Privacy Policy

Flash Services AI ("we", "us", "our", accessible at flashservicesai.online) respects your privacy. We are committed to transparency in our data processing practices.

We collect and process only the minimal data necessary to authenticate your account, provide automated AI services, safeguard computational resources, and process optional memberships. We do not sell, rent, or trade your personal data to advertisers or data brokers.

We collect the following categories of information:

• Google Account Profile Data: When you sign in via Google OAuth, we receive your verified Google User ID, full name, email address, and avatar image URL. We never receive, process, or store your Google password.
• User-Uploaded Documents & Resumes: When you use services such as Job Scout, Resume Rebuilt, ATS Check, or Job Fit, you provide your resume PDF. Resumes typically contain contact information, employment history, education, and skills.
• Project Notes & Codebase Files: When you use Docs, Drafted, you may upload notes, archives, or connect your GitHub repository to select files.
• Payment Verification Data: When requesting a manual membership upgrade, you voluntarily provide your PayPal email and Transaction ID so our team can verify your payment. We never collect or store credit card numbers or banking details directly; transactions occur securely on PayPal.
• Device Security Token (flash_device_id): A cryptographically random token stored in an httpOnly cookie to prevent fraud, enforce fair use of daily energy, and link one account per device.
• Run History & Deliverables: Records of your completed runs (date, tool name, energy consumed, and output files/text) are securely retained in your private workspace for review and download.
• Flashy Chat Messages: Queries and responses exchanged with our assistant Flashy to maintain conversation continuity.

Your information is utilized solely for legitimate operational purposes:

• To authenticate your identity and maintain your active session.
• To execute the specific AI services you trigger (e.g. searching jobs matching your resume, generating slide decks, compiling documentation, checking ATS compatibility).
• To track and update your daily Energy allowance and reset it at 00:00 UTC.
• To store your completed deliverables in your private Run History for on-demand access.
• To enforce the single-device security policy and prevent automated platform abuse.
• To respond to your support inquiries sent to our contact email.

To operate our automated platform, we transmit data to trusted technical sub-processors under strict confidentiality and security standards:

• Google Cloud & Google Gemini API: For AI orchestration, text reasoning, slide outlines, documentation drafting, and Flashy chatbot replies.
• Manus API: For multi-board job search research tasks (Job Scout) and visual design generation (Slides, Sorted).
• Gotenberg (Modal): Headless Chromium server for converting markdown and HTML documentation into clean PDF files.
• Supadata API: For fetching YouTube captions when users provide public video URLs in Video Digested.
• Neon / PostgreSQL: Encrypted, managed cloud database for hosting user accounts, energy balances, and action history.
• Vercel: Web hosting and serverless compute infrastructure providing TLS 1.3 encryption for all web traffic.

Flash Services AI uses only essential functional cookies and local storage:

• next-auth.session-token: An encrypted httpOnly session cookie that keeps you securely signed in.
• flash_device_id: An httpOnly, secure cookie holding a pseudonymous device identifier used strictly to prevent multi-accounting energy abuse.
• localStorage: Stores lightweight UI preferences (such as the Web Audio sound effects on/off toggle).

We do not use third-party advertising tracking cookies or cross-site tracking pixels.

User-Controlled Deletion: You have full control over your history. You can delete individual run history items, generated PDF files, and Flashy conversation logs at any time directly through your dashboard. When you delete a run, its associated file binary and database record are permanently purged.

Account Inquiries: If you wish to close your account or have questions regarding retained data, you can email us directly at contact@flashservicesai.online.

Depending on your location, you have rights regarding your personal information:

• Right of Access: You can view all past runs and profile data in your workspace.
• Right to Rectification: You can update inaccurate account data.
• Right to Erasure: You can delete your run history and uploaded deliverables.
• Right to Non-Discrimination: We do not discriminate against users exercising privacy rights.

We implement industry-standard technical measures to protect your information:

• All web traffic is encrypted via HTTPS with modern TLS protocols.
• Database queries are scoped strictly to the authenticated user ID.
• Server-authoritative energy management prevents tampering and client manipulation.
• API secrets and database connection strings are kept securely on the server side only.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is managed, please contact us at: