Privacy Policy
Effective date: September 12, 2026 · Catalyst Forge, LLC
Exec Foundry ("we," "us," or "our") is operated by Catalyst Forge, LLC, a Wyoming limited liability company. This Privacy Policy explains what data we collect when you use Exec Foundry at app.execfoundry.com, how we use it, who we share it with, and what rights you have.
By creating an account or using the Service, you agree to this policy.
1. What We Collect
Account Data
When you sign up, we collect your name and email address. If you register with a third-party OAuth provider (such as Google or GitHub), we receive only the name and email your provider shares with us. Passwords, when used, are hashed and never stored in plaintext.
Career & Job Search Data
Exec Foundry is a job search management tool. The core of what we store is the data you enter to run your search:
- Uploaded career documents — resumes, cover-letter templates, and other files you upload where the Service allows uploads, in whichever formats we support from time to time.
- Job opportunities & applications — identifiers and details about each role (for example employer, title, URLs, postings, sourcing, timeline, deadlines, salary or compensation clues, attachments, statuses, reminders, structured fields, logs, tags, ratings, preferences, AI outputs tied to that role), and similar information as the product evolves.
- Tailored documents — AI-generated tailored resumes and cover letters, stored per job.
- Professional profile — your written background, soft skills, writing style preferences, and STAR story bank (career accomplishment stories for interview prep).
- Contacts & networking data — names, emails, phone numbers, LinkedIn URLs, and notes for people connected to your job search (hiring managers, connections, referrals).
- Interview records — interview rounds, dates, interviewers, prep notes, in-call notes, and debrief feedback.
- Company research — AI-generated company dossiers and any research context you paste in.
- Other job search data — any additional information stored in Exec Foundry that relates to your search (for example career directions, prospects, pipelines, preference signals, personalization data, integrations, artifacts from optional features, and anything similar we add later).
Usage & Technical Data
We collect data to operate and improve the service: IP address, browser type, pages visited, feature interactions, error logs, and AI feature usage counts (for plan enforcement). We use PostHog for product analytics in aggregate.
Billing Data
Subscription payments are handled by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers or full payment details — those remain with Stripe.
2. How We Use Your Data
- Provide the Service — store your job search data, generate tailored documents, and run AI features on your behalf.
- AI processing — your resume, job descriptions, and profile data are sent to Anthropic so we can run large language models for tailored resumes, cover letters, selling points, STAR story analysis, and other outputs. Company research uses Tavily as a web search layer for gathering public information. We do not use your data to train third-party AI models.
- Billing — manage your subscription, enforce plan limits, and process payments via Stripe.
- Analytics — understand how features are used in aggregate (PostHog), with identifying data minimized where we can configure it.
- Security & integrity — detect fraud, enforce rate limits, and maintain system security.
- Communications — send transactional emails (password reset, billing receipts). We do not send marketing emails without your consent.
3. Third-Party Services (Sub-processors)
We share data only with trusted service providers necessary to run Exec Foundry:
| Vendor | Role | Purpose | Data shared |
|---|---|---|---|
| Anthropic | AI language models | Document generation & analysis | Resume text, job descriptions, profile background |
| Tavily | Web search | Company research | Company names and search queries |
| Stripe | Payments | Subscription billing | Email address, billing details handled by Stripe |
| PostHog | Analytics | Product usage | Anonymous or pseudonymous usage events, IP address where collected |
| OAuth providers (e.g. Google, GitHub) | Sign-in | Third-party authentication (if you use it) | Name and email from your OAuth provider |
Our database runs on infrastructure we control. Your data is not sold to third parties and is not used for advertising.
4. Data Retention
- Active accounts — your data is retained for as long as your account is active.
- Ended trial, no paid plan — you may sign in for 30 days to export your workspace or resume a plan. After that window, unsubscribed accounts are deleted. We notify you before deletion.
- Account deletion — when you delete your account, we purge your personal data within 30 days. Our payment processor retains billing records per their own legal obligations.
- AI usage logs — anonymized token usage logs (no personal content) are retained for up to 1 year for cost tracking and abuse prevention.
- Backups — encrypted database backups may retain data for up to 90 days following deletion.
5. Security
We use industry-standard measures to protect your data: HTTPS/TLS in transit, encrypted backups, authentication tokens with short expiry, server hardening (fail2ban, restricted SSH), and access controls. AI-generated content is scoped to your account. It is not visible to other customers. People you invite as delegates can view the workspace access you grant them.
No system is perfectly secure. If you discover a security issue, please contact us at [email protected].
6. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — update inaccurate data (most profile data is editable directly in the app).
- Deletion — delete your account yourself under Billing & Data → Privacy while signed in (email/password confirmation required), or email us and we will delete it for you.
- Portability — export your job pipeline data, tailored documents, and account records via the Export panel in the app (CSV and ZIP formats supported).
- Opt-out of analytics — turn off PostHog product analytics in the app under Billing & Data → Export while signed in, or email us and we will apply it for you.
- Browser signals — we honor Global Privacy Control (GPC) signals as a valid opt-out request for analytics tracking in jurisdictions where applicable.
To exercise any right, email [email protected]. We will respond within 30 days.
7. Children
Exec Foundry is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently done so, contact us and we will delete it promptly.
8. International Users
Catalyst Forge, LLC is a Wyoming limited liability company. The Service is operated from the United States, and your data is processed and stored on infrastructure located in the United States. The Service is intended for users in the United States. If you access Exec Foundry from outside the US, you do so at your own initiative and are responsible for compliance with local laws.
For all users, our legal basis for processing is:
- Contract — processing necessary to provide the subscription service you signed up for.
- Legitimate interests — security, fraud prevention, product analytics, and product improvement.
9. Changes to This Policy
We may update this policy as the Service evolves. Material changes will be communicated via in-app notice or email at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.
10. Contact
Catalyst Forge, LLC
Wyoming, USA
[email protected]