Privacy Policy
Effective [effective date]
This policy explains what [Company name] ("Topmast", "we") collects when you use the Topmast website and apps, why, and what you can do about it. Questions or requests: [contact email].
What we collect
- Waitlist. Your email address, and which page you signed up from.
- Your account. Your email address and name from the sign-in service, and your time zone (for reminders).
- What you track. The jobs, statuses, next steps, notes, interviews, referrals and settings you enter or import.
- Reminder devices. When you turn reminders on, the push address your browser or device gives us, so we can deliver them.
- Technical data. Server logs (IP address, browser, requests) and error reports, kept to keep Topmast working and secure.
We don't use advertising trackers, and we don't sell or rent your data.
How we use it
- To run Topmast: save and sync your data across your devices, and send the reminders you ask for.
- To invite you from the waitlist and tell you about the beta. You can ask us to stop at any time.
- To keep Topmast secure, fix problems, and understand how it is used, in aggregate.
- When the law requires it.
AI features (Pro, coming later)
Pro features send the data they work on (for example a job posting and the career details you've entered) to Anthropic to produce matches, scores and drafts. Anthropic processes it under commercial terms that don't allow it to train its models on that data. AI results are suggestions: nothing is changed or sent without you choosing to.
Email status sync (Pro, coming later)
If you connect Gmail or Outlook, Topmast reads recent messages to spot job-related updates (rejections, interview invites, assessments and recruiter replies) and suggests status changes. We store only what we derive: the date, the sender's domain, the kind of update and a short summary. We never store message bodies, and no person reads your email except as described in our Google data use page. You can disconnect at any time, and we then delete the access we were given.
Who helps us run Topmast
These providers process data for us, only to provide their service:
| Provider | What for | What they get |
|---|---|---|
| Render | Runs the Topmast servers | Everything the app stores, while it is processed |
| Neon | Hosts the database | Your account and everything you track |
| Cloudflare | Serves this website and the web app | Standard request data (IP address, browser) |
| WorkOS | Sign-in | Your email address, name and sign-in details |
| Inngest | Runs scheduled work such as reminders | Ids of your workspace and next steps, and the text of the reminders it sends |
| Sentry | Error reports | Technical details of errors, without your tracker content or email address |
| Google, Mozilla, Microsoft and Apple push services | Deliver reminders to your browser or device | The reminder text |
When the features that need them arrive, these join the list:
| Provider | What for | What they get |
|---|---|---|
| Anthropic | AI features in Pro | The parts of your data a Pro feature works on (for example a posting and your resume details) |
| Google and Microsoft | Email status sync in Pro, if you connect Gmail or Outlook | Access to job-related messages, as described below |
| Stripe, Apple, Google Play, RevenueCat | Payments for Pro | Your plan and payment status; we never see your card number |
| Postmark | Email (reminders, digests, invites) | Your email address and the email content |
We may also share data if the law requires it, or with a buyer if Topmast is sold, under this policy.
Keeping it safe
Data is encrypted in transit and at rest. Each account's data is kept separate in the database itself, not only by the app. Access to production systems is limited to the people who run Topmast.
How long we keep it
We keep your data while you have an account. When you delete your account, we delete your data within[number] days, and it leaves our backups within [number] days. Waitlist addresses are deleted when you ask, or [time] after the beta if you never joined.
Your choices and rights
You can see and change your data in the app. You can ask us for a copy of your data, to correct it, or to delete it, by writing to [contact email]. Depending on where you live (for example the EU, the UK or California) you may have further rights, such as objecting to some uses; we honor those requests. We'll answer within 30 days.
Children
Topmast is not meant for anyone under 16, and we don't knowingly collect data from them.
Changes
If we change this policy, we'll update the date at the top. For important changes, we'll tell you in the app or by email before they take effect.