Myrlin Jobs ("Myrlin", "we", "us") is a job-search automation service. You direct it to discover roles, tailor your resume, and submit applications on your behalf. Because the product exists to act as your agent, it necessarily handles personal information. This policy explains what we collect, why, and what we never do with it.
Information we collect
- Account information: your name, email address, and authentication identifiers, managed through our sign-in provider.
- Application profile: the information you provide so applications can be completed as you: contact details, location, work history, education, skills, links, compensation preferences, and answers to common application questions (for example work-authorization status).
- Resume content: resumes you upload and the tailored variants the service generates from them. Tailored resumes only restate content you provided; the service is designed never to fabricate experience, metrics, or skills.
- Application activity: which roles were discovered, which applications were prepared or submitted, their status, and evidence artifacts (such as confirmation screenshots) kept so you can audit what was done in your name.
- Connected channels: if you connect an email account or provision a managed phone number or email address, we process messages on those channels that relate to your applications (confirmations, scheduling, verification codes).
- Billing information: if a paid offer is introduced and you choose it, payment details are handled by our payment processor; we do not store full card numbers.
- Usage data: standard product analytics and logs used to operate and improve the service.
How we use it
- To perform the service you direct: finding roles, tailoring your resume, completing and submitting applications as you, and tracking their outcomes.
- To generate application content with AI models, grounded strictly in the profile and resume content you provided.
- To operate, secure, meter, and bill the service.
- To show you a complete, auditable record of everything done on your behalf.
What we never do
- We never sell your personal information.
- We never submit an application anywhere you did not direct the service to apply.
- We never invent resume content; generated material is limited to what you supplied.
- We do not train our own AI model on your personal information. Configured AI providers process only the material needed to perform the service you requested, under their applicable terms and our service configuration.
Service providers
We rely on a small set of subprocessors to run the service: cloud hosting and storage (Vercel, Neon, Cloudflare), AI-assisted parsing, generation, and verification (Anthropic and OpenAI, with OpenRouter used for compatible structured-processing paths when configured), authentication (Clerk), payments (Stripe), telephony for managed numbers (Twilio), and product analytics (PostHog). Each receives only what it needs to perform its function. Applications are submitted to the employers and applicant-tracking systems you target; what they do with your application is governed by their own policies.
Retention and deletion
We keep your data while your account is active so your application history remains auditable. You may request deletion of your account and associated data at any time by emailing support@myrlin.io; we will delete it within 30 days except where retention is required for billing or legal compliance. Applications already submitted to employers cannot be recalled by us.
Security
Data is encrypted in transit, tenant data is isolated with database-enforced row-level security, and stored credentials are encrypted at rest. No system is perfectly secure; we will notify you of any breach affecting your data as required by law.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact support@myrlin.ioto exercise them. We respond to all requests within 30 days.
Changes
We will post any material changes to this policy here and update the date above. Continued use of the service after a change takes effect constitutes acceptance.