Legal

Privacy Policy

How Operation MOS collects, uses, discloses, and retains information across the website, the product, and support operations.

Do not submit classified material, export-controlled information, or sensitive operational details. Operation MOS is built for civilian career translation, not for handling restricted defense data.

Information we collect

Operation MOS collects information you provide directly, information generated through use of the service, and limited technical information needed to operate, secure, and improve the platform.

• Account data: name, email, password credentials, authentication factors, portal/organization context.
• Career-content: résumé fields, work history, MOS details, cover-letter drafts and job context, LinkedIn drafts, interview-prep inputs, uploaded source material, and signed-in résumé-review uploads.
• Support records and business communications related to technical help, account changes, or privacy requests.
• Technical and security metadata: browser/device info, session identifiers, feature usage telemetry, audit logs.

How we use information

Information is used where reasonably necessary to provide, secure, maintain, and improve Operation MOS. Enough information to do the job — not a license for unrelated purposes.

• Provide AI-assisted drafting, editing, export, and progress-tracking workflows.
• Authenticate users, enforce role-based access, prevent abuse, investigate incidents, protect accounts.
• Respond to support requests, troubleshoot defects, administer organization access.
• Measure reliability, feature usage, and workflow friction to improve performance.
• Maintain records needed for compliance, dispute resolution, and operational administration.

Operation MOS does not sell personal information to data brokers or employers and does not use personal information for unrelated third-party advertising.

Cookies and analytics

Operation MOS uses cookies and similar technologies for session integrity, portal security, and product analytics.

• Essential session technologies support authentication, CSRF protection, and portal continuity.
• Analytics and telemetry help identify reliability issues, feature adoption, and workflow friction.
• Some technologies may be provided by service providers acting on our behalf under appropriate controls.

What we track. As part of product analytics, Operation MOS records:

• Pages and routes visited, and the approximate time spent on each.
• Interactions with platform features — for example, starting or saving a résumé, uploading a résumé, running an ATS score, generating LinkedIn content, or updating a profile.
• Whether a tracked action started, succeeded, or failed, and how long it took.
• Session and device information (such as a session identifier, device type, and browser) tied to the activity above, not to unrelated browsing.

This activity data does not include passwords, authentication tokens, full form submissions, or the content of résumés, cover letters, or other career materials — only which action occurred, its outcome, and enough non-sensitive context to understand it.

Why we track it. This activity data is used to:

• Improve platform functionality and understand how features are actually used.
• Troubleshoot errors and diagnose failed actions.
• Improve the overall user experience and reduce workflow friction.
• Support security monitoring and abuse prevention.
• Produce aggregate product-usage analytics.

When a veteran enters an enterprise organization's code, that organization can review activity history for its own linked veterans only, consistent with the enterprise relationship described in these policies. Activity data is not shared with any other organization or with employers.

Applying a counselor's code records your consent for that counselor to see your résumé, exported documents and transition progress, and to keep notes about your sessions. At sign-up, access starts after you confirm your email; in Settings, it starts when you apply the code. Administrators of that counselor's organization can also see the résumé, documents and progress once you agree. A counselor assigned by an organization can see this information only after you agree. You can end counselor access at any time in Settings. Notes the counselor already wrote, and your name and email on the organization's member list, stay.

Operation MOS uses Microsoft Clarity for session analytics. Clarity may record page interactions — including clicks, scrolls, mouse movement, and navigation — as session replays and aggregate heatmaps so we can understand how veterans use the product and where workflows create friction. Microsoft processes this interaction data on our behalf for product-improvement purposes. See Microsoft's privacy statement for how Microsoft handles this data.

Browser settings that block cookies may impair authentication and some platform functions.

AI processing and training

Operation MOS uses Microsoft Azure OpenAI Service as its AI provider to generate, translate, and refine résumé, cover-letter, LinkedIn, and interview-preparation content. These are OpenAI’s models, run by Microsoft inside its Azure cloud; what you submit is not sent to OpenAI. For cover letters, only the résumé and eligible saved evidence you select, the job context you enter, and your answers are sent over encrypted channels when you ask us to create or revise a draft. Submissions are processed only for the purpose of returning the requested output.

For Matching jobs, job-title planning may send a limited, redacted set of résumé facts — your target role, years of experience, recent job titles and skills — to the configured AI provider to suggest job titles. That request does not include your full résumé or location.

Operation MOS does not use your résumé content, profile data, or any user-submitted material to train AI models. Microsoft’s published terms for this service say that what you submit and what is returned are not available to OpenAI and are not used to train AI models. Microsoft may check submissions for abuse of its service, by automated means and where needed by its own authorized staff. We do not sell user content to AI vendors and do not authorize third parties to use it for model improvement.

Signed-in résumé-review uploads are processed to extract readable résumé text and return review feedback. Uploaded files are processed in memory and are not retained as stored files. Review feedback and extracted text are temporarily retained in an encrypted cache linked to your account; expired reviews are removed by the retention process. Operational logs for this workflow exclude the uploaded file contents, extracted résumé text, and uploaded filename.

Service providers and sharing

Information is disclosed only where reasonably necessary to operate the service, fulfill user requests, comply with law, or protect users and the platform. The current list of service providers operating on our behalf is summarized below; the list may change as the platform evolves, and the most recent effective date on this page reflects the current state.

• Infrastructure and hosting: Microsoft Azure (application hosting, managed database, object storage).
• AI processing: Microsoft Azure OpenAI Service (résumé translation, cover-letter drafting, LinkedIn drafting, interview-prep generation, ATS tailoring).
• Error monitoring: Sentry (application error tracking, performance monitoring, source-map symbolication).
• Session analytics: Microsoft Clarity (session replays and heatmaps of page interactions, clicks, and scrolls for product improvement).
• PDF conversion: ConvertAPI, when used to convert a résumé or ATS export to PDF. The generated résumé document — which may include the contact and career details in it — is sent for conversion, and the converted PDF is returned to you.
• Job search: SerpApi, which searches Google Jobs. When you open Matching jobs, SerpApi receives a job-title search phrase and general location, not your name, email, phone number or full résumé text.
• Sign-in with Google or Microsoft: if you choose to sign in with one of these accounts, that company confirms who you are and sends us your name and email address. It learns that you signed in to Operation MOS.
• Email and support: service providers used to deliver transactional email, verification messages, and respond to support tickets.
• Authorized workflows: enterprise, counselor, or organization features that share content with parties the user has intentionally enrolled with.
• Legal and safety: courts, regulators, or law enforcement where disclosure is required by law or reasonably necessary to protect rights, safety, or service integrity.

Operation MOS does not sell personal information. We do not disclose user information to employers, recruiters, or outside organizations for marketing or lead-generation purposes.

Security

The platform uses administrative, technical, and product controls designed to reduce unauthorized access, protect account integrity, and support reliable service delivery.

• TLS encryption in transit for all client-server communication.
• Personally identifying fields (such as name, email, contact details, and certain profile metadata) are encrypted at rest in the production database in addition to transport encryption.
• Authenticated access controls, session management, and security-oriented monitoring for the application and its infrastructure.
• Role-based separation across user, admin, enterprise, and counselor access paths.

No platform can eliminate all risk. Avoid submitting information that would create unacceptable personal, operational, or professional exposure if disclosed or mishandled.

Eligibility and profile integrity

Operation MOS is intended for users with a legitimate affiliation to the United States Army, Air Force and Space Force, Coast Guard, Navy, or Marine Corps. Information you submit, including service history, MOS/rate/AFSC details, and affiliation information, may be reviewed to confirm it is not false, misleading, or submitted without authorization.

Where a profile is found to contain false, misleading, or unauthorized information, Operation MOS may restrict, suspend, or remove the associated account and content, consistent with the Terms of Service and, where permitted by applicable law, without prior notice.

Retention and deletion

Operation MOS keeps information only as long as needed to operate the service, support the user, and meet legal and security obligations.

• Active accounts: account and résumé data is retained while the account is in use.
• Deleted accounts: the account is deactivated at once and marked for permanent deletion after a 30-day grace period.
• Résumé-review uploads: uploaded résumé files are processed in memory and are not retained as stored files. Encrypted review results and extracted text expire from the temporary review cache and are removed by the retention process.
• Encrypted backups: data may persist in encrypted backups for up to 90 days before standard backup-rotation cycles complete.
• Aggregated analytics: de-identified, aggregated usage and reliability data may be retained indefinitely for product-improvement purposes.
• Legal and security records: certain logs and records may be retained longer where required by law, for dispute resolution, or for security investigations.

Your choices and rights

You have meaningful control over the information Operation MOS holds about you. Most actions can be taken directly inside the product; the rest are handled through support.

• Update or remove content: edit or delete résumé content, work history, profile fields, and generated drafts through the product's built-in controls.
• Data export: download a copy of your account data in Settings, under Privacy controls.
• Account deletion: delete your account in Settings. Deleting deactivates the account at once and marks it for permanent deletion after a 30-day grace period. To cancel in that time, email support@operationmos.com.
• State-specific rights: depending on your state of residence — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) — you may have additional rights to know, access, correct, delete, or limit certain uses of your personal information. To exercise any of these rights, contact support@operationmos.com.
• Appeals: if a privacy request is denied, you may appeal the decision by replying to the original support thread; an appeal is reviewed by the founder.
• Your responsibility: you remain responsible for the information you include before exporting, sharing, or publishing generated materials, and for reviewing AI-generated output before using it externally.

Children

Operation MOS is intended for adults and older students using the service for career development. It is not knowingly designed for children under 13 and does not intentionally collect personal information from them.

If you believe a child has submitted personal information inappropriately, contact support.

Changes to this policy

This policy may be updated as the platform, laws, vendors, or internal practices evolve. When that happens, the effective date on this page will be revised.

Continued use of the service after the effective date of an updated policy constitutes acceptance of the revised policy for future use, to the extent permitted by law.

Contact

This policy applies to services operated by Operation MOS, LLC. Questions about privacy, data handling, or account deletion can be sent to support@operationmos.com.

Include enough detail for the account or request to be identified and answered efficiently.