JobCraft Privacy Policy

Last updated: March 26, 2026

1. What JobCraft Does

JobCraft is a Chrome extension that analyzes job listings against your resume to provide fit scores, tailored resumes, and cover letters. This privacy policy describes how we collect, handle, store, and share your personal data.

2. Data Collection

We collect only the data necessary to provide JobCraft's functionality. JobCraft uses Google OAuth for authentication. We do not collect, store, or have access to your password. When you sign in, Google securely verifies your identity and provides us only with your name and email address. No password is ever transmitted to or stored on our servers.

Below is a complete list of every data type we collect:

Data Type	What We Collect	When Collected
Authentication data	Your name and email address from your Google account (no password is collected — authentication is handled entirely by Google OAuth)	When you sign in via Google OAuth
Resume document	The resume file you upload (DOCX or PDF text content)	When you upload your resume in the extension
Cover letter template	The cover letter file you upload (DOCX or PDF text content)	When you optionally upload a cover letter
Job listing text	The text content of the job description on the current page	Only when you click "Analyze This Page"
Profile preferences	Optional info: target seniority level, LinkedIn URL, website, job preferences	When you fill in your Profile
Analysis results	Fit scores, recommendations, tailored resume edits, and generated cover letters	After each analysis is completed
Tracked jobs	Job title, company name, source URL, status, and notes for jobs you save	When you click "Save" on a job listing

3. Data We Do NOT Collect

We do not collect, store, or have access to your password. Authentication is handled entirely by Google OAuth. Your Google password is never shared with JobCraft.
We do not track your browsing history, web activity, or visited URLs.
We do not collect health, financial, payment, or location data.
We do not monitor clicks, scrolls, keystrokes, or mouse movements.
We do not read any page content unless you explicitly click "Analyze This Page."
We do not use cookies or web tracking technologies.
We do not collect device identifiers, IP addresses, or browser fingerprints for tracking.

4. How We Handle and Use Your Data

Each data type we collect is used for a specific, limited purpose:

Authentication data (name and email only — no password) is used to create and maintain your account and authenticate API requests. We use JSON Web Tokens (JWT) for session management; no password is ever stored or processed.
Resume and cover letter are stored on our servers and sent to the Anthropic API each time you run an analysis, to generate tailored versions for the specific job.
Job listing text is sent to our server and then to the Anthropic API to evaluate your fit and generate tailored documents. The job text is stored in your analysis history.
Profile preferences are used to personalize AI-generated recommendations and job search links.
Analysis results are stored to provide your job search history and allow you to revisit past analyses.
Tracked jobs are stored to help you manage your job application pipeline.

5. Data Storage and Security

Server-side storage

Your data is stored in a PostgreSQL database on servers hosted by Render in the United States. All data is encrypted in transit using TLS/HTTPS. Database access is restricted to our application and is not publicly accessible.

Client-side storage

The extension stores the following data locally in your browser using Chrome's built-in storage API (chrome.storage.local):

Your authentication token (JWT) for maintaining your signed-in session
Your most recent analysis result (for displaying in the side panel)
A flag indicating whether you have completed initial setup

No cookies are used. No data is stored in localStorage or sessionStorage.

Security measures

All communication between the extension and our servers uses HTTPS encryption.
Authentication uses JSON Web Tokens (JWT) with expiration.
Google OAuth tokens are managed by Chrome's identity API and are not stored by our servers.
The extension requests only the minimum permissions necessary for its functionality.

6. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal data to any third party. Your data is shared only with the following service providers, solely to deliver JobCraft's core functionality:

Service	Data Shared	Purpose	Privacy Policy
Anthropic (Claude AI)	Resume text, cover letter text, job description text	Generate fit scores, tailored resumes, and cover letters	anthropic.com/privacy
Google OAuth	Authentication tokens	Sign in and verify your identity	policies.google.com/privacy
Google Drive API	Generated DOCX files	Save tailored documents to your Drive (only when you click "Open in Google Docs")	policies.google.com/privacy
Render	All server-side data	Application hosting and database storage	render.com/privacy
Sentry	Error stack traces, request metadata (no personal documents)	Error monitoring and service reliability	sentry.io/privacy

No other third parties receive your data. We do not use analytics, advertising, or tracking services.

7. Google Drive Access

JobCraft requests access to Google Drive solely to save your tailored resumes and cover letters when you click "Open in Google Docs." We use the drive.file scope, which limits access to only files created by JobCraft. We cannot read, modify, or delete any other files in your Drive.

8. Data Retention

Account data (name, email): Retained for the lifetime of your account. Deleted when you delete your account.
Resume and cover letter: Retained on our servers until you upload a replacement, delete them, or delete your account.
Analysis history: Retained for up to 12 months or until you delete individual entries or your account, whichever comes first.
Tracked jobs: Retained until you delete them individually or delete your account.
Profile preferences: Retained until you update them or delete your account.
Local browser data: Retained until you sign out, uninstall the extension, or clear your browser data.

9. Data Deletion

You can delete your data in the following ways:

Delete your account: Go to your Profile in the extension and click "Delete Account." This permanently and immediately removes your account, uploaded documents, analysis history, tracked jobs, profile preferences, and all other data from our servers.
Delete individual items: You can delete individual analysis history entries and tracked jobs from within the extension.
Uninstall the extension: This removes all locally stored data (authentication tokens, cached results, preferences) from your browser.
Email request: You may also request complete data deletion by emailing us at nishantdeshpande5@gmail.com. We will process deletion requests within 30 days.

10. Legal Basis for Processing

We process your personal data based on:

Consent: You provide consent by signing in to JobCraft and choosing to upload your resume and analyze job listings. You may withdraw consent at any time by deleting your account.
Legitimate interest: We process error monitoring data (via Sentry) to maintain and improve the reliability of our service.

11. International Data Transfers

Your data is processed and stored on servers located in the United States. If you are accessing JobCraft from outside the United States, your data will be transferred to and processed in the United States. By using JobCraft, you consent to this transfer.

12. User Rights

You have the right to:

Access your personal data (available through the extension's Profile and History sections)
Correct your personal data (update your profile, re-upload documents)
Delete your personal data (via the Delete Account button or by contacting us)
Export your data (your tailored documents are saved to your Google Drive)
Withdraw consent at any time (by deleting your account or uninstalling the extension)
Lodge a complaint with a data protection authority if you believe your rights have been violated

To exercise any of these rights, use the extension's built-in features or contact us at nishantdeshpande5@gmail.com.

13. Children's Privacy

JobCraft is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately and we will delete it.

14. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. If we make material changes to how we collect, use, or share your data, we will notify users through the extension before the changes take effect.

15. Contact

If you have questions about this privacy policy, wish to exercise your data rights, or have concerns about how your data is handled, contact us at:

Email: nishantdeshpande5@gmail.com