Privacy Policy

1. Who we are

Sydicom is a career agent that helps professionals find and prepare for jobs faster, matching them to roles, tailoring their CV, generating cover letters, and optimizing their resume. You review the documents we generate and submit your own applications to employers’ applicant- tracking systems (ATS).

The data controller is Sydicom. If you have any privacy-related question you can reach us at support@sydicom.app.

2. Information we collect

We collect the following categories of information directly from you:

• Account information. Your name, email address, profile photo (if you sign in with Google or LinkedIn), and authentication identifier.
• Profile information. Phone number, country, preferred industry, career level, work preferences, salary expectations, and the location/regions you want to apply in.
• CV and résumé data. The CV file you upload, the parsed text extracted from it, and any tailored versions we generate for specific job applications.
• Activity history. Records of the jobs you have matched, saved, or marked as applied, the cover letters and tailored CVs you have generated, and timestamps.
• Payment information. When you purchase credits we receive transaction metadata (amount, currency, reference, status) from our payment processor. We never see, store, or process your full card number or bank credentials, those are handled exclusively by the payment processor.
• Communications. Messages you send us (e.g. support emails) and your push-notification subscription tokens.

We also automatically collect:

• Device and connection information. IP address (used for country detection and security), browser type, operating system, and pages visited.
• Diagnostics data. When something errors, we collect technical details about the failure (such as the error message and where it happened) to fix it. This is configured to minimize personal data.
• Performance metrics. Anonymous, cookieless measurements of how fast pages load, so we can keep the Service quick.
• Product analytics. We use privacy-first analytics (PostHog) to record which pages and features you use, along with session replays in which all text and form inputs are masked, so we can understand and improve the Service. Recording is disabled on pages that show your CV or payment details, and you can opt out at any time in Settings.
• Cookies. Secure, functional cookies used for sign-in and to keep your session working, plus first-party analytics cookies so we can measure product usage. We do not set advertising or cross-site tracking cookies, and you can turn analytics off in Settings.

3. How we use your information

• To create and manage your account.
• To match you with relevant jobs by scoring your CV against job descriptions.
• To generate tailored versions of your CV, personalized cover letters, and resume improvement suggestions for you to review and use.
• To open the employer’s application page so you can submit applications you choose to apply to.
• To process credit purchases and refund credits when a generation fails for technical reasons.
• To send you push notifications about new job matches (you can disable these in your browser settings at any time).
• To detect and prevent fraud, abuse, and security incidents.
• To improve the Service through aggregate, de-identified analytics.

4. Automated (agent) processing

Sydicom uses large language models (primarily Google Gemini) to generate Answer Pack answers, tailored CVs, cover letters, and resume suggestions. When you trigger a generation, the relevant portion of your CV text and the target job description (and, for an Answer Pack, that job’s public application-form questions) are sent to the model provider for processing. The model provider processes this content only to return the generated output and, per its terms, does not use it to train its public models.

Reading application forms.When you request an Answer Pack, Sydicom reads the target job’s public application-form questions so the model can draft answers for you to review and paste. We read only the public questions on the form; we never submit an application or enter your data into a form on your behalf.

Our agent is explicitly prompted never to invent experience or qualifications that are not present in your CV. The output is provided to you as an editable draft, and you are responsible for reviewing it before you submit any application.

5. Third-party services we rely on

We use the following third-party processors to operate the Service. Each handles your data under its own privacy policy.

• Supabase: database, authentication, and file storage for your account, profile, CV, and generated documents.
• Netlify: hosting infrastructure for the Sydicom application.
• Google (OAuth + Gemini): sign-in with Google, and large-language-model processing for the generation features.
• LinkedIn (OAuth): sign-in with LinkedIn (we only receive basic profile information).
• Paystack: payment processing for Nigerian Naira credit purchases.
• Dodo Payments: payment processing for international (USD) credit purchases.
• Brevo: transactional and notification email (for example your welcome email and job-match digests).
• ipapi.co: IP-to-country lookup, used to route you to the correct billing currency.
• Sentry: error and crash diagnostics so we can find and fix problems. Configured to minimize personal data.
• PostHog: privacy-first product analytics and masked session replay, used to understand how the Service is used so we can improve it. We identify you to PostHog only by your account identifier (never your email or name), all text and form inputs are masked in recordings, and recording is disabled on pages showing your CV or payment details. You can opt out in Settings.

We also rely on other infrastructure and data providers that do not receive your personal data, including sources of public job listings, currency-conversion rates, and, where needed, automated reading of a job’s public application form. These receive only operational data such as a job URL, or no personal data at all.

6. Applying to jobs

When you click “Apply” on a job listing in Sydicom, we open the employer’s application page in a new tab so you can submit the application yourself. To help you prepare, Sydicom can generate (at your request):

• An Answer Pack: drafted answers to that job’s real application-form questions, for you to review and paste.
• A tailored version of your CV for that specific job.
• A personalized cover letter for that specific job.

You submit your own applications.Sydicom does not send anything to an employer on your behalf, the final submission is always performed by you on the employer’s own site. For the Answer Pack we read the job’s public application-form questions to draft answers, but we never auto-fill or submit a form for you. Sydicom is not affiliated with these employers and does not control how they process applications.

7. Data retention

• Account and profile data, retained until you delete your account.
• CV file and parsed CV text, retained while your account is active so we can generate tailored versions for new applications.
• Tailored CVs and cover letters, retained in storage with time-limited signed access URLs. The underlying files may be removed after that window.
• Activity history, retained so you can reference past matches, saves, and generations, unless you delete your account.
• Payment records, retained for the period required by Nigerian tax and accounting law (typically 6 years).

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information (most of this you can do directly in Settings).
• Delete your account and the associated data at any time (Settings -> Account -> Delete account).
• Object to or restrict certain processing.
• Export your data in a portable format.
• Withdraw your consent to automated processing (note: this will disable the matching, cover-letter, and CV-generation features).

To exercise any of these rights, email us at support@sydicom.app and we will respond within 30 days.

9. Security

All data in transit is encrypted with TLS, and data at rest is encrypted by our storage provider. Access to the database is restricted so that each user can only reach their own records. Generated documents are stored privately and are reachable only through time-limited links. Privileged access credentials are kept on our servers and are never exposed in client-side code. No system is perfectly secure, but we take reasonable and industry-standard measures to protect your information.

10. International data transfers

Sydicom is based in Nigeria, but our infrastructure providers operate data centers in the United States and the European Union, so your data may be processed in those regions. Where personal data of users in the European Economic Area or the United Kingdom is transferred outside those areas, our providers rely on appropriate safeguards for the transfer, such as the European Commission’s Standard Contractual Clauses, as set out in their own data-processing terms.

11. Children

Sydicom is intended for users aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with information, please contact us and we will delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time as the Service evolves. When we do, we will update the “Last updated” date at the top of this page, and for material changes we will notify active users by email or an in-app notice before the changes take effect.

13. Contact

For any questions about this Privacy Policy or how your data is handled at Sydicom, email support@sydicom.app.