, export, correct, or permanently delete your personal data, and to opt out of any “sale” or “sharing” for cross-context behavioral advertising (which we do not perform). Trigger immediate erasure in-app via Delete account & data (`DELETE /v1/me`) or email privacy@morningteajobs.com.