Privacy Policy

1. Data We Collect

We collect information necessary to provide our career services:

• Identity Data: Name, email address, and profile picture (via Google Sign-In).
• Career Data: Resumes, job descriptions, cover letters, and interview notes you create or upload.
• Usage Data: Anonymous analytics on feature usage to improve the product (e.g., number of resumes generated).
• Payment Data: We do not store credit card details. All payments are processed by our third-party provider (Stripe).
• Chrome Extension Data: When you use the JobCanvas Chrome extension, we collect job posting content (title, company, location, description, salary, and URL) from LinkedIn, Indeed, and Glassdoor pages you choose to save. We also collect your Google authentication credentials (OAuth token) to securely link saved jobs to your account. The extension only reads page content when you click the save button — it does not passively track your browsing history or monitor pages in the background.

2. How We Use AI & Data Processing

To provide our core features (Resume Tailoring, Interview Coach), we transmit specific data to third-party AI providers (Google Cloud Vertex AI).

• No Training: We use enterprise API endpoints configured to not use your data for training public AI models.
• Ephemeral Processing: Your resume text is sent to the AI model for the sole purpose of generating your response and is not stored by the AI provider for their own use.
• Security: All data is transmitted via SSL/TLS encryption.

3. Data Storage & Retention

Your personal data is stored securely in **Google Cloud Firestore** (US locations). We retain your data for as long as your account is active. You may export or delete your data at any time via the application settings or by contacting support.

4. Third-Party Sharing

We do not sell your personal data. We only share data with trusted service providers required to operate the Service:

• Google Firebase: Authentication, Database, and Hosting.
• Stripe: Payment processing.
• Google Vertex AI: Large Language Model processing.

5. Your Rights (GDPR & CCPA)

Regardless of your location, we grant you the following rights:

• **Access:** Request a copy of all data we hold about you.
• **Correction:** Update incorrect or incomplete data.
• **Deletion:** Request permanent deletion of your account and data ("Right to be Forgotten").
• **Portability:** Request your data in a structured, machine-readable format.