Privacy Policy
1. Who we are
LandIt is operated by Ørnung Önal, org. no. 938418551, Norway ("LandIt", "we", "us"). This policy explains what personal data we collect through landitai.com (the "Service"), why, and what rights you have over it.
Questions about this policy or your data can be sent to ornungen@gmail.com.
2. What we collect
Account information
- Email address and password (your password is never stored in readable form — Supabase Auth, our authentication provider, stores only a salted hash).
- The date your free trial started, and your subscription status, so we know whether to grant access to paid features.
Resume and interview content
- Whatever you type into the resume builder — name, target role, contact details, an optional photo, work history, education, and skills — if you're logged in, this is saved to your account so it's there next time you visit.
- Job descriptions you paste into the Keyword Targeting tool, and your answers during an AI mock interview session.
Payment information
We never see or store your card number. Checkout and billing are handled entirely by Stripe; we only receive your subscription status (active, past due, canceled) and a Stripe customer reference back from them.
Technical information
Standard web request data (IP address, browser user-agent) is processed transiently by our hosting provider and, for job searches in certain countries, passed to that search provider as required by their API — see section 3.
3. Who we share it with
We don't sell your data. We use the following processors, each only for the specific purpose below:
| Service | Purpose | What they receive |
|---|---|---|
| Supabase | Account login and storing your resume data | Email, password hash, resume content |
| Stripe | Payment processing | Email, payment details (we never see these) |
| Anthropic (Claude) | AI mock interview and AI resume-writing suggestions | The interview conversation, and the resume text you ask it to improve |
| Adzuna / Careerjet | Job search results | Your search keywords and location; Careerjet also receives your IP address and browser user-agent, which it requires for every request |
| Resend | Account-related email (confirmation, and an optional one-time "why didn't you stay" note if your trial ends or you cancel) | Your email address |
| Vercel | Hosting the website and its backend functions | Standard web request data |
We may also disclose data if legally required to (e.g. a valid court order), or in connection with a merger or sale of the business, in which case we'd tell you first.
4. Why we're allowed to process this (legal basis)
- Contract: account data, resume data, and payment data — we need this to actually provide the Service you signed up for.
- Legitimate interest: the churn-feedback emails, and basic technical logs used to keep the Service running securely.
- Consent: anything beyond the above, if we ever ask for it separately.
5. How long we keep it
We keep your account and resume data for as long as your account exists. Deleting your account (Account panel → Delete account) removes your profile and resume data immediately and permanently, and cancels any active subscription — this is a real, self-serve action, not a request you have to email in for.
If you never create an account, nothing you type into the resume builder is stored anywhere — it only exists in your browser tab.
6. Your rights
If you're in the EEA/UK (which includes Norway), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (or just do it yourself from the Account panel)
- Export your data in a portable format
- Object to or restrict certain processing
- Lodge a complaint with your local data protection authority — in Norway, that's Datatilsynet
To exercise any of these, email ornungen@gmail.com.
7. Cookies and local storage
LandIt doesn't use advertising or analytics cookies. Our authentication provider (Supabase) stores your login session in your browser's local storage so you stay logged in between visits — this is functionally necessary for the Service to work and isn't used for tracking.
8. International data transfers
Some of our processors (listed in section 3) may store or process data outside the EEA, including in the United States. Where that happens, we rely on their standard contractual clauses or equivalent safeguards as required under GDPR.
9. Children
LandIt isn't intended for anyone under 16. We don't knowingly collect data from children under that age.
10. Security
Your resume and account data is protected by database-level access rules (Row Level Security) so that only you can ever read or write your own data — this is enforced by the database itself, not just application code. All traffic to and from LandIt is encrypted (HTTPS).
11. Changes to this policy
If we make a material change to how we handle your data, we'll update the date at the top of this page and, for significant changes, notify you by email.