Infrastructure
Lynt runs on Vercel with Supabase (Postgres) for the database and authentication. All traffic is served over HTTPS with HSTS enabled, and every response carries a Content Security Policy, X-Frame-Options, and standard hardening headers to block clickjacking and content-sniffing attacks.
Authentication
Sign-in is Google OAuth only: Lynt never stores a password. Every database table that holds your content is protected by Postgres row-level security, scoped to your account, in addition to the same check in the application layer.
Your content
Your resumes, cover letters, and other content are private by default. Public resume pages (lynt.space/your-username) are opt-in and only publish what you choose to make public. We don't sell your content, and we don't use it to train third-party AI models: AI features send only the text needed to generate the specific suggestion you asked for.
Account deletion
Deleting your account removes or anonymizes your data within a reasonable time, except where we're required to retain it (for example, for security or legal reasons). See the Privacy Policy for the full data lifecycle.
Reporting a vulnerability
If you find a security issue, email contact@lynt.space with "Security" in the subject line and enough detail to reproduce it. We investigate every report and will follow up directly: please give us a reasonable window to fix an issue before disclosing it publicly.
Related pages
- Privacy Policy: what we collect and how it's used.
- Terms of Service: the terms that govern your use of Lynt.
- Report content: DMCA and abuse reports for content hosted on Lynt.