Firm Handshake
Testing phase. Firm Handshake is currently in testing. This policy describes how we handle your data. AI-generated content may be inaccurate — always verify before use.

Privacy Policy

Last updated: September 13, 2026

1. Overview

Firm Handshake ("we", "us", "the Service") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

Account information: email address, full name (provided at signup via Supabase Auth).

Profile data: degrees, licenses, therapeutic areas, years of experience, job preferences, skills — entered by you in the profile editor.

Resume data: uploaded resumes, extracted sections, and tailored entries generated by the Service.

Chat conversations: messages exchanged with the AI assistant, including tool calls and job search queries.

Usage data: points consumed, actions taken (uploads, drafts), and timestamps.

Job data: jobs you track, bookmark, or apply to via the Service.

3. How We Use Your Data

We use your data solely to provide and improve the Service:

  • Generate tailored resumes, cover letters, and job recommendations.
  • Track your application progress and preferences.
  • Enforce usage limits and quotas.
  • Debug and improve the Service's AI and search features.

4. AI Providers

To generate content, we send portions of your profile, resume, and chat messages to OpenRouter (and underlying model providers like OpenAI). This data is processed to produce AI responses and is not retained by these providers for training purposes under their current policies. We minimize what is sent — only the data relevant to the current request.

5. Data Storage

Your data is stored in a Supabase-hosted PostgreSQL database. We use industry-standard security practices including row-level security (RLS) to ensure your data is only accessible by you. Data is transmitted over HTTPS/TLS.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

  • With AI providers as described above, solely to generate responses for you.
  • When required by law.
  • With your explicit consent.

7. Data Retention

Your data is retained as long as your account exists. When you delete your account, your data is removed from our database within a reasonable timeframe. Some data may persist in backups for a limited period.

8. Your Rights

You have the right to:

  • Access and download your data.
  • Correct inaccurate data.
  • Request deletion of your account and data.
  • Opt out of non-essential data processing.

To exercise these rights, contact us at contact@researcherx.net.

9. Security

We implement reasonable security measures including encryption in transit, authentication, and row-level security. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via the Service or email. Continued use after changes constitutes acceptance.

12. Contact

Questions about this policy? Contact us at contact@researcherx.net.