oui.bot · candidate search
We treat a job search as confidential work and use layered controls to protect the account, integrations, and workspace.
The application stores salted, versioned password hashes and one-time verification/reset tokens in Neon. It enforces strong passwords, rate limits authentication, and stores opaque server-side sessions in an HttpOnly, Secure, same-site cookie.
Candidate data is scoped to its owner in server-side database queries. Admin access is role-checked and sensitive administrative changes are audited. Payment-card details remain with Stripe.
Google access is granted by you, stored encrypted, and can be disconnected. Availability is preferred over event details; event writes require explicit consent and are idempotently tracked.
AI requests are bounded by account gas and platform budgets. Research output is evidence-linked and reviewed by you before it becomes an active target or action.
If you believe an account or data has been exposed, contact support using the contact details included in your account or receipt. Do not include passwords, reset links, or access tokens.
Effective terms and privacy details are presented again during account creation or checkout when applicable.