Privacy policy

Who we are

Factwright is made by Neatifai LLC, a company in Illinois, in the United States. In this policy, “we” and “us” mean Neatifai LLC. This policy covers the Factwright app for Mac and Windows, this website, the app’s downloads and updates, and the optional sync service and web view at app.factwright.com.

For anything about your privacy, email privacy@factwright.com.

On your computer

The app keeps your job hunt in a folder on your computer: your fact bank, resumes, documents and notes, plus a small database that tracks your jobs. Files you add, such as old resumes or your LinkedIn profile saved as a PDF, are copied into that folder. None of it is sent to us unless you turn on sync, below. Until then, the app’s only contact with us is checking for updates.

The app has no analytics, ads or tracking, and sends no crash reports or usage data. On Windows, its spell checker downloads a dictionary from Google once; nothing you type is sent.

Uninstalling Factwright leaves its data folder where it is: your job hunt, its tracker and sync’s settings. To remove them, delete the Factwright folder in ~/Library/Application Support on a Mac, or in %APPDATA% on Windows.

Your Claude

Factwright starts the Claude Code you installed, signed in to your own Anthropic account. When Claude works, it sends what it reads, such as your files, job postings and your answers, to Anthropic under your account. Claude Code also sends Anthropic its own usage and error reports, as Anthropic’s policies and your settings allow, and keeps a record of each run on your computer. Anthropic’s terms, its privacy policy and your own Claude settings, such as whether your conversations can be used to improve its models, apply to all of that.

We never see, store or pass on your Claude login, and we’re not part of that connection. Factwright isn’t made by Anthropic or affiliated with it.

Web pages and job boards

When you or your Claude look for jobs, the app reads job boards on Greenhouse, Lever, Ashby and Gem, Hacker News’s “Who is hiring?” threads through Algolia’s Hacker News search, and other web pages, straight from your computer. Those sites see your computer’s IP address, as with any visit, and that Factwright is asking. Claude’s web searches go to Anthropic, under your account.

Factwright never signs in to LinkedIn, or to any job site, for you.

Updates

While the app is open, it checks downloads.factwright.com for a new version every 10 minutes, and when you come back to it or wake your computer. Each check shows our hosting provider, Cloudflare, your IP address and that a copy of Factwright is checking. It carries no ID for you or your computer.

Our websites

factwright.com sets no cookies, has no analytics or ads, and loads nothing from other sites. Cloudflare runs it, our downloads and the sync service. It handles each request, including your IP address and browser, to deliver it and keep it secure, and gives us traffic statistics for up to 30 days. Cloudflare may also set a cookie it needs to tell people from bots.

Sync and the web view

Sync is off until you turn it on. It lets your other computers and your phone show the same job hunt, in the app or in the web view at app.factwright.com. To use it, you sign in with GitHub, or with Google where it’s offered.

What we can read

• From the account you sign in with: your name, email address and that account’s ID. GitHub or Google also sends a token that could read that profile again. We don’t keep it.
• For each device you sign in on: its name, such as “Safari on iPhone”, or for the app, your computer’s name, and when it signed in and was last used.
• For what you sync: each item’s size and times, whether it’s deleted, and which of your devices changed it, under IDs that say nothing about what’s in it.
• Your IP address with each recent request to sign in or check your sign-in, counted to slow down attacks.

What we can’t read

Your job hunt itself: your files and their names, your facts, resumes and notes, and everything you track. Your computer encrypts it before it’s uploaded, with a key we never see, so our servers store it only in a form they can’t read. We hold that key only locked: with your recovery key, which we never receive, and with a link code when you add a device. A link code works for 10 minutes, and its locked copy is deleted once it’s used or cancelled, or within a day.

The web view works differently. It opens your job hunt in your browser with code our server sends each time you open it. Anyone who controlled that server could change that code to read everything you’ve synced, in any browser you’ve linked, and your recovery key if you type it there. The desktop app’s code changes only through updates we sign.

How long we keep it

• Your account and your encrypted job hunt: until you delete your account.
• Earlier versions of what you change: 90 days.
• Daily backups: 14 days.
• Each device’s sign-in: until you sign it out, or within a day of it running out, after 60 days without use.
• Counts of requests from your IP address: about a day.
• What our servers note for themselves, such as a request that failed with its address, or the account ID when we delete an account someone asked us to, but nothing from your job hunt: up to 7 days, at Cloudflare.

Deleting your account removes your account, your job hunt, your backups and your sign-ins straight away. It needs a sign-in with GitHub or Google in the last 15 minutes. Anything we delete can stay in Cloudflare’s own recovery systems for up to 30 days more.

The web view

The web view uses cookies only to sign you in and keep you signed in, and keeps your keys in your browser’s storage so it can open your job hunt there. It has no analytics or tracking. Signing out forgets the keys in that browser, and so does finding it’s been signed out another way. Your browser may also keep locked copies of files in its cache, and files you download or open there are saved by your browser as they are, unlocked.

Emails

If you email us, we use what you send to answer you. We keep it as long as we need to answer you, then up to 2 years for our records.

Supporting Factwright

If you support Factwright through Buy Me a Coffee or GitHub Sponsors, it goes to Steve Hillyer personally, who builds Factwright for us, and we don’t receive it. The service takes your payment and keeps its own records, under its own privacy policy, and may show your name and message on its pages unless you choose not to. Steve sees what it shares, such as your name or username, your email address, the amount and any message, and uses it only to thank you and for tax records. None of it is linked to your Factwright account. You can ask about it at privacy@factwright.com.

Who we share it with

We don’t sell your personal information, or share it for advertising. Two companies handle it for us, and only for us:

• Cloudflare runs this website, the downloads and updates, and the sync service, and stores what sync keeps. It also passes on emails you send us.
• Google Workspace, our email provider, holds those emails.

GitHub, and Google if you use it, let you sign in to sync. They see that you signed in to Factwright, under their own privacy policies. Anthropic isn’t one of our providers either: your Claude account is your own.

We may disclose information if the law requires it, such as a valid court order, or to protect someone’s safety or our rights. Even then, we can hand over only what we have, and we can’t unlock your encrypted job hunt. If Neatifai or Factwright is ever sold or merged, your information would go with it, still under this policy.

Where it’s kept

We’re in the United States. Cloudflare runs our services on its network around the world, so your information may be stored or handled in the United States and other countries. Wherever it is, this policy applies.

Why we use it

We use your account and device details to run the sync you asked for, which is our agreement with you, and to keep the service working and secure, which is in your interest and ours. If you email us, we use what you send to answer you. We don’t use your information for anything else, such as profiling or advertising.

Your rights

Wherever you live, you can:

• see what we keep about you, and get a copy
• correct it
• delete it, along with your account
• object to how we use it, or ask us to limit it
• ask us anything about it

Much of this is in the web view, where your account page lists your devices, downloads everything you’ve synced, and deletes your account. For anything else, including deleting an account you can’t sign in to, email privacy@factwright.com from your account’s email address. Someone you’ve authorized can also ask for you. We’ll answer within 30 days, and we’ll never treat you differently for asking. If we turn down a request, you can ask us to look at it again, and you can complain to the data protection authority where you live.

Security

Sync is encrypted on your computer, every connection uses HTTPS, each account’s data is kept apart from everyone else’s, and the app and its updates are signed. No system is perfectly secure, so if something ever happens that affects your information, we’ll tell you as soon as we can.

If you lose every device and your recovery key, your synced job hunt can’t be recovered, by you or by us. Your job hunt on your computer isn’t affected.

Age

Factwright is for people 18 and older. We don’t knowingly collect information from anyone younger. If you think someone under 18 has an account, tell us and we’ll delete it.

Do Not Track

We don’t track you across other sites, and we never sell your information or share it for advertising, so everyone is treated the same, whether or not their browser sends a Do Not Track or Global Privacy Control signal.

Changes to this policy

If we change this policy, we’ll post the new version here with a new date. If a change matters, we’ll tell you in the app or by email before it takes effect.

Contact us

Email privacy@factwright.com. Factwright is made by Neatifai LLC, Illinois, USA.