Privacy

Everything you enter is kept in your PostgreSQL database and data directory. PRIVACY.md has the details: what's kept and for how long, what deleting removes, everything that leaves your server and who receives it, and a note on the GDPR.

• AI: with a local model, your profile, postings and documents never leave your server. A hosted provider receives what each task needs: the posting, your profile without contact details (no email, phone, address, date of birth or links), what you tell it about the application, and, when you refine, the drafts and your chat messages, though never a letter's sender or signature. Importing a resume sends its whole text, contact details included; the import page says so first. The notes you keep on an application are never sent. How long the provider keeps what it receives, and where it processes it, depend on its terms and your account.
• Task data: what an AI task was given and wrote (a posting being read, a resume's text, drafts you didn't turn into an application) is deleted after 24 hours, or as long as Settings → Your data says. Deleting an application deletes its task data at once.
• Usage ping, only if you agree: after you first sign in, Dossier asks whether to send it, and sends nothing before a yes. If you agree, on each day you use Dossier your server sends telemetry.dossier.aien.me a random install ID and the version number, once, so the project knows how many installs are in use and how often. Nothing else is sent. Change your answer in Settings → About, or set DOSSIER_TELEMETRY=on or off (see Environment variables). PRIVACY.md says who receives it, what the receiver keeps, for how long, and how to have it deleted.
• Update check: once on each day you use Dossier, and when you press Check for updates, your server asks GitHub for the latest release, and sends nothing about you or your install. Switch the daily check off in Settings → About.
• Gmail and Calendar: off until you connect a Google account (see Connecting Gmail and Calendar). Dossier then keeps the mail about your applications (only their text, not attachments) and what the AI read in it, and a hosted AI provider receives each reply it reads or answers. Deleting an application deletes its mail; Disconnect revokes the access at Google.
• When you ask for it: Find jobs, off until you choose a source, sends the source what you search for and nothing from your profile. Fetch asks a job site for a posting's page, from your server.
• No other tracking or analytics: Dossier loads nothing from other sites (its Content-Security-Policy forbids it, and the ping comes from your server, not your browser), and Next.js telemetry is off in the image.