Privacy notice
Moran processes your sign-in identity, CV text, career preferences, application notes, generated drafts, usage records and payment references to provide career guidance and manage your membership.
Your name and profile photo
You can change your account display name and upload or remove an optional profile photo in My profile. Photos are cropped to a small square JPEG, stripped of metadata and encrypted in private Google Cloud Storage. The unprocessed photo is not retained or sent to AI. Only your signed-in account can view the stored photo; public identity-provider photos are not displayed. Your export includes an authenticated download path. Removing your photo or deleting career data immediately revokes access and queues storage deletion.
AI processing and your choices
With your consent, CV text is sent to Anthropic for analysis and application drafting. If you upload a CV image, a resized copy with metadata removed is also sent to Anthropic to extract its text. Review the transcription because image reading can make mistakes. Career analysis and employer job descriptions are also used for matching. Do not upload identity documents, financial account details, health information or other unnecessary sensitive data. Anthropic’s applicable API terms and retention policies govern its processing; Moran does not promise zero provider retention.
Web job discovery
Manual and scheduled job searches also use Anthropic web search to find public LinkedIn and other job-board listings. Web research uses generic role titles and variants, markets, remote-work preferences, seniority, role type and recognized public topic labels such as cloud or healthcare, not your CV, identity, contact details or private application notes. Anthropic and its search providers process those queries under their applicable terms. Public listing summaries and source URLs may be reused in Moran’s public discovery page; your private assessment and CV are not published. Search-indexed listings are not independently confirmed open. Follow source links to verify availability and review the source site’s privacy terms.
OpenAI job discovery
When configured, manual and scheduled searches send generic role queries, location preferences, seniority, role type and recognized public topic labels to OpenAI for web research. Your CV, identity, contact details and private application notes are not sent to OpenAI. We request that responses are not stored for later API retrieval; OpenAI's applicable processing and retention policies still apply. Cited public research is passed to Anthropic to extract listings, and your private CV-fit assessment remains with Anthropic. Source links remain visible. Indexed listings are not independently confirmed open, and generated summaries are not proof of publication dates.
OpenWeb Ninja JSearch
When configured, manual and scheduled searches also send generic target-role titles, selected job-market countries and remote-work preferences to OpenWeb Ninja JSearch. Your CV, identity, contact details and private application notes are not sent to JSearch. OpenWeb Ninja processes these queries under its applicable terms. Public job descriptions, employer details, publication dates and application links are stored and may appear in public discovery. Your CV-fit assessment remains private and is generated by Anthropic, not JSearch. Aggregated listings may be incomplete or outdated; verify current availability on the linked source.
Storage and access
Original CV uploads (including pasted text), generated PDF/Word CVs and normalized profile photos are encrypted using AES-256-GCM before upload to private Google Cloud Storage. Editable CV text, image transcriptions, analyses and drafts remain encrypted in PostgreSQL. Downloads require your signed-in account; another member or application administrator cannot download your files. No public or signed download URLs are issued. Background enhancement temporarily stores encrypted extracted text or a normalized image for processing, then removes that task input on completion, failure/interruption or deletion. Failed original uploads are queued for storage deletion. Your previous CV remains unchanged until enhancement and its downloads succeed together; improvement requests keep your original uploaded file. Identity, preferences, matches and payment references remain in the database. Authorized infrastructure operators with credentials and encryption keys may still access content; this is not end-to-end encryption.
CV improvement details
You can save private, encrypted answers to each CV improvement suggestion without starting an AI request. With your confirmation and consent, these details are sent to Anthropic with your CV to produce a new draft and updated career profile. After successful enhancement, the confirmed details become part of your source evidence for later CV guidance and matching; unanswered suggestions are not treated as facts. Saved answers remain available after a failed request and are cleared after successful enhancement or replacement of your CV. Your source evidence, saved answers and enhanced drafts are included in career-data export and deletion.
Applications and background drafting
When you select an application button while signed in, Moran records the role, click count and timestamps so it can follow up on your progress. Opening an employer link is not treated as a submitted application. You confirm your application status yourself. Background tailoring requests store encrypted instructions until processing ends, then remove those instructions from the task. Task status and in-app notifications remain with your career records. Career-data export and deletion include these records.
Support and administration
Support and career-data deletion requests, their messages and status are stored in the database and visible only to the requesting member and authorized administrators. They are included in your data export and are retained separately from career data. Do not include passwords, payment credentials or CV text in support messages. Messages are not automatically sent to AI providers. Administrator account actions and request processing are audited without copying message bodies into the audit log. Administrators use separate password-based sign-in.
Other providers
Google or LinkedIn handles member sign-in. Pesapal handles payment details; Moran stores payment references, amounts and verified statuses, not card numbers. Infobip processes your email address, reminder and delivery information when you enable email reminders. Infobip and WhatsApp process your phone number, job-result notification and delivery information only when you enable WhatsApp alerts. These notifications contain a match count and a link, not your CV. Railway hosts the application and database. Processing may take place outside your country; deployment region and vendor terms should be reviewed before using the service.
Control and retention
You can pause searches or change channel consent in My profile under Search preferences. Export and career-data deletion are available in My profile. Deletion immediately revokes private-file access and queues physical removal; the worker retries failed storage deletions. Cloud Storage soft-delete, retention policies and backups may retain encrypted copies after deletion. WhatsApp consent timestamps and delivery records are included in your export; career-data deletion clears the phone number and consent and deletes queued delivery records. Account and billing records are retained separately for operating and accounting obligations. Provider-held delivery records follow their applicable retention policies. Use your account email when requesting account closure or other data-rights assistance.
Cookies and communications
Essential session and sign-in cookies are required. Short-lived HTTP-only cookies also remember your selected job during profile setup and unsubscribe confirmation. Administrator record filters and pagination use URL query strings; do not put credentials or private support messages into search filters. This build does not add advertising trackers. Email and WhatsApp alerts are separately optional. Saving a phone number does not subscribe you. Email unsubscribe links work without signing in and affect email only. You can disable WhatsApp in Search preferences; pausing searches turns off both channels. Changes apply to notifications not already sent to a provider.