IncognitoCV

Privacy Notice

What stays in your browser, what the AI rewrite sends onward, and what we keep — which is nothing.

Last updated: 14 September 2026

The short version

There is no account, so we do not know who you are. We store nothing — no résumé, no job description, no output, no profile. There is no advertising, and page views are counted only anonymously, as described below.

The match score never leaves your browser. The AI rewrite, the cover letter and the Ask assistant do: they are sent to one processor to generate the result, and not kept afterwards. The section below says exactly which is which.

Who the data fiduciary is

For the purposes of India's Digital Personal Data Protection Act 2023 the data fiduciary — and the data controller under UK and EU GDPR — is Mrinal Singh Raja, an individual publishing under the name "MSRX".

What leaves your browser, and what does not

Two different things happen in this app and they have completely different privacy properties. Mixing them up is the mistake this section exists to prevent.

The match score is computed entirely inside your browser. Your résumé and the job posting are read by JavaScript on your own device, compared there, and the result is shown there. Nothing is transmitted. You can disconnect from the network and it still works.

The AI features are not local. When you ask for an optimised résumé or a cover letter, the résumé text and the job description you pasted are sent to our server function, which forwards them to Groq, our model provider, to generate the result. The same happens when you send a message in the Ask assistant: your question, the last few messages of the conversation, your résumé, the job description and a short summary of your match score are sent so the answer can refer to them. The conversation is kept only in your tab and is discarded when you close it or press Clear everything. A résumé usually contains your name, contact details and employment history, so this is real personal data leaving your device to a third party.

If you do not want that, use the match score and the keyword gaps — which are local — and do the rewriting yourself. The app is useful without ever calling the model.

What we log

When a rewrite or an assistant answer fails, the server records the failure class and how long it took — for example that an upstream call timed out. It does not record your résumé, the job description, or the generated text. This is deliberate and checked: a single stray log line of the résumé would make the whole claim of this site false.

Our host, Vercel, separately records ordinary request logs: time, path, status code and IP address. Those exist to keep the service running and to stop abuse.

Anonymous visit counts

We count visits with Vercel Web Analytics, which is part of the service that hosts this site. It sets no cookies and stores nothing on your device. For each page view it records the page address, the site that linked you here, an approximate location (country, region and city) worked out from the request, and your browser, operating system and type of device. Anything after a ? or # in the address is removed before the count is sent, because that part can hold something you typed.

It does not store your IP address. Visitors are told apart only by a hash of the request that Vercel discards after 24 hours, so a page view cannot be tied to you, to your other visits, or to what you do on other websites. What we see is totals: how many people opened which page.

On this plan Vercel shows the figures for a month and may keep them longer, and we copy the daily total for each app into a private dashboard. Neither describes any individual. We count visits because knowing whether an app is used is in our legitimate interest, and the count is built so that it cannot identify you. A content blocker, or turning JavaScript off, stops the count and changes nothing else about the site.

Who receives what

  • Groq — receives the résumé text and job description when, and only when, you ask for an AI rewrite or cover letter or send a message in the Ask assistant. It processes them to generate the response.
  • Vercel — hosts the site and the server function, sees the ordinary request metadata above, and counts page views anonymously as described above.
  • No other third party. The four JavaScript libraries that read a .docx or .pdf you open and build the files you download are served from this site, not from a content delivery network, so no one else learns that you visited.
  • No advertising network and no data broker.

Retention

We keep nothing about you. There is no database. While the tab is open, what you have typed is held in that tab's own session storage on your device, so an accidental reload does not lose your work. Closing the tab discards it, and re-opening the site gives you an empty page rather than your last session. Press Clear everything to discard it sooner. The only figures kept are the anonymous daily visit totals described above.

Anything you asked the browser to download is on your own device and is yours to manage.

Children

This is a tool for job applicants and is not directed at children. Do not use it if you are under 13.

Your rights, and complaints

You may ask what personal data of ours we hold about you, have it corrected, or have it erased. In practice we hold none, so the honest answer is that there is nothing to give you — and we will say that plainly rather than pretend a process exists.

Requests and complaints go to Mrinal Singh Raja at mrinalsinghraja@gmail.com. That address is also the grievance contact for the purposes of India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. We aim to acknowledge within 24 hours and resolve within 15 days.

If you are in India you may also complain to the Data Protection Board; in the EU or UK, to your national data protection authority.

Changes

Material changes move the date at the top of this page.