Privacy Policy

Personal data operator

The operator responsible for personal data processed by the Mansap service is ИП Mansap, an individual entrepreneur. In this Privacy Policy, “Mansap”, “we” and “us” refer to ИП Mansap.

Information we process

Mansap processes your signed-in account identifier and email, contact details, professional profile, uploaded resumes, vacancy text, generated documents, interview-practice answers and feedback, support reports, and essential security and product events.

An optional password is stored as a salted cryptographic hash, never as readable text. Reset tokens are stored as hashes. Passwords are used only for authentication and are not sent to AI providers.

Optional result ratings, selected reasons, comments and the rated text help us review generation quality. Corrections to resumes, cover letters and employer answers may retain before/after text and your comparative rating for this review. Feedback comments reach AI only when you request a correction; acceptance changes the saved text. These records expire after 90 days; deleting the resume or account removes them earlier. Writing preferences are saved only when you confirm them, apply only to your account, and remain until you change or forget them or delete your account. They are included in relevant future AI requests. Feedback does not automatically train a shared model.

If you choose Google sign-in, Google confirms your identity and shares your Google account identifier, email and name with Mansap. We store these details to create or connect your account and sign you in. Google access, refresh and ID tokens are not retained in the account database. This sign-in option does not give Mansap access to Gmail or Google Drive. Google processes your sign-in under its own privacy policy.

How information is used

We use this information to extract and organize career facts, generate and edit resumes and cover letters, calculate vacancy match, provide AI interview coaching and exports, protect the service, diagnose failures, and understand the core product journey.

AI processing and your choice

By accepting these Terms and requesting an AI feature, you authorize Mansap to send OpenAI the profile and resume content, vacancy text, chat messages, interview answers and instructions needed to perform that request. OpenAI processes this information outside Kazakhstan. You can view, edit manually and download saved data without requesting new AI processing. Do not provide other people’s personal data unless you are entitled to do so. Mansap requests that API responses are not stored (store: false); this does not eliminate OpenAI’s separate security and abuse-monitoring retention. See the Privacy Policy for providers and retention.

Storage and access

The current service uses Cloudflare D1 and R2 for account data and files, OpenAI for requested AI processing, Resend for sign-in email, and Google Workspace for support email. Storage and processing may take place outside Kazakhstan. Kazakhstan-based storage has not yet been implemented.

Payment information

Payment information updated October 19, 2026.

Real payments are not yet enabled. When paid subscriptions become available, the payment provider and its privacy policy will be identified before purchase. The provider will process the contact, billing, tax and payment information entered in its checkout to handle payments, renewals and refunds. Mansap will share the selected plan and a purchase reference, and store customer, transaction and subscription identifiers, the accepted purchase-terms version, payment status, paid periods and refund records to manage access and support. Mansap does not store full card numbers or card security codes and will not send resumes, career profiles or interview answers to the payment provider. Payment-related processing may take place outside Kazakhstan. Local account-linked billing records are removed with the account; event receipt identifiers are retained for up to 90 days and backups expire within 30 days. Deleting a Mansap account does not delete records that the payment provider must retain for its own legal, tax and security obligations.

Retention and deletion

Account content and the record of the accepted policy version and time remain while your account exists. Email codes are valid for 5 minutes and password-reset links for 15 minutes; expired code, reset-link and session records are cleaned up within 24 hours. Sessions last 7 days and may be renewed. Error and security records are kept for 30 days; product events and detailed per-user AI usage for 90 days. Anonymous aggregate project costs may remain longer. Support reports are kept while open, then for 180 days after closure. Verified temporary recovery copies have a 7-day retention period; daily backup snapshots have a 30-day retention period. Provider-side logs follow the providers’ own retention rules.

Delete account and data in Settings removes your account-linked profile, uploaded files, generated documents, interviews, history, support reports, usage records and product events from the working service. Older backup snapshots expire separately within 30 days. A minimal deletion receipt containing account identifiers and the request time is retained until older recoverable copies are gone, plus 7 days, so restoration does not recreate a deleted account. It contains no resume text or email address.

Service limits and security

Mansap validates supported file types and sizes, limits repeated uploads and AI operations, and may suspend abusive activity. No internet service can guarantee absolute security.

Contact

Privacy and data-deletion questions can be sent to support@mansap.ai.