Privacy Policy

Effective date: May 4, 2026

Stature is operated by Malbet Holdings, LLC, a California limited liability company doing business as Statureapp.ai (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect your information when you use our Service at app.statureapp.ai and statureapp.ai.

1. The Short Version

We don’t sell your data.
We don’t use your data to train AI models.
Your career content is sent to AI providers only to generate recommendations for you.
You can request deletion of all your data at any time.

2. Information We Collect

Account information. When you sign in with Google OAuth, we receive your name, email address, and profile photo from Google. We use this to create and manage your account.

Career content. Resumes, cover letters, career stories, job descriptions, career documents (performance reviews, project briefs), and any other materials you upload or create within the Service. This is your content — you own it.

In-app analytics. When you create a Stature account and use the app, we collect detailed usage and interaction analytics — the features you use, the actions you take, and your interaction patterns — using PostHog, to operate and improve the Service. Unlike the marketing site, in-app analytics are not governed by a separate consent banner: they are part of using the Service, and you agree to them when you create your account. We use this data only to provide and improve Stature, and we do not sell it.

Survey responses. If you complete our onboarding survey, we collect your responses (years of experience, job search status, goals). This helps us understand our users and improve the Service.

Device and browser information. We automatically collect basic technical information such as browser type, operating system, and device type. On our marketing site, we also collect aggregate page-view counts, Core Web Vitals (page load and responsiveness metrics), and anonymous interaction-event counts (such as whether the consent banner was shown, accepted, or declined) through Vercel Web Analytics and Vercel Speed Insights. These aggregate Vercel metrics are cookieless, contain no personally identifiable information, and are not combined with your account.

Marketing-site analytics (with your consent). When you visit our marketing site, we ask your consent before placing analytics cookies or collecting individual usage data. If you accept, we use cookies and PostHog analytics to understand how visitors use the site — the pages you view, the links and elements you interact with, and how you arrived (referrer and campaign source) — and, if you create an account, to connect that visit to your account so we understand the full journey from first visit to sign-up. If you decline, we place no such cookies, do not track your individual activity, and never connect your visit to an account. You can change your choice at any time. We continue to collect aggregate, cookieless page-view and performance metrics regardless of your choice; these contain no personally identifiable information.

3. How We Use Your Information

To provide the Service. Processing your career content through AI providers to generate tailored recommendations, storing your data so you can access it across sessions, and delivering the core product experience.
To improve the Service. Analyzing aggregate usage patterns to identify bugs, improve features, and understand which parts of the product deliver value. We do not use your career content for this purpose — only interaction patterns.
To communicate with you. Sending transactional emails (account verification, application-ready notifications) and responding to your support requests. These are essential to the Service and cannot be opted out of while your account is active.
To send product updates. Occasional emails about new features, improvements, and service-related announcements. You can opt out of these communications at any time by replying “unsubscribe” to any such email or emailing hello@statureapp.ai.
To ensure security. Detecting and preventing fraud, abuse, and unauthorized access to accounts.

4. AI Providers and Data Processing

When you tailor a resume, your resume content and relevant career context are sent to third-party AI providers to generate recommendations. Our current AI providers are:

OpenAI (GPT models)
Anthropic (Claude models)
Google (Gemini models)

We have selected providers with strong data handling commitments. All three providers have committed to not using API inputs to train their models. Your career data is processed solely to generate recommendations and is not retained by these providers beyond what is necessary to complete the request.

We route different types of AI tasks to different providers and models based on quality and cost. The specific provider used for a given task may change as we improve the Service.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share your data only in the following circumstances:

AI providers (as described in Section 4) to generate recommendations.
Infrastructure providers. We use Supabase for database hosting and authentication, and Vercel for application hosting, marketing site hosting, and aggregate performance analytics (Vercel Web Analytics and Vercel Speed Insights — cookieless, no PII). These providers process your data under their respective data processing agreements.
Analytics provider. We use PostHog for product analytics and, with your consent, marketing-site analytics. PostHog processes this usage data under its data processing agreement.
Legal requirements. We may disclose information if required by law, subpoena, or court order, or if we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfer. If Malbet Holdings, LLC is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your account and career content for as long as your account is active. If you request deletion, we will remove all your data from our systems within thirty (30) days, except where retention is required by law.

Usage analytics and aggregate data that cannot be used to identify you may be retained indefinitely.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

Encryption in transit (TLS/HTTPS for all connections)
Encryption at rest for stored data
Row-level security policies that restrict data access to authenticated account owners
OAuth-based authentication (no passwords stored by us)

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

All users can:

Access your data through the Service at any time
Delete your account and all associated data by emailing hello@statureapp.ai
Export your resume and cover letter content as PDF files

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect and how it’s used
Right to delete your personal information
Right to non-discrimination for exercising your privacy rights
Right to opt out of sale. We do not sell personal information, so this right is satisfied by default.

To exercise any of these rights, email hello@statureapp.ai. We will respond within 45 days.

9. Children’s Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@statureapp.ai.

10. Cookies and Tracking

We use essential cookies required for authentication and session management, and we do not use advertising cookies or third-party advertising pixels.

On our marketing site (statureapp.ai), with your consent, we use first-party analytics cookies (PostHog) to understand how visitors use the site and, if you create an account, to connect your marketing-site visit to your account — joining your activity across our own site and app (statureapp.ai and app.statureapp.ai), not across other companies’ websites. We ask your consent through a banner before any of these cookies are set: accept and they are placed; decline and they are not, and your activity is not individually tracked. You can change your choice at any time.

Separately, and regardless of your choice, we collect aggregate, cookieless page-view, performance, and anonymous interaction-event metrics (such as whether the consent banner was shown, accepted, or declined) on the marketing site (Vercel Web Analytics and Vercel Speed Insights) — first-party, no cookies, no personally identifiable information, and not used to identify or follow individuals across sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice within the Service. The effective date at the top of this page indicates when the policy was last revised.

12. Contact

Questions about this Privacy Policy or your data? Contact us at:

Malbet Holdings, LLC
DBA Statureapp.ai
3400 Cottage Way, Ste G2 #29747
Sacramento, California 95825
Email: hello@statureapp.ai