Your resume and job search are personal. Here is exactly how we protect them, with no vague promises.
Our commitments
- We never sell your data. Not to recruiters, not to advertisers, not to anyone.
- Your resume is never used to train AI models.
- Truthful tailoring. Baela presents your real experience; it is built not to invent skills, titles, dates or degrees.
- Proof of every application, so you always know what was sent in your name.
- Download or delete everything, anytime. See Data deletion.
- California privacy rights for everyone. We honor CCPA rights for all U.S. users.
How we secure your data
- Encrypted in transit (HTTPS/TLS) and at rest.
- Strict per-user access rules in our database: each account can only ever read its own data.
- Built on infrastructure from providers that hold SOC 2 Type II reports (including Supabase, Cloudflare and Anthropic), with payments processed by Stripe (PCI DSS Level 1). Baela itself has not yet completed a SOC 2 audit.
- We never see or store your full card number.
- We don't collect Social Security numbers, ID numbers or dates of birth.
- Multi-factor authentication on all of our administrative accounts, automatic security updates, nightly encrypted backups.
- No third-party ad trackers inside the app.
Service providers
Supabase (database, sign-in), Cloudflare (hosting, file storage), Google Cloud and Oracle Cloud (servers), Anthropic (AI), Stripe (payments), Brevo, Resend, Mailjet and SMTP2GO (email).
Report a security issue
Email security@baela.ai. We respond quickly and appreciate responsible disclosure.