Privacy policy

Who runs Marphee

Marphee is operated by Alexandru Dudu. For privacy questions or requests, contact dudualexandrug@gmail.com.

Sign in with ChatGPT

When you choose Sign in with ChatGPT, OpenAI Sites sends Marphee your Site-specific account identifier, email address and, when available, your name. Marphee uses this identity to protect your private workspace and check account permissions. We do not receive your ChatGPT password or access to your ChatGPT conversations.

Signing in does not authorize Marphee to use your ChatGPT plan for AI requests or give it access to Gmail, Google Drive, contacts or calendars. Marphee uses its own API connection for optional AI features as described below. Legacy Google sign-in through Supabase is unavailable; saved Marphee workspaces are not automatically merged by email.

Information you save

We store the information you choose to add: your CVs, profile and job preferences, saved job listings, application records, interview notes and practice answers. This lets you return to your work, upload and download your own CV files, and track your job search. Your workspace is not published on the public website.

The AI beta uses OpenAI for career conversations, profile and job assessment, interview practice and optional outreach drafts. Choosing an AI action sends the relevant CV text, profile preferences, conversation or practice answers and job listing to OpenAI. Search queries use job preferences and country, without candidate names or contact details. Requests use store: false; this does not promise zero provider retention. OpenAI may retain API data under its applicable service and abuse-monitoring policies. AI outputs saved for your workspace remain private account data.

AI usage logs record the task, model, token counts, timing, outcome and estimated cost, without CV text, prompts or generated answers. These logs are used to evaluate beta reliability and pricing. Account deletion removes the account link from these operational usage records. If you choose assisted application preparation, Marphee may use Browser Use with an OpenAI model to fill an employer form with your approved CV and profile facts. The browser extension does not submit an application; review each form before sending it yourself. Credit purchases use Stripe when live checkout is available. Saving a CV or job does not send an application to an employer.

Service providers and storage

OpenAI Sites handles current ChatGPT sign-in. Supabase previously processed Google sign-in; historical authentication records may remain there if the provider becomes available. Website and workspace data use OpenAI Sites hosting and Cloudflare database and file storage. These providers process information to deliver and secure the service; their infrastructure and support may operate in other countries. Marphee does not claim that all data stays in one country.

These infrastructure providers also handle technical information under their own policies. See Google, Supabase, OpenAI and Cloudflare. Access to stored data is limited through account authentication and operational permissions; administrators and service providers may need access for support, maintenance or security.

Cookies, preferences and referrals

Secure session cookies keep you signed in. Browser storage remembers your language and, when you arrive through an influencer link, the referral code and a random visitor identifier. We store a hashed visitor identifier to count referrals and associate a referral code with an account. We use a hashed IP address for referral rate limits. Operational logs can include request and security information.

The app has no advertising trackers. Sign out to end your session. You can clear site storage in your browser to remove locally saved preferences and referral identifiers.

Unique visitor counting

We count distinct browsers so refreshing a page or visiting several pages does not create extra visitors. A random first-party identifier is saved in this browser. Our database stores only a hash of that identifier and its first and most recent recorded visit times. This counter does not store your IP address, browser fingerprint, page history, CV or account identity. It is separate from referral attribution and is not sent to an advertising or analytics provider.

Counts start when this feature is enabled; they cannot reconstruct earlier visits. Separate browsers, devices, website domains or cleared storage can appear as separate visitors. Known automated traffic and Nuclear dashboard activity are excluded. We respect Do Not Track and Global Privacy Control; blocked storage prevents counting. Website infrastructure may separately keep technical logs as described above.

You can stop future counting for this browser below. This preference does not change sign-in or referral attribution. Existing pseudonymous counter records remain in aggregate reporting; deleting your account does not remove them because the counter is not linked to accounts. Clearing site storage also clears your counting preference.

Visitor counting requires JavaScript and available browser storage.

Email drafts

You can generate, edit, save and copy an email draft, or open it in your own email app. Marphee does not connect to Gmail or send emails in the current release. ChatGPT sign-in does not request Gmail permission. The AI receives the job listing and your approved candidate profile to write a draft; it does not receive mailbox contents or Google credentials.

Drafts and any recipients you enter are stored privately in your workspace. Historical sending records, if any, remain available in your account export. Existing encrypted mailbox grants are not used while sending is disabled; an existing connection can be disconnected from Account or revoked in your Google Account. Deleting your workspace removes its drafts and locally stored connection credentials.

Country-platform research is shared between searches: we store public job-platform names, URLs, supporting sources and research dates. Candidate profiles, CVs and contact details are not included in this shared research.

Marphee’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, used for advertising or used to train general-purpose AI models.

Managing and deleting your data

You can edit your profile, export account data and download your files from Account. Delete workspace removes your saved profile, CV files, job records, interview practice and messages from the active workspace. Minimal identity records remain to prevent deleted workspaces from being recreated, and credit, referral, payment and security records may remain where applicable. Provider authentication records and infrastructure logs or backups are not automatically erased by deleting the workspace.

To request access, correction or removal of remaining personal information, including your Supabase authentication record, email the contact above. We may need to verify that you own the account. You can also remove Marphee's Google access from your Google Account's third-party connections; doing so does not itself delete your Marphee workspace.

Policy updates

We will update this page when the service or its handling of information changes. The date at the top identifies the current policy.