Privacy Policy

• Account data: email address, display name, hashed password (handled by Supabase Auth).
• CV files: the optional CV you upload, plus the technologies and seniority signal extracted from it for matching.
• Voice profile interview: if you use the voice interview to build your profile, your recording is sent to our AI provider (OpenAI) for transcription and discarded immediately afterwards — we store only the transcript text, never the audio itself.
• Career-fit assessment: if you use the voice assessment, your LinkedIn screenshot (if attached) and your recording are processed by our AI providers and discarded immediately — we keep only the processed text and the fit report generated for you.
• Activity history: jobs you saved, archived, marked "CV sent", and any private notes you wrote.
• Saved searches: keywords, preferred roles, regions.
• Payment data (Pro only): processed directly by PayPal. We never see or store your card number.
• Technical data: IP, browser type, current page URL (only attached when you voluntarily submit a bug report).
• Security and abuse-prevention logs: IP address, User-Agent, request rate and patterns, accessed paths, and automation/scraping signatures. This data is collected to protect the Service and its catalog against data exfiltration, reverse engineering, and circumvention of plan limits, in line with section 6 of the Terms of Service. Legal basis: Trevo's legitimate interest (Section 11 of the Israeli Privacy Protection Law; Art. 6(1)(f) GDPR).

Professionals Who Do Not Use Trevo

Trevo holds details from public LinkedIn profiles, received from a third-party data provider, so that recruiters and employers on the Service can find professionals for open roles. The stored details are the name, profile link, profile photo, title, workplace, location, skills, experience, education, certifications, languages, links to other public profiles, the About section, public activity and posts, recommendations written by others, volunteering, awards, courses and projects, follower and connection counts, the "open to work" status, and assessments and scores computed from the profile, including an estimate of how likely the person is to change jobs. For some profiles, contact details that appeared in the source record are also stored, and so is the rest of the public profile record as received from the provider. Recruiters see only the title, workplace, location and skills, never the name, photo, profile link or contact details.

Anyone can remove a profile from recruiter search on the Remove a Profile From Recruiter Search page, without an account and free of charge. The profile address is then kept on a block list, only so that the profile does not come back to search. To limit abuse, a one-way hash of the network address the request came from is also kept, not the address itself. No name or email address of the person sending the request is stored. To see, correct or fully delete the stored details, write to roya@trevo.work. Before the details are shared or deleted, a short check confirms that the profile is yours.

• provide the Service (filter jobs, personalize ranking, generate the daily brief);
• retain your CV and match you with employers: we may keep the CV you uploaded to proactively search and match suitable roles for you with employers in the industry. We will never share your details with an employer without your explicit approval.
• authenticate users and run accounts;
• send transactional email (signup confirmation, alerts, brief, billing notices);
• improve the algorithm and the catalog (in aggregate; not personally identifying);
• comply with legal requirements (invoices, payment audit trail).

• Supabase — DB hosting + auth. Stored in EU (eu-central-1).
• Vercel — application hosting.
• PayPal — payment processing — the payment processor for Pro users.
• Resend — transactional email delivery.
• Cloudflare Turnstile — a security check against automated requests on the feedback form and the profile-removal page; to run it, Cloudflare processes technical details of the browser, such as the IP address.
• OpenAI (the primary AI provider for CV analysis and brief generation), with Anthropic and Google AI as fallbacks. These providers' servers are in the USA — so your CV text and employment history are transferred to and processed outside Israel. Data is sent only for the inference call, never to train models. Legal basis for the transfer: your explicit consent at upload. Note that transferring personal data abroad cannot be undone after the fact.
• PostHog and Microsoft Clarity — anonymous usage analytics (you can block these with a DNT/Privacy browser extension).
• Meta (Facebook) — page-view and ad-effectiveness measurement through Meta Pixel. Data may include page addresses, browser identifiers, and technical details. Meta may associate this activity with a Meta account according to its cookies and settings. We do not send CV contents, names, or email addresses to the pixel, and advanced matching is disabled. You can opt out in the cookie notice.
• Admin access — Trevo administrators may view first-party activity data (last login, in-app actions, and saved searches) associated with your account for operations, support, and service improvement. Detailed behavioural data (session recordings, heatmaps) is collected masked and identified by an anonymous identifier only.

Transfer of data outside Israel: some data is processed and stored outside Israel. Supabase (the database and auth) servers are located in the European Union (eu-central-1); Vercel (application hosting) and Resend (transactional email) run infrastructure in the USA and the EU; and the AI providers (OpenAI, Anthropic, Google AI) process requests in the USA. Legal basis for the transfer: performance of our contract with you and delivery of the service you requested, your explicit consent (for CV text and content you upload), and our legitimate interest in protecting the service — all in line with the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13) and the GDPR where applicable. Data is transferred for the purposes described in this policy, according to data-processing agreements and the providers' policies. Meta Pixel data may be processed outside Israel. Note that transferring personal data outside Israel cannot be undone after the fact.

We do not sell personal data to third parties. We use Meta Pixel to measure ad effectiveness without sending CV contents, names, or email addresses to the pixel.

Trevo offers two optional integrations with a Google account. Neither is required to use Trevo: each is turned on only when you choose it and approve Google's consent screen, and each can be disconnected at any time in Settings.

• Google Calendar (read-only, calendar.events.readonly). Trevo reads the events in your primary calendar, 14 days back and 90 days ahead, to recognize job interviews and recruiting meetings and show them on your dashboard. Recognition runs on Trevo's servers with fixed rules; calendar data is not sent to any AI provider. Only events recognized as part of a job process are stored: the event title, start and end time, meeting link, and the company name when it matches a job you applied to or saved. All other events are processed in memory and discarded. Trevo never creates, changes or deletes calendar events.
• Gmail (read-only, gmail.readonly). Trevo reads messages related to your job applications to detect interview invitations, recruiter replies, rejections and offers, and updates your application tracker. To classify a message, a redacted subject line and a short excerpt are sent to our AI providers (OpenAI, with Google AI as a fallback) under data-processing terms that do not allow training on it. Trevo never sends email on your behalf.

Protection and use: OAuth refresh tokens are encrypted at rest (AES-256-GCM). Google user data is used only to provide these features to you. It is not sold, not used for advertising, not used to train generalized AI or machine-learning models, and not shared with employers or any other third party except the processors listed above, to provide the feature. Trevo staff do not read it unless you ask us to for support, it is needed for security or abuse investigation, or the law requires it.

Retention and deletion: recognized calendar events are deleted 30 days after they take place. Disconnecting your calendar deletes the connection and every stored event immediately. Disconnecting Gmail deletes the connection, and the data detected from your email can be deleted on the email data page. You can also revoke Trevo's access at any time in your Google Account at myaccount.google.com/permissions. Deleting your Trevo account deletes all of this data. The same rules apply to Microsoft Outlook and Outlook Calendar when connected.

Limited Use: Trevo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We retain personal data only for as long as necessary for the purposes for which it was collected, or longer where required by law. Retention periods by data type:

• Account and registration data — retained as long as your account is active.
• CV file — retained until you delete it from /account/cv.
• Activity history and saved searches — retained while the account is active and deleted when the account is deleted.
• Voice profile transcripts — retained for 90 days then auto-deleted (the audio itself is never stored).
• Daily briefs — auto-pruned after 90 days.
• Interviews and meetings recognized in a connected calendar — deleted 30 days after they take place, and immediately when the calendar is disconnected (see section 3a).
• Analytics data (PostHog, Clarity) — retained under an anonymous identifier only per those providers' retention policies, with no name or email.
• Meta Pixel data — processed and retained according to Meta's retention policies.
• Security and abuse-prevention logs — retained for up to 12 months, or longer if needed to investigate an active incident or for legal proceedings.
• Deleted account — personal data deleted within 30 days. Billing records and invoices retained as required by law (7 years under tax rules).

• Right of access: to know whether we hold data about you and to inspect it (Section 13 of the Law).
• Right to correction: to request correction or update of data that is inaccurate, incomplete, unclear, or out of date (Section 14 of the Law).
• Right to erasure: to request deletion of personal data ("right to be forgotten"), subject to statutory retention obligations.
• Restriction of processing: to request that we limit the use of your data in certain situations (e.g. while a correction or objection request is being reviewed).
• Objection to processing: to object to processing based on legitimate interest, and to opt out of marketing or mailings.
• Removal from recruiter search: anyone can remove a LinkedIn profile from recruiter search on the Remove a Profile From Recruiter Search page, without an account.
• Data portability: to receive the data you provided in a structured, commonly used, machine-readable format and transfer it elsewhere.
• Withdrawal of consent: to withdraw consent you gave at any time, without affecting the lawfulness of processing carried out beforehand.
• Lodging a complaint: to lodge a complaint with the Israeli Privacy Protection Authority (the Database Registrar) or your local supervisory authority.

To exercise any of these rights, contact us via the contact form or at roya@trevo.work. We respond within 30 days. We may need to verify your identity before acting on a request, to protect your data.