Cognatory · Vector

Your career. Your information.

This notice describes how Cognatory, LLC handles information for Vector. Last updated September 17, 2026.

Information you provide

When you create an account, we use your Cloudflare account identifier, email, and display name to sign you in. We store the profile, resumes, job postings, application records, notes, and settings you choose to save. We do not need access to your Gmail messages.

Payments and service providers

Stripe processes subscription payments and provides invoices and billing management. We store subscription and customer identifiers and payment status; we do not store your full payment-card number. Cloudflare provides sign-in and hosts the website. Your resumes and application records are stored in a dedicated database in the Cloudflare account you connect. Cognatory stores account identifiers, subscription status, encrypted connection credentials, and workspace deployment metadata separately. Vector processes your workspace content through its servers to operate the service, so customer-owned hosting does not mean Cognatory cannot access that content. Cloudflare authorization grants permission to create and manage Workers and D1 databases across the account you authorize, not only Vector’s own resources. Vector’s code limits its operations to the recorded workspace resources, but Cloudflare does not enforce a per-Worker or per-database boundary for this OAuth grant. Use a separate Cloudflare account if you want to keep other projects outside that grant. Background access lets Vector renew its connection and maintain your workspace without repeated sign-in; you can revoke the application in Cloudflare’s connected-application settings. These providers process information needed to perform their services, including technical connection and security information.

Connected assistants

An assistant you authorize may read or change workspace information within its granted permissions. Information shared with that assistant is also subject to its provider's policies. Connection setup is required; visiting the website does not connect a chatbot automatically. You can revoke supported connections in your workspace.

Cookies and local storage

Authentication uses essential cookies. The workspace may store account-specific drafts and cached job information in your browser. Signing out clears unfinished local workspace data for that account. The public landing page does not use advertising cookies or third-party analytics scripts.

How we use and protect information

We use your information to provide the workspace, authenticate access, manage subscriptions, answer support requests, and prevent abuse. We do not sell your resume or application data. Private workspace information is not published for search engines or public AI crawlers. Access controls are enforced on the server; browser settings are not authorization.

Retention, export, and deletion

Your saved profile, resumes, applications, and account connection records remain while your account is open, including after cancellation; they do not expire automatically because you stop subscribing. You can export saved work. To request deletion, correction, or assistance exercising privacy rights, contact brian@cognatory.com from your account email. We verify the request and process deletion manually within 30 days after verification, unless an applicable legal obligation requires a different period. We remove the live workspace content and account connection credentials we control. If you have revoked our Cloudflare access, we give you instructions to delete the dedicated workspace resources in your own account.

We retain invoices and minimal payment, refund, dispute, and tax records for seven years after the associated transaction, restricting their use to those purposes. Support correspondence is retained for up to two years after the request closes. Records subject to a specific legal preservation obligation remain only until that obligation ends. These are our retention periods, not a claim that all records must be kept for those periods by law.

Cloudflare D1 recovery history may contain deleted content for up to seven days on a Free account or 30 days on a Paid account. Vector does not enable a paid plan. Separate exports or backups you create remain under your control. Stripe and a connected assistant may retain information under their own policies and legal obligations; removing it from Vector does not erase copies already shared with them. We do not retain generated PDF files as a separate hosted archive; they are produced on demand.

Information to keep out of Vector

Do not put passwords, API keys, payment-card or bank-account details, government identification numbers, health information, or other sensitive eligibility disclosures into resumes, notes, or assistant requests. Complete an employer's sensitive questions directly on that employer's site. The service is not directed to children under 13. Users must meet the eligibility requirements of their connected services and obtain parental or guardian authorization where required.

Contact

Privacy requests and questions: brian@cognatory.com.