JobOfferMaster

Privacy Policy

Effective date: October 9, 2026

JobOfferMaster ("we", "us", or "our") operates the JobOfferMaster Chrome extension and the associated web application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

  • Personal Information: When you sign in with an email address or a third‑party provider (e.g., Google, LinkedIn), we collect your name, email address, and profile picture. We also store your marketing email preference, when it last changed, and when you actively opted in after turning it off.
  • Job Data: The extension captures job postings you choose to save. This includes the job title, company name, location, salary range (if displayed), and the full job description. In Private Mode, supported record contents are encrypted in your browser before storage. Some indexing and operational metadata remains readable by the Service, including application company, role, status, applied date, and job URL. The current field-level boundary is published on our Trust page.
  • Usage Data: We automatically collect information about how you interact with the extension and the web app, such as IP address, browser type, operating system, and timestamps.
  • AI Usage Metadata: We record token counts, API calls, feature/model labels, timestamps, and estimated costs for app AI requests. Signed-in requests can be linked to your internal account ID. This operational metadata is not anonymous or part of your encrypted vault. Administrators can view account-level usage to understand operating costs; the usage ledger does not store prompts, resumes, generated answers, recovery codes, or a copy of your name or email.
  • Cookies & Local Storage: We use cookies only for authentication sessions and to remember your preferences.

2. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Generate AI‑enhanced summaries, interview questions, and resume recommendations.
  • Send you security‑related notifications (e.g., password resets).
  • Where permitted by applicable law, send product news, tips, and offers when your marketing email preference is on. This preference starts on for new and existing accounts. You can turn it off at any time in your profile settings. We record when you change it. A default-on preference is not recorded as affirmative consent; consent is recorded only if you actively switch it from off to on. Marketing messages sent through Resend include an unsubscribe option.
  • Analyze aggregate usage trends to improve product features.

3. Sharing Your Information

  • Service Providers: We may share data with cloud providers (e.g., Vercel, Supabase) that host our infrastructure. We use Resend to deliver email and manage marketing contacts, including their email addresses and unsubscribe status. Resend may also process email delivery and engagement data. These providers process data to support the Service.
  • AI and Document Processing: When you explicitly use matching, tailoring, assistant, extraction, or parsing features, the selected resume, job, profile, or document content is transmitted to our server and may be transmitted to the configured AI or document-processing provider for that request. Private Mode encrypts the saved result at rest; it does not make these live processing requests end-to-end encrypted.
  • Practice Question Evaluation: When server-side LangSmith tracing is enabled, generating practice questions or a private role-preparation package also creates evaluation traces. These retain the job description and PII-redacted resume, prompt, generated questions, and preparation content outside the encrypted vault. We mask recognizable candidate names, contact details, personal links, and identifiers before sending trace content. If the candidate identity cannot be recognized, resume-derived content is withheld. Professional history may still identify someone; this is not a guarantee of anonymity. Trace retention follows the LangSmith project configuration and is separate from deletion of your saved vault records.
  • Legal Requirements: We may disclose information if required by law or to protect our rights, property, or safety.
  • We do not sell or rent your personal information to third parties.

4. Data Retention

Your job data and account information are retained until you delete your account or remove individual entries. Authentication sessions are cleared after 30 days of inactivity.

If an account is deleted, its link to AI usage records is removed. Numeric usage and cost records may remain for operational reporting without the deleted account identifier.

5. Security

We use TLS in transit and access controls around authenticated account data. Private Mode encrypts supported vault payloads in the browser before storage using AES-256-GCM. It does not encrypt every metadata field or every live processing request. Our current implementation evidence, known limitations, threat model, and local browser verification tool are published on the Trust page. We do not currently claim completion of an independent security audit.

6. Your Rights

  • Access, correct, or delete your personal data via the Settings page.
  • Withdraw consent or turn off marketing email in your profile settings or through the unsubscribe link in a marketing message at any time.
  • Export your data in a portable format.

7. Children’s Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new version on this page with an updated effective date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at https://joboffermaster.com/contact.