What it stores, and where that goes

Dossier holds the most sensitive data of any tool its authors run: your employment history, what you can and cannot do, why you are leaving your job, your salary expectation, and your work authorisation. This page says plainly what happens to it.

What is stored

• Your account: email, a hashed password, and a session record per device.
• Your dossier: the profile, roles, abilities and rules you give the interview.
• Your pipeline: the postings you paste and the applications you track.
• Generated material: CVs and letters, as files tied to your account.
• Usage: how many model calls your account made, and what they cost.

Where it goes

Your dossier is sent to Anthropic's API as part of every request made on your behalf. That is how the product works, and there is no version of it that does not do this. Nothing is sent anywhere else: no analytics, no trackers, no third-party scripts on either the site or the app.

What is deliberately not stored

• Your password. Only an Argon2id hash of it, which cannot be reversed.
• Session tokens. Only their SHA-256, so reading the table yields nothing presentable.
• Anything about who else uses it. Your account cannot see another account exists.

Deleting it

Deleting your account removes every row it owns and every file generated for it. There is no soft delete and no archive copy.

Two limits worth knowing

There is no password reset. Recovery means asking for a fresh invite. That is a deliberate one-way door, not an oversight.

This is a small invite-only tool, not an enterprise service. It is run carefully, but it is run by one person.