Your information,
with a clear purpose.
ExiLnk provides work-passport, career and hiring tools. Contact support and privacy at George@georgemridun.dev or use Support & your information for access, correction, deletion and account-closure requests. The service covers traditional and non-traditional work; required licences and professional registrations are not verified by a skill match.
Infrastructure and retention
Supabase supplies account authentication and database storage; the current project database is in Mumbai, India. Vercel hosts the application and operational logs. FreeHire receives the stated search terms; Stripe processes configured payments. Optional model processing goes to the provider and endpoint you select. This can involve processing outside Australia. Provider retention and processing terms must be reviewed for your use case.
Keep only evidence you are authorised to share. Active account and application records remain available until you remove them or request closure, subject to financial and dispute retention. Once authenticated daily maintenance is configured, stored AI interpretation results are cleared after 30 days and optional product events after 90 days; accounting receipts remain. Wider deletion and backup handling require operator review. The release checklist records whether scheduled cleanup and the final operator retention policy have been activated.
Recruiting workspaces
Employers import resumes they have permission to process. Resume text, contact details, extracted skills, role briefs, reports and hiring outcomes are stored in a private workspace. Only the workspace owner is authorized through the application. The current release has one owner per workspace; it does not provide team invitations.
AI and search providers
Ask your passport combines your chosen passport biography and your own project entries with private working text. Generated project outlines are excluded from claims of completed work. With a separate choice, users can send messages, recent conversation, search preferences and skill names to a selected model: a saved cloud provider, managed AI, or a paired local model. Cloud model connections require sign-in. Passport bodies and raw project text are not included in that model request. Your messages can still contain personal information; review what you type. Evidence ordering uses the supplied sources, not the model's opinion.
The personal opportunity board is saved on your device only when you choose, separately for each account, or downloaded by you. It can contain private working text, notes and copies you record as submitted. It does not sync across devices or confirm receipt by an employer. Removing a passport project does not recall previously shared application snapshots or downloaded documents. Clear saved browser data through your browser controls when needed, particularly on shared devices.
Job-board searches send your keywords, country, city, work mode and experience filters to FreeHire's public API through our server. We do not send your resume, passport or coaching notes to that provider. External application links open the original posting; that site's privacy terms apply to information you submit there.
When enabled, screening text with contact and sensitive-information lines removed, and structured role requirements, are sent to the configured embedding provider. This conservative filter is not a guarantee of full anonymisation. Qdrant stores vectors, record types and workspace identifiers. Hiring scores and cited reports use rules and do not send candidate data to a report model. Portfolio evidence checklists use a deterministic template. Provider locations and retention depend on the deployment; the operator must disclose the actual providers and any overseas processing before collecting resumes. Rule-based scoring works without these providers.
Assessments and public passports
Career coaching drafts stay in page memory unless you explicitly request stored foundation results, in which case the supplied text is processed by ExiLnk without saving the coaching report. Leaving the page clears unsaved drafts. Connector conversations are also processed by the AI service you choose under that service’s settings and policies.
Applications and connected assistants
Structured employer comparison of a submitted application is a separate optional choice. It uses the reviewed application snapshot for that role and does not enrol you in a reusable pipeline. Revoking that choice or withdrawing removes stored application-derived structured reviews; downloaded copies cannot be recalled.
Employers explicitly publish roles before they appear in job discovery. Submitting an application shares your account email, the reviewed resume and letter, and a dated snapshot of your passport name, portfolio and foundation results with that employer. It does not share private coaching, work-rights records or enable model-training consent. Withdrawing removes application evidence from the employer view; a status receipt remains. Downloaded copies cannot be recalled. Connector permissions separately allow reading your passport or application receipts and can be revoked from Connections. Connector tools cannot submit applications or grade tests.
Foundations quiz results are stored with a date and evidence reference. Quizzes are unproctored. Passport sharing is off by default. If enabled, anyone with the passport URL can see the candidate’s name, university, biography, portfolio and assessment evidence. Passport pages request search engines not to index them; this does not prevent copying by recipients.
University pipeline consent
Joining an invited pipeline shares the candidate’s resume and profile with that workspace. Model-development export consent is a separate optional choice. Candidates can withdraw through their talent page. Withdrawal removes resume text, vectors and matching history from the pipeline, and excludes the profile from screening. Limited identifiers and contract or financial records may need retention. Previously downloaded files cannot be automatically recalled.
Outcome datasets
Export requires both active pipeline training consent and the linked candidate's current model-improvement choice. Unlinked employer imports are excluded. Exports contain skills, assessed skill names, scores, model version and outcome labels; they omit names, emails, raw resumes and free-text job descriptions. Skill combinations may remain identifying in small cohorts. Exports require review and suitable access controls before training or sharing. Public job descriptions and third-party resumes are not scraped by this app.
Structured intelligence and work rights
Role blueprints, resume profiles, source citations, interview feedback, outcome records, project drafts and workflow observations are stored in the private employer workspace. Work-rights text entered in the candidate data controls is kept in a separate private record. It is shown to joined employers only with the candidate's explicit work-rights and passport visibility choices; it does not affect skill scores or training exports. Clear the text to delete that private field. Candidate withdrawal also removes derived screening profiles, reports, skill rows and linked workflow observations. Previously downloaded reports cannot be recalled.
Payments and local storage
Optional product measurement is off by default. You can enable completion events and an optional discovery source in Support. It records passport saves, application submissions, completed reviews and interview-status changes for the opted-in account, without private text or provider keys. Turning it off deletes its optional stored events. Security, billing and support records remain separate. Public request limits use short-lived hashed buckets rather than storing raw IP addresses in the quota table; hosting logs may separately contain request metadata.
Cloud provider credentials are encrypted with a server-managed key and stored separately from public profile data. Only authenticated server operations for the owning account can use or delete them. The application processes the decrypted key to make an authorised request to the selected endpoint. Connection tests send synthetic text and may incur provider charges. Changing the model does not move existing account data or establish a provider retention guarantee.
AI activity records include account/request identifiers, task source, price, status, time, a request digest and the structured interpretation needed for retry handling. Full chat messages are not saved in that activity record; interpreted search preferences can still contain personal information. Payment receipts and balance adjustments are recorded for billing and dispute handling. These operational records are separate from optional product analytics; this release does not add growth-tracking pixels or automatic collection of the local opportunity board.
Local bridge pairing tokens stay in page memory and are sent only to the loopback bridge, not to ExiLnk's API. The bridge sends the chosen message context to the configured local inference server. A structured interpretation returns to ExiLnk for job discovery. Passport storage, explicit applications and external search still use their described cloud services. Closing the bridge stops new local calls; it does not delete cloud account data.
Stripe hosts checkout and payout onboarding. ExiLnk stores provider identifiers and payment status, not card or bank credentials. The synthetic demo uses browser local storage and does not send its candidate data to a server. Use synthetic information in the demo and reset it to clear its data. Authentication sessions and theme preferences also use browser storage.
Access, correction and deletion
Candidates can edit passports, disable public sharing and withdraw pipeline profiles. Workspace owners can delete imported candidates without financial records. For records subject to retention or a wider access/deletion request, use the tracked request form or email George@georgemridun.dev. Account closure needs a review of active sessions, unused prepaid balances, financial records and backup copies. Candidate account export is available from Support; its screen identifies included records and limits.