Privacy Policy

This Privacy Policy applies to NOORI, the AI-powered resume and job application workspace available at noori.work. It explains how NOORI processes personal data when you visit the website, create an account, build or import a professional profile, generate resumes, run ATS analyses, track applications, or purchase credits.

For questions or requests concerning personal data, sign in and use the feedback panel in your workspace. This Policy is intended to provide the transparency required by applicable data protection laws, including the Brazilian General Data Protection Law (LGPD) where it applies.

We collect information you provide, information created through your use of the service, and limited technical information needed to operate and protect NOORI.

• Account and authentication data: email address, Firebase account identifier, and authentication provider information.
• Professional profile data: name, contact details, location, professional summary, work history, education, skills, languages, links, and other information you choose to include.
• Imported document data: the PDF or DOCX you submit for extraction, its filename, extracted content, import review choices, and answers you provide during review. The original file is processed for import but is not stored as an account document in the NOORI database after that request; extracted data and import records are stored.
• Resume and application data: job descriptions, generated resumes and versions, ATS analyses, application status, notes, selected language, and presentation preferences.
• Credit and transaction data: credit balance and history, package purchased, amount, currency, payment status, and Stripe transaction identifiers. NOORI does not receive or store full payment card details.
• AI and operational data: selected provider and model, token usage, request identifiers, generation cost, timestamps, and technical records associated with an operation.
• Security and device data: essential session cookie, request and security events, rate-limit signals, and local browser preferences such as selected view, resume accent color, and temporary sign-in information.
• Usage and analytics data, when you consent: pages visited, interactions with features, events such as sign-in, profile import, resume generation, ATS analysis, downloads, checkout initiation, and technical information such as browser, device, approximate location derived by Google, and online identifiers collected through Google Analytics 4. NOORI does not intentionally send resume content, job descriptions, email addresses, account identifiers, or free-text fields in analytics events.

We process personal data only for purposes connected to operating, securing, supporting, and improving NOORI.

• Create and authenticate your account, maintain your session, and provide customer support.
• Store and manage your professional profile, resumes, application pipeline, notes, and history.
• Extract information from uploaded documents and provide AI-assisted resume generation, regeneration, comparison, and ATS analysis.
• Manage credits, process purchases, reconcile payments, prevent duplicate charges, and maintain accounting records.
• Protect the service, enforce usage limits, investigate failures or misuse, and maintain administrative audit records.
• Measure feature usage, understand service performance, improve the user experience, and evaluate the effectiveness of public entry points and product workflows.
• Comply with legal obligations and establish, exercise, or defend legal rights.

Depending on the context and applicable law, processing may rely on performance of a contract or pre-contractual steps requested by you, compliance with legal or regulatory obligations, legitimate interests in operating and securing the service, exercise of rights in proceedings, and consent where consent is specifically requested.

Google Analytics 4 is activated only after you consent to analytics cookies. Refusing or withdrawing consent does not prevent access to essential NOORI features. You can change your choice at any time through Cookie settings in the site footer or application menu, without affecting processing that occurred before withdrawal.

You are not required to add information beyond what is needed to use the feature you choose. Avoid including sensitive personal data or third-party personal data unless it is necessary, lawful, and you are authorized to do so.

NOORI sends the information needed for each AI feature to the provider configured for that operation. Depending on the feature, this may include an uploaded document, profile content, a job description, a generated resume, or instructions needed to produce structured results.

The service supports Anthropic, OpenAI, and Google AI models. The provider used may change by operation or over time. Providers process requests under their own terms and privacy commitments and may process data in other countries. AI outputs can be incomplete or inaccurate and should be reviewed before use.

NOORI uses AI to assist with content and compatibility analysis. It does not make hiring decisions or communicate with employers on your behalf.

We do not sell personal data. We share data only as needed to provide the service, meet legal obligations, or protect NOORI and its users.

• Firebase and Google services for authentication and account security.
• Google Analytics 4, provided by Google, to measure visits, feature usage, and interactions with the service after you consent.
• Resend, or Firebase email delivery when used as a fallback, to send requested sign-in links.
• Anthropic, OpenAI, or Google for the AI operation selected by the service.
• Stripe for checkout, payment confirmation, fraud controls, and transaction management.
• Hosting, database, infrastructure, and monitoring providers that process data on our behalf.
• Authorities, courts, or other parties when disclosure is required by law or necessary to protect rights and security.
• A successor involved in a merger, reorganization, financing, or transfer of the service, subject to applicable safeguards.

Some service providers, including Google Analytics, may process data outside your country. Where required, NOORI uses appropriate legal and contractual mechanisms and takes reasonable steps to ensure a level of protection compatible with applicable law.

NOORI uses an essential, secure, HTTP-only session cookie to keep you signed in. The session is configured for up to 14 days and is removed when you log out. Because this cookie is necessary for authenticated features, those features cannot operate without it.

The browser also stores limited preferences and temporary sign-in data locally, such as the selected application view, resume accent color, sign-in email, request timing used to prevent repeated sign-in requests, and your analytics consent choice.

NOORI loads Google Analytics 4 only after you select Allow analytics. Google Analytics may then set cookies such as _ga and _ga_<container-id> to distinguish visits, measure page views and interactions, and produce usage reports. Google Signals and advertising personalization are disabled in NOORI's tag configuration. Analytics is not used to display advertising on NOORI.

Selecting Only necessary prevents the Google Analytics tag from loading. You can later accept or withdraw consent through Cookie settings in the footer or application menu. When consent is withdrawn, NOORI stops sending analytics events and attempts to remove Google Analytics cookies accessible from noori.work. You can also clear stored data through your browser.

Google processes analytics data under its own privacy terms, available at policies.google.com/privacy. Browser extensions and privacy controls may also block Google Analytics independently of your choice on NOORI.

Account, profile, generation, application, AI operation, and transaction records are retained while needed to provide the service, preserve user history, maintain security and auditability, comply with legal obligations, resolve disputes, and enforce agreements. Different categories may be retained for different periods, including in controlled backups.

Analytics data is retained according to the configuration of the Google Analytics property and Google's applicable retention rules, for as long as reasonably needed for measurement and service improvement. Your consent choice remains in local browser storage until you change it or clear site data.

You may request account or personal data deletion through the feedback panel in your signed-in workspace. We will evaluate and fulfill the request as required by applicable law. Some records may be retained when necessary for legal obligations, payment reconciliation, fraud prevention, security, or the exercise of legal rights.

NOORI uses technical and organizational safeguards including HTTPS in production, authenticated access controls, secure session cookies, request-origin checks, rate limiting, input size and type validation, payment webhook verification, and restricted administrative routes.

No system is completely secure. Protect access to your email and Google account, review links before signing in, and contact us promptly if you suspect unauthorized access.

Subject to applicable law, you may request confirmation of processing, access, correction, information about sharing, portability where available, anonymization, blocking or deletion of unnecessary or unlawfully processed data, deletion of data processed with consent, review of relevant automated processing, and withdrawal of consent without affecting prior lawful processing.

Send requests through the feedback panel in your signed-in workspace. We may ask for information necessary to verify identity and protect the account. You may also lodge a complaint with the competent data protection authority, including Brazil's ANPD where applicable.

NOORI is designed for people managing professional profiles and job applications and is not directed to children. If you believe a child has provided personal data without appropriate authorization, contact us so we can evaluate and take appropriate action.

We may update this Policy to reflect changes in the service, providers, or law. The current version and its update date will remain available on this page. Material changes may also be communicated through the service when appropriate.

For privacy questions, rights requests, or complaints, sign in and use the feedback panel in your workspace.