Privacy Policy

About and contact

James Ross, operating LadderReady personally as a registered freelancer in Bulgaria, is the controller responsible for the personal data described in this notice. The operator’s address, telephone, BULSTAT and VAT details are available on the About page.

For privacy questions or to exercise your rights, contact hello@ladderready.com.

About LadderReady

Information LadderReady handles

LadderReady stores the account details you provide, such as your name and email address, together with the Master Profile information, CV and Cover Letter content, job descriptions, profile photos and other material you choose to enter, upload or import.

We use this information to operate your account, build and save your CVs, generate previews and PDF downloads, perform imports and AI actions you request, manage paid access and AI credits, and send essential account messages such as verification and password-reset emails.

Master Profiles, CVs and photos

Your Master Profile and saved CVs remain in your account until you change or delete them. Each saved CV is an independent snapshot: later Master Profile changes do not automatically overwrite it. You can explicitly refresh profile details or copy newly added Master Profile items into an existing CV.

When you replace or remove a profile photo, LadderReady may retain an older managed photo while a saved CV still refers to it. The file is removed when it is no longer referenced, and LadderReady-managed account photo files are removed through the account-deletion process.

DOCX and PDF imports

LadderReady extracts text and document structure from supported Word (.docx) files and text-based PDF files. Scanned or image-only PDFs are not transcribed. The extracted facts may be sent to the configured AI provider for classification, but document import does not consume your AI Assistant credits.

A source PDF is stored temporarily in private staging while its text is extracted and is removed from staging when extraction completes. LadderReady does not copy the source DOCX into its managed import storage. Failed or stale staging data is also covered by the import cleanup process.

Extracted facts and the classification review remain available for up to 24 hours. Confirming or abandoning an import clears the full extracted facts and mapping. Unconfirmed reviews expire and are cleared by the cleanup process. After confirmation, unresolved excerpts and selected record details remain privately available in your account for review. They are not imported automatically, and their retained text is removed when you add or dismiss the item, or delete your account.

Import classification is restricted to text backed by the uploaded source and does not rewrite accepted values. Classification can still be incomplete or wrong, so you must review the proposed facts before confirming them.

LinkedIn imports

LadderReady supports importing a LinkedIn data-export ZIP or saved LinkedIn profile HTML, with optional saved Skills and Certifications detail pages. These are file imports, not an official LinkedIn API connection or live synchronisation.

A LinkedIn ZIP selected for review is stored privately for up to 24 hours and is removed after import, when replaced by another review, when the review expires and cleanup runs, or when the account is deleted. Saved HTML is parsed as part of the current import flow rather than retained as a LadderReady career document.

You choose which detected sections to import. Imported list sections, such as experience, education or skills, replace the existing items in those selected Master Profile sections; sections you do not select are left unchanged.

AI processing

LadderReady currently uses OpenAI as its configured AI provider. Document classification may send extracted CV or resume facts. A user-requested Resume Tailor action may send relevant Master Profile facts, the saved CV snapshot and the target job description for recommendations. An explicit Cover Letter AI request may send the saved letter text, bounded content from a linked CV when selected, and the job title, company, description and application notes supplied for that letter to obtain a suggested revision or explanation.

For Cover Letter AI, the queued source snapshot is encrypted and cleared when analysis completes or fails. The original letter text and validated result are encrypted in the analysis history and remain with the saved letter until it or the account is deleted. Content-free provider attempt records may include status or failure category, model and request references, token usage, duration and estimated cost.

Provider requests are sent with response storage disabled (store: false). That request setting is not a promise of zero provider retention or that information never leaves LadderReady; provider handling is also governed by the provider’s own service terms and operational practices.

AI output can be incomplete or incorrect. LadderReady validates and cross-checks responses and does not apply Resume recommendations or Cover Letter revisions without user action. You remain responsible for reviewing the result and for the accuracy of the CV or letter you use.

Payments and subscriptions

Stripe handles checkout, subscription and AI-credit payments. LadderReady receives and stores the customer, subscription, checkout or payment references and status information needed to confirm access and credits. Stripe may retain its own transaction and compliance records under its terms even after a LadderReady account is deleted.

Analytics

LadderReady uses Umami Cloud to understand aggregate website and product usage. This may include public page visits, referral sources, browser and device information, and anonymous interaction or conversion events. Umami’s tracking code is configured without cookies, but this does not mean that no standard network or request information is processed by the service.

Our integration is deliberately designed not to send names, email addresses, user, Resume or Cover Letter IDs, CV, Cover Letter or profile content, job details, imported LinkedIn content, filenames, photo URLs, signed links or authentication information to Umami. AI completion events include only the allowlisted action type.

Other service providers

LadderReady also relies on configured hosting, storage and email-delivery services to run the application and send account messages. The specific production email and infrastructure providers are not identified here because they are deployment choices rather than fixed application behavior. We do not sell your personal information.

Cookies and local preferences

LadderReady uses cookies needed for sign-in, security and normal application operation. Your browser may also store local preferences, such as your chosen Light or Dark appearance.

Account deletion

You can update your account and Master Profile in LadderReady. Account deletion permanently removes the account-owned application records and LadderReady-managed files covered by the current deletion flow, including saved CV data, managed photos, thumbnails and retained import files.

A renewable Stripe subscription must first be cancelled and confirmed as non-renewing. You may then delete the account immediately, even if paid access time remains; deleting it forfeits that remaining access. Later Stripe events are acknowledged without recreating the deleted account.

Deletion cannot control records retained by Stripe, OpenAI, analytics, email or infrastructure providers under their own terms, and this policy does not promise a specific timetable for removal from operational backups.

Professional outreach and correspondence

We may introduce LadderReady to organisations whose professional work makes the service relevant, such as careers and employment-support teams. We prefer published team or organisation contact routes. Sources include official public websites and information provided in correspondence.

Our records may include organisation and service names, contact details, relevant professional names or roles, source URLs and verification dates, outreach history, replies, delivery outcomes and requests not to receive further contact. Organisation-only information is not necessarily personal data; named contacts, identifying addresses and reply content can be.

Where this involves personal data, we rely on legitimate interests in introducing our service to relevant professional organisations, managing correspondence and avoiding duplicate or inappropriate contact. We limit research and personalisation to relevant professional context, without sensitive personal targeting, guessed addresses or email tracking. You do not have to reply or provide information, and this does not affect access to LadderReady.

We retain research and correspondence only while needed to assess relevant contact, manage the conversation and keep a proportionate record of what happened. We review relevance when using the records and remove or anonymise information no longer needed. We retain minimal do-not-contact details for as long as needed to honour an objection and prevent accidental repeat contact, rather than retaining entire conversations indefinitely. These outreach records are separate from account data and its deletion process.

The outreach workflow uses Hostinger Mail for correspondence, local records for contact history and suppression, and OpenAI tools for research and review. These providers receive the contact information or correspondence supplied for that work. Provider processing can involve countries outside the European Economic Area, including the United States. Their privacy and data-processing terms describe the applicable transfer arrangements, including adequacy decisions or standard contractual clauses where applicable. Contact us for information about the safeguards relevant to your data or how to obtain a copy.

Hostinger data-processing terms · OpenAI privacy and transfer information

You can object to direct marketing at any time, without giving a reason, by replying to an outreach email or emailing us. We will stop using your personal data for direct marketing and retain only the suppression information needed to respect your choice.

You may request access, correction, deletion or restriction of your personal data, subject to the applicable conditions. Portability applies where its legal conditions are met; it does not generally apply to processing based on legitimate interests. You may complain to a competent supervisory authority, including Bulgaria’s Commission for Personal Data Protection. Send privacy requests or outreach objections to hello@ladderready.com.

Security and changes

We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security. Use a strong, unique password and avoid adding information you do not want included in your account or CVs.

We may update this policy as LadderReady changes. The latest version will remain available on this page with its updated date.