Legal & policies

Privacy Policy

What we collect

• Account info: email, name, university, graduation year, visa status — only what you tell us.
• Profile preferences: target roles, target industries, preferred locations, work-type preferences.
• Resume content: the text of resumes you upload. We extract text from PDF/DOCX so Orin can reason about it.
• Application tracking: jobs you save, mark applied, mark interviewing, or mark rejected.
• Usage logs: standard server logs (IP, timestamp, endpoint) for debugging and abuse prevention. Retained 30 days.

What we do with it

• Show you visa-friendly jobs that match your profile.
• Let Orin personalize advice, resume rewrites, cover letters, and interview prep using your profile and resume.
• Optionally email you a daily digest (you can turn this off).
• Improve the product by analyzing aggregate, anonymous usage patterns.

What we do NOT do

• We do not sell your data. Ever.
• We do not show ads or take payment from employers to surface their roles.
• We do not share your resume with employers without your explicit action (you click Apply, which opens the company's site).

Third-party processors

To operate Waygrove, we rely on a small number of vendors who process data on our behalf:

• Supabase & Google Cloud — storing user accounts, tracked jobs, and job feed.
• Groq — running the Orin AI model. Conversation content (your resume, your questions) is sent to Groq for inference. Groq does not train on this data per its terms.
• Render — hosting the backend API.
• Cloudflare Pages — hosting the static frontend.
• Gmail SMTP — delivering magic-link login emails and daily digest emails.
• Public H-1B disclosure records — we reference publicly available employer disclosure datasets (sponsor company names and aggregate filing counts only). No user data is shared with any government agency, and we have no affiliation with any government body.

Your rights

You can export your profile and tracked applications, delete your account at any time, and opt out of digest emails. To exercise any of these rights, email us at the address in the Contact section.

Children

Waygrove is not directed to children under 13. If you're a minor, please use Waygrove only with parental supervision.

Changes

We'll post material changes here and update the "Last updated" date. Continued use after changes means you accept the new policy.

Terms of Service

Eligibility

You can use Waygrove if you're 13 or older. By using Waygrove, you confirm the information you provide is accurate to the best of your knowledge.

What Waygrove is

Waygrove is a career tool: a curated visa-friendly job feed plus an AI assistant (Orin) that helps with resumes, cover letters, interviews, and search strategy. Waygrove is not an employer, recruiter, immigration attorney, financial advisor, or guaranteed pathway to any outcome.

Your content

You own everything you upload (resume, profile, tracked applications). By using Waygrove, you give us a limited license to store and process that content solely to operate the service for you. You can delete your content at any time by deleting your account.

Acceptable use

• Do not impersonate others or upload someone else's resume without permission.
• Do not attempt to scrape, reverse-engineer, or overload the service.
• Do not use Waygrove to send spam, phishing, or abusive content.
• Do not use Orin-generated text to mislead employers about your qualifications or experience.

AI output disclaimer

Orin produces AI-generated text. We strive to keep it accurate and grounded in your real resume, but AI can make mistakes. Always review AI output before sending it anywhere. Waygrove is not responsible for outcomes resulting from using AI-generated content.

No guarantees

We make no guarantees about job placement, H-1B sponsorship, visa outcomes, salary, or any other career result. Sponsorship data shown on job listings is historical and does not guarantee any specific employer will sponsor any specific role.

Termination

You can delete your account at any time. We can suspend or terminate accounts that violate these terms or applicable law.

Limitation of liability

To the maximum extent permitted by law, Waygrove is provided "as is" without warranties of any kind. We are not liable for indirect, incidental, or consequential damages arising from your use of the service.

Governing law

These terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws principles.

Cookie Policy

What cookies we use

• Session cookie (sucess_session): required. Keeps you signed in for 30 days. Without this, you can't use the app.
• Local storage: we store a small "Orin nudge dismissed at" timestamp in your browser so we don't keep showing the assistant popup. No personal data is in local storage.

We do not use third-party advertising cookies, social tracking pixels, or analytics that fingerprint users.

How to control cookies

You can clear cookies and local storage from your browser settings. Doing so will sign you out and reset UI preferences.

Responsible AI Statement

Orin is built with these principles:

• No fabrication. Orin is instructed never to invent experience, metrics, technologies, or credentials. Resume rewrites are constrained to content the user already provided.
• Transparency. Confidence labels are shown on AI suggestions where appropriate. Users see "before/after" diffs on resume optimizations.
• No deceptive UX. AI-generated content is labeled. Waygrove does not pretend Orin is human or hide that you're talking to an AI.
• Visa-specific accuracy. Orin refuses to give immigration legal advice and refers users to qualified attorneys and DSO offices for legal questions.
• Bias awareness. Orin is instructed to coach on substance, not on changing names, accents, or other identity markers. It will not encourage users to anglicize their names or omit international experience.
• Human-in-the-loop. Users always review and edit AI output before sending it anywhere. Waygrove never auto-applies to jobs on your behalf.
• Data minimization. Orin only receives the minimum context needed for the current task (your profile + the active job, not your full history every turn).

Underlying model: Llama 3.3 70B served via Groq. We may change models over time to improve quality; we'll note major changes here.

Accessibility

We aim to meet WCAG 2.1 AA. Specifically:

• All interactive elements are keyboard-accessible. Press / to focus search; press Esc to close any drawer or modal.
• Color contrast meets AA on all text-on-background pairs in our theme.
• Forms have visible labels. Buttons have descriptive text or aria-label.
• Modals and drawers have aria-hidden state and trap focus appropriately.
• We avoid relying on color alone to convey information.

If you hit an accessibility barrier, please tell us — we'll prioritize a fix. See Contact.

Security

• Authentication: passwordless magic links signed with HMAC. Links expire in 15 minutes. Session cookies are HttpOnly, Secure, and SameSite=Lax, with a 30-day TTL.
• Transport: all traffic is HTTPS (TLS 1.2+).
• Storage: Google Workspace and Render employ industry-standard at-rest encryption.
• Secrets: API keys are stored as environment secrets, never in source control or in client-side code.
• Disclosure: if you find a security issue, please email us before public disclosure. We respond within 5 business days.

Contact

For privacy questions, data export/deletion requests, security disclosures, accessibility issues, or anything else:

• Email: hello@waygrove.app
• Backup: surajpatil05112001@gmail.com

We aim to respond within 5 business days.