Dritto ("we", "us") is a job-search tool that curates roles, scores your fit, and helps you tailor applications. This policy explains what we collect, why, and the choices you have. We designed Dritto to hold your career data carefully — telling you the truth about your odds is the whole product, and that only works if you trust us with the inputs.
Information we collect
- Account. Your email address, used for passwordless sign-in.
- Career profile. Your résumé, work history, skills, education, target roles, and the preferences that drive your filters (comp floor, seniority, locations, tools you won't use, companies to avoid).
- Bullet Bank. The accomplishment bullets you write or that we extract from your résumé and interviews — the source of truth we tailor from.
- Applications & outcomes. The roles you save, the packages you generate, your pipeline stages, and interview rounds you log.
- LinkedIn connections (optional). If you upload your own LinkedIn connections export, we store the names, employers, and titles it contains to surface warm intros. This is your data export; it includes information about third parties in your network.
- Gmail (optional). If you connect Gmail, we request read-only access to detect application status updates. We store an access token securely and read only what's needed to surface pipeline changes; you can disconnect at any time.
- Usage & technical. Basic logs needed to operate and secure the service.
How we use your information
- To source and gate roles against your preferences, and to explain each decision with the exact line from the posting.
- To estimate your ATS fit and to generate tailored résumés, cover letters, and interview prep — always anchored to what you actually provided.
- To operate your tracker and, if connected, reflect email-derived status changes.
- To secure the service, prevent abuse, and improve the product.
AI processing
We use Anthropic's Claude models to extract, score, and generate. Your inputs are sent to Anthropic to produce these outputs. Dritto is built on an anti-fabrication rule — the models are instructed never to invent a tool, metric, or claim you didn't provide — but you are responsible for reviewing any generated document before you submit it.
Service providers (subprocessors)
We share data only as needed with providers that run the service: Anthropic (AI processing), Supabase (database & authentication), Apify (public job-listing sourcing), Google (only if you connect Gmail), and Vercel (hosting). We do not sell your personal information, and we do not use it for advertising.
How applications are sent
Dritto surfaces roles and helps you prepare, but you apply through each employer's own careers site (their real applicant-tracking system). We never submit applications on your behalf through aggregators.
Data retention
We keep your data while your account is active. You can delete your career data or your entire account, after which we remove it from active systems within a reasonable period, subject to backups and any legal obligations.
Your rights
Depending on where you live (e.g., GDPR in the EU/UK, CCPA/CPRA in California), you may have the right to access, export, correct, or delete your personal data, and to withdraw consent for optional features like Gmail. To exercise these, contact us at hello@drit.to. We'll build in-product export and deletion controls as we open access.
Security
Data is encrypted in transit. Every user's records are isolated at the database level so one account cannot read another's. Sensitive credentials such as Gmail tokens are held server-side and never exposed to the browser. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of career data.
About the connections you upload
If you upload your LinkedIn connections, you confirm it is your own official data export and that you use it only to reach people in your network appropriately. You are the controller of that network data; we process it on your behalf to show warm-intro paths.
Children
Dritto is for working-age adults and is not directed to anyone under 16.
International transfers
Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for those transfers.
Changes
We'll update this policy as the product evolves and note the date above. Material changes will be communicated before they take effect.
Contact
Questions or requests: hello@drit.to.