How We Handle Your Data

Résumé files, pasted job descriptions, interview answers, and related text you submit to 4i Flow are processed—including via third-party AI providers—to generate suggestions, scores, and workspace features you request.

We do not sell your data. We do not share personal documents with third parties for advertising purposes.

Please avoid uploading highly sensitive information. We are actively improving retention controls and audit logs.

Artificial intelligence: To produce analysis, interview coaching, and AI-assisted output, your submissions are sent to model providers (for example OpenAI or comparable services) under their terms. We use API offerings in line with each vendor’s published data and retention rules for API customers, which generally exclude using your API content to train public models; confirm current terms in the vendor’s documentation. Do not paste secrets, government IDs, or data you are not allowed to share with such vendors.

Payments: If you purchase a paid plan, checkout and subscription billing are handled by Lemon Squeezy as merchant of record. They process payment and billing contact details according to their policies; we receive the information needed to unlock Pro features for your account.

Share links: You may create time-limited, token-based read-only links to certain saved content. Anyone who obtains the link can view that content until you revoke the link or delete the underlying data—treat shared URLs like passwords.

Retention and deletion: You can delete individual workspace items in the product where that control exists. To delete your entire account and all data we store about you (résumés, applications, interview sessions, signatures, preferences), use Settings → Danger zone → Delete account. Account deletion is immediate and cannot be reversed; you can also download a JSON snapshot of all your data from Settings → Your data before deleting. For other data requests, email the address below and we will respond as soon as practicable.

Accounts: We use Supabase Auth. If you choose “Continue with Google,” Google shares basic profile data (such as email and name) with Supabase according to Google’s disclosures. We use this to identify your session and protect paid-tier or abuse-sensitive features.

Usage metering: We store a numeric usage count per account in our Supabase database (and related server logs) to enforce free-tier limits. We do not use this for advertising profiles.

Cloud workspace data: When you are signed in, résumé vault drafts, PDF studio files and annotation drafts, job-description history, application pipeline rows, and signature presets are stored in our Supabase database and tied to your account. We do not keep a separate guest copy on your device for those features.

Analytics (GA4): We load Google Analytics only if you accept analytics cookies in the on-screen banner. If you decline, GA is not loaded. When active, GA measures aggregate traffic under Google’s policies.

Children: The service is not directed to children. We do not knowingly collect personal information from children without appropriate consent. You represent that you meet the minimum age required in your jurisdiction to use online services and enter binding agreements (often 16 in the EEA, or higher where applicable), or that you have verifiable parental consent where required.

For data-related requests, contact us at justbuild1223@gmail.com.