Sarto Privacy Policy

Last updated: July 23, 2026

Sarto tailors your resume to job postings. This policy describes exactly what data the app and its server handle, and how.

Who we are

Sarto is a product of BEAST LABS, SLU, the data controller for the processing described here. Registered in the Registry of Companies of the Principality of Andorra (registration no. 23757, book S-455, page 7180), NRT L-718834-Y. Registered office: Avinguda Verge de Canòlich 124, 1r pis, 2a porta, despatx 12, Edifici La Freixera, Sant Julià de Lòria, AD600, Andorra. Company site: beast-labs.com. Privacy contact: [email protected].

Your resume and job postings

Resume files, photos, and job postings you import are sent to our server only to be read into structured text and scored, and to generate your tailored resume and cover letter. They are processed transiently and are not stored on the server. Your resume, applications, and exports are stored on your device. Deleting the app deletes them.

Processing uses third-party large-language-model APIs (OpenAI and/or Anthropic, depending on the task) under agreements that do not permit training on your data. Our own server runs in the European Union (Germany).

Account (optional)

You can use Sarto without an account. If you sign in with email, Apple, or Google, we store your email address (or the provider identifier) solely to recognize you across devices and preserve your subscription. Your email is never used for marketing or shared for advertising. One-time-code emails contain no marketing.

Purchases

Subscriptions are processed by Apple and managed through RevenueCat. We receive subscription status (not payment details) to unlock features.

Analytics

We record anonymous usage events (for example, "score shown") to improve the product. Analytics events never contain resume or job-posting content, and are deleted after 365 days.

Advertising measurement

To know whether our ads work, the app shares limited signals with the advertising platforms we advertise on: a device advertising identifier (only if you allow tracking when iOS asks), app install and launch events, and purchase events (product, price, and currency). Your resume, job postings, and email address are never shared with advertising platforms. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

Our website, sarto.app, uses Google Ads conversion cookies for the same purpose: to measure whether visits and App Store clicks come from our ads. These cookies are set only if you accept them in the cookie banner, and you can change your choice at any time via "Cookies" in the site footer. They never receive resume content or your email address.

Your choices and rights

Depending on where you live, you may have the right to access the personal information we handle, to have it corrected or deleted, to object to or restrict its processing, and to opt out of its sharing for advertising. This includes the rights granted by the EU/EEA GDPR and the California CCPA/CPRA. Turning off tracking in iOS Settings stops the sharing of your device identifier. For any privacy request, email [email protected]. We respond within 45 days. If you are in the EU/EEA you also have the right to lodge a complaint with your local supervisory authority.

Deleting your data

Settings → "Delete all my data" removes your data from your device and our server, immediately and irreversibly (App Review 5.1.1(v) compliant). You can also email us for deletion.

Contact

[email protected] · BEAST LABS, SLU, Sant Julià de Lòria, Andorra