Privacy Policy

Effective June 19, 2026 · Rasch Technologies

inbetween ("we", "us", "our") is a personal job-search tracker operated by Rasch Technologies, who is the data controller for the information described here. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. Questions: support@inbetweenclub.com.

Information we collect

• Account: your email address, and — if you sign in with Google — your Google account identifier and profile image.
• Résumé & profile: the résumé you upload and the profile we parse from it (name, contact details, work history, skills).
• Job-search content: the opportunities, companies, contacts, notes, and meetings you add.
• Billing: handled by Stripe. We store your Stripe customer/subscription identifiers and plan status; we never see or store your full card number.
• Calendar: if you connect Google Calendar, encrypted access tokens used only to sync the meetings you create.
• Technical: sign-in timestamps and IP addresses (for security), and strictly-necessary cookies (your session, the optional "remember me", and your theme choice).

How we use it

• To provide the service — track your search, sync your calendar, and generate AI assistance.
• To process your subscription and send service and reminder emails (which you can turn off).
• To secure the service, prevent abuse, and meet our legal obligations.

We do not use your information for advertising, and we do not sell or rent it.

Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, we process your information to perform our contract with you (providing the service and your subscription), for our legitimate interests in securing and improving the service, to comply with legal obligations, and — for optional integrations such as Google Calendar — with your consent, which you can withdraw at any time.

AI processing & third parties (sub-processors)

To provide AI features we send the relevant text — your résumé and the job description — to our AI provider. We share data only with processors that help us run the service:

• Anthropic (Claude) — generates research, tailored résumé/cover-letter drafts, interview prep, and follow-ups from your résumé and the job posting. Anthropic processes this under its commercial terms, does not use it to train its models, and retains it for up to 30 days (for trust & safety) before deleting it.
• Stripe — payment processing and billing.
• Google — sign-in (OAuth) and, if you connect it, Calendar sync.
• Heroku — application hosting.
• Mailgun (via Heroku) — transactional and reminder email delivery.
• Sentry — error monitoring. We scrub request bodies, query strings, cookies, and your identity before they're sent, so error reports don't include your personal data.
• New Relic — performance monitoring. Configured to obfuscate database queries and exclude request parameters, headers, and message bodies.

Each processor is bound by a data processing agreement (DPA) that limits how it may handle your data on our behalf. We do not sell your personal information.

Where we process your data

inbetween and its processors operate primarily in the United States. If you use the service from outside the US, your information will be transferred to and processed in the US under the safeguards in our processors' data processing terms.

Cookies

We use only strictly-necessary cookies (your login session, the optional "remember me", and your light/dark theme preference). We do not use advertising or analytics trackers, so no cookie-consent banner is required.

Retention & security

We keep your data while your account is active. When you delete your account, your data is removed immediately from the live service and purged from routine backups within 30 days; we may retain limited records (such as billing history) where the law requires. We protect your data with encryption in transit, encryption at rest for sensitive data such as your résumé content and connected-account access tokens, and per-user access controls. No method of storage is perfectly secure, but we work to protect your information.

Your rights

• Access / export: download a copy of your data anytime from your account.
• Deletion: delete your account and all associated data from your account settings — this is immediate and irreversible.
• Correct or restrict: depending on where you live (e.g. the EU/UK or California), you may have additional rights to correct, restrict, or object to processing, and to data portability. Contact us to exercise them — we won't discriminate against you for doing so.
• Complaints: if you're in the EEA or UK, you may also lodge a complaint with your local data protection authority.

Children

inbetween is intended for adults and is not directed to children. You must be at least 18 (or the age of majority where you live) to use it, and we do not knowingly collect information from anyone under 18.

Changes & contact

We may update this policy; material changes will be reflected by the effective date above and, where appropriate, by notice in the app or by email. Contact us anytime at support@inbetweenclub.com.