How Keywordise protects your account
Keywordise applies for jobs in your name, so the bar is simple: nothing happens without you, your data is only ever used for you, and you can take it back at any time.
Applying in your name
- An application goes out only after you approve it, and only from a confirmed email address.
- Keywordise never applies to the same posting twice, and never to a posting that has closed.
- Every application run is recorded in your account's audit log, including what was actually sent.
- You can stop a running batch at any moment.
Your data is yours
- Every account's data is isolated inside the database with row-level security: a request made for one person cannot read another person's rows. This is tested automatically every night by a matrix of cross-account probes that tries to read one person's data as another.
- Your CV and answers are used only to prepare your own applications. They are not sold or shared.
- Export everything at any time (Settings, or the
export_my_datatool). Deleting your account removes your profile, CVs, answers, job matches and applications in one step. Three records are deliberately kept: the security audit trail, usage accounting and billing history, because their job is to outlive the account.
Sign-in and connected apps
- Passwords are stored as Argon2 hashes. Sessions, API keys, OAuth codes and refresh tokens are stored only as SHA-256 hashes; the raw value is shown once, when it is created.
- Agents connect with OAuth 2.1 (PKCE required, single-use codes, rotating refresh tokens) or with a key you create. Each connected app is listed in Settings › API keys and can be disconnected instantly.
- Suspending or deleting an account stops every session, key and connected app on the next request.
Infrastructure
- Hosted in Germany (Hetzner, Nuremberg data centre). HTTPS only (TLS 1.2 and 1.3, HSTS). Cross-site requests that change state are refused.
- Continuous database backups with point-in-time recovery, plus nightly full backups.
- Automated checks run before every deploy and on a schedule, including the isolation test above.
Report a vulnerability
Email hello@keywordise.com with the details, and please do not test against other people's accounts.