Privacy

Everything you enter is kept in your PostgreSQL database and data directory. PRIVACY.md has the details: what's kept and for how long, what deleting removes, everything that leaves your server and who receives it, and a note on the GDPR.

• AI: with a local model, your profile, postings and documents never leave your server. A hosted provider receives what each task needs: the posting, your profile without contact details (no email, phone, address, date of birth or links), what you tell it about the application, and, when you refine, the drafts and your chat messages, though never a letter's sender or signature. Importing a resume sends its whole text, contact details included; the import page says so first. The notes you keep on an application are never sent. How long the provider keeps what it receives, and where it processes it, depend on its terms and your account.
• Task data: what an AI task was given and wrote (a posting being read, a resume's text, drafts you didn't turn into an application) is deleted after 24 hours, or as long as Settings → Your data says. Deleting an application deletes its task data at once.
• Usage ping, only if you agree: after you first sign in, Dossier asks whether to send it, and sends nothing before a yes. If you agree, on each day you use Dossier your server sends telemetry.dossier.aien.me a random install ID and the version number, once, so the project knows how many installs are in use and how often. Nothing else is sent. Change your answer in Settings → About, or set DOSSIER_TELEMETRY=on or off (see Environment variables). PRIVACY.md says who receives it, what the receiver keeps, for how long, and how to have it deleted.
• Update check: once on each day you use Dossier, and when you press Check for updates, your server asks GitHub for the latest release, and sends nothing about you or your install. Switch the daily check off in Settings → About.
• Gmail and Calendar: off until you connect a Google account (see Connecting Gmail and Calendar). Dossier then keeps the mail about your applications (only their text, not attachments) and what the AI read in it, and a hosted AI provider receives each reply it reads or answers. Deleting an application deletes its mail; Disconnect revokes the access at Google.
• Claude connector: off until you turn it on in Settings → Claude connector (see Connecting Claude). Then what Claude reads through it, once you've signed in and allowed it, goes to Anthropic under your Claude account: your profile without contact details, links or references, postings, and your applications with their resume and cover letter, never your notes. A posting you hand to Claude from New application is kept for 14 days. Disconnect Claude signs it out.
• Startups: nothing is fetched until you press Refresh on the Startups screen. Then, and once a day while you open the screen at least every two weeks, your server asks Hacker News for YC startups' job posts and this month's “Who is hiring?” thread, sending nothing about you. It also reads a few public pages of the best matches' own sites, their robots.txt first, as Dossier/<version>, for the address each publishes for applications. People's own addresses are looked up only when you ask, and dropped after 14 days unless you write to that startup. No address is ever sent to the AI. Startups you didn't save, contact or write to go after 45 days without being found again. PRIVACY.md has the details, including how a site keeps Dossier out.
• When you ask for it: Find jobs, off until you choose a source, sends the source what you search for and nothing from your profile. The Bundesagentur für Arbeit is an unofficial source you choose on your own responsibility (see Choosing a job source). Fetch asks a job site for a posting's page, from your server.
• No other tracking or analytics: Dossier loads nothing from other sites (its Content-Security-Policy forbids it, and the ping comes from your server, not your browser), and Next.js telemetry is off in the image.