Privacy at OutRung

Overview

OutRung helps people run a more structured job search. To do that, we process the information you add to your account, the CV and profile material you choose to work with, the job search activity you run through the product, and limited analytics and security data needed to keep the service working.

We do not sell personal information and we do not use your data for third-party targeted advertising.

Information we collect

Depending on how you use OutRung, we may collect:

• Account and sign-in information, such as your Clerk user ID and email address.
• Profile data, such as your name, location, phone number, CV content, writing guidance, scoring criteria, and onboarding answers.
• Files you upload or generate, including source CV files, CV drafts, generated PDFs, YAML and markdown outputs, and related metadata.
• Job search and tracker data, such as search queries, saved jobs, job descriptions, scores, notes, application stages, and CV versions linked to opportunities.
• Settings data, including model endpoints, model names, and any provider connection details you save for bring-your-own-key workflows.
• Contact and support information, such as emails you send us or early access / product update preferences you submit.
• Technical, security, and analytics data, such as IP-derived region information, cookie preferences, anti-abuse checks, and product usage events.

How we use information

We use personal information to:

• Create and maintain your account and keep signed-in sessions secure.
• Generate, edit, render, store, and send CVs and related application materials.
• Run job discovery, scoring, and tracker workflows you initiate.
• Store your settings, including optional model-provider preferences.
• Send service messages, support replies, and occasional product or offer emails.
• Protect the service against spam, abuse, fraud, and misuse.
• Understand product usage and improve reliability, flows, and feature quality.
• Comply with legal obligations and enforce our terms when needed.

AI and model providers

OutRung uses AI features to help generate CV drafts, edit content, and score roles. To provide those features, relevant profile, CV, instruction, and job-description data may be sent to the model provider being used for that request.

Depending on your setup, that provider may be one chosen by OutRung or one you configure yourself through a bring-your-own-key or custom endpoint workflow. That can include OpenAI-compatible endpoints and providers such as OpenAI, Azure OpenAI, Anthropic, Amazon Bedrock, OpenRouter, or another endpoint you choose to connect.

AI outputs are assistive only. You should review CVs, score explanations, and other generated outputs before relying on them or sending them to an employer.

How we share information

We share personal information only where needed to run OutRung or where you ask us to. That can include service providers such as:

• Clerk for authentication and account session management.
• Cloudflare for hosting, edge delivery, and Turnstile anti-bot protection.
• PostHog for product analytics.
• Brevo for transactional and product-update email workflows.
• SerpAPI and related search sources for job discovery requests you run.
• Cloudflare R2 and related infrastructure for stored onboarding uploads.
• Model providers used for AI features and scoring.

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer such as a financing, merger, or asset sale.

Marketing and email

We may send occasional emails about new features, product updates, offers, or early access where you have signed up or where it is otherwise lawful to do so. We do not use your personal information for third-party ad targeting, and we do not sell mailing lists.

Cookies and analytics

OutRung uses necessary cookies and similar browser storage for authentication, security, and saved preferences. We also use optional PostHog analytics cookies in regions where they are allowed or after consent where consent is required. More detail is available on our cookies page.

Legal bases

Where UK GDPR or EU GDPR applies, we generally rely on:

• Contract, when we need to provide the service you asked for.
• Legitimate interests, such as improving OutRung, securing the service, and handling support.
• Consent, where you choose to receive optional analytics cookies or certain marketing communications.
• Legal obligation, where we need to comply with law or respond to valid legal requests.

International transfers

Some of the providers we use may process information outside the UK or EEA, including in the United States or other countries where their infrastructure operates. This can also happen if you configure your own model endpoint or provider. We aim to work with providers that offer appropriate contractual and security measures for these transfers.

Retention

We keep personal information for as long as it is reasonably needed for the purposes described in this notice, including to maintain your account, preserve your job search history and generated materials, provide support, resolve disputes, and meet legal or security requirements. Analytics and cookie preferences are retained according to the settings described on our cookies page.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you, and to object to or restrict certain processing. You may also be able to withdraw consent where we rely on it.

Contact and requests

For account, deletion, correction, or privacy questions, email privacy@outrung.com with the address connected to your account.