Privacy Policy — IceSume

IceSume is operated by Icepick LTD (“we”, “our”, “us”). This Privacy Policy explains what personal data we collect, why we collect it, how it is stored and shared, and what rights you have over your data. By using IceSume you agree to the practices described here.

1. Data We Collect

Account data

When you sign up we collect your full name, email address, and a hashed password (we never store your password in plain text). If you sign up via Google OAuth we receive your name, email, and Google profile ID — no password is stored.

Resume and career content

Resumes, cover letters, resignation letters, job applications, salary evaluations, career plans, LinkedIn profile text, and interview sessions you create are stored in our database and are only accessible to you unless you explicitly make content public via a shareable link.

Job search activity

Saved jobs, job applications, tracker pipeline stages, and follow-up history are stored to power our career coach and application analytics features.

Usage and onboarding data

We store your onboarding goal, experience level, and target role to personalise the AI Career Coach and weekly digest emails. We store the date of your last login to send re-engagement emails and weekly digests.

Payment data

We do not store your payment card details. Payments are processed by Lemon Squeezy. We receive a webhook notification confirming your plan tier (Free / Pro / Lifetime) and the date your subscription expires.

Cookies and tokens

We set one httpOnly cookie (“refresh_token”) to keep you logged in across sessions. This cookie is essential for authentication and cannot be opted out of while you are logged in. We do not use advertising cookies or third-party tracking cookies.

Referral data

If you arrive via a referral link we store the referral code in a 30-day cookie to attribute your signup to the referring user and apply any applicable discount.

2. How We Use Your Data

Provide and improve the IceSume platform and its AI features
Send transactional emails (verification, password reset, billing confirmations)
Send onboarding and re-engagement emails (you can unsubscribe from non-transactional emails at any time)
Send weekly career digest emails and AI coach check-ins
Calculate your resume ATS score, skills gap, and career arc roadmap
Personalise the AI Career Coach context with your job search history
Process referral rewards and apply earned Pro time to your account
Detect and prevent fraud and abuse

We do not sell your personal data. We do not use your resume content or career data for advertising.

3. Data Storage

Your data is stored in a PostgreSQL database hosted on Supabase (Supabase Inc., AWS infrastructure, us-east-1 region). Backend application servers run on Railway (Railway Corp., US). Resume files uploaded for import are stored temporarily in Supabase Storage and deleted after parsing. We do not retain uploaded resume files beyond processing.

4. Third-Party Services

The following third-party services process your data on our behalf:

Anthropic (Claude API) — AI text generation (resume bullets, cover letters, interview prep, career coaching). Your resume content and job search context is sent to Anthropic's API to generate AI responses. Anthropic does not use your prompts to train its models by default. Anthropic Privacy Policy.

Zeptomail (Zoho) — Transactional email delivery. Your email address is shared to send account emails. Zoho Privacy Policy.

Lemon Squeezy — Payment processing. Your payment details are handled directly by Lemon Squeezy; we only receive subscription status. Lemon Squeezy Privacy Policy.

PostHog — Product analytics (page views and feature usage, no personally identifiable data in events). You can opt out of analytics via PostHog's opt-out.

Job search providers — When you search for jobs your search query (job title + location) is sent to third-party job APIs (Adzuna, Jooble, Remotive, Greenhouse, Lever, Ashby, Recruitee). No personally identifiable data is included in these requests.

5. Your Rights (GDPR / NDPR)

Regardless of where you are located, you have the following rights over your personal data:

Access — request a copy of all personal data we hold about you
Correction — update inaccurate or incomplete data (most data is editable directly in your account settings)
Deletion — request deletion of your account and all associated data
Data portability — request an export of your resume and cover letter content
Withdraw consent — unsubscribe from marketing emails at any time via the unsubscribe link in any email
Object to processing — object to AI processing of your content (note: AI features will not function without this processing)

To exercise any right, email us at hello@icesume.com. We will respond within 30 days.

If you are in the European Economic Area (EEA) or UK you may lodge a complaint with your local data protection authority. If you are in Nigeria, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data (resumes, cover letters, job applications, coach sessions, career plans) is permanently deleted within 30 days. Anonymised usage statistics (e.g., aggregate feature counts) may be retained indefinitely.

7. Children

IceSume is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has created an account, contact us and we will delete it immediately.

8. Changes to This Policy

We may update this Privacy Policy when we add new features or data practices change. For material changes we will email registered users and update the “Last updated” date at the top of this page. Continued use of IceSume after changes take effect constitutes acceptance of the updated policy.

9. Contact

Data controller: Icepick LTD, Lagos, Nigeria.
Questions or requests: hello@icesume.com