Privacy Policy

We collect the following categories of information to provide and improve our Services:

• Account Information: Email address, name, phone number, and password when you create an account.
• Resume and Career Data: Uploaded resumes, cover letters, work history, education, skills, career preferences, and job descriptions.
• Interview Data: Interview recordings, transcriptions, responses to interview questions, performance metrics, and AI-generated feedback.
• User-Generated Content: Custom interview questions, notes, feedback, saved responses, and any content you create using our Services.
• Payment Information: Payment details are securely processed by Stripe. We do not store credit card numbers or banking information.
• Technical Data: IP address, browser type, device information, operating system, usage logs, and performance data.

We use the information we collect for the following purposes:

• Provide, personalize, maintain, and improve our Services
• Process your transactions and manage your account
• Generate AI-powered interview questions and feedback tailored to your experience
• Analyze your resume and provide optimization suggestions
• Respond to your comments, questions, and customer support requests
• Send you technical notices, updates, security alerts, and administrative messages
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

OfferGenie Copilot is available as a Chrome extension that a signed-in user starts from Job Apply. It helps you review saved application details and add only the details you select to a supported employer form. You remain responsible for reviewing and submitting the form.

Information Copilot handles

• Short-lived credentials used only to connect the extension securely to your OfferGenie account and the application you selected
• Application details you choose to use, such as your name, email address, telephone number, mailing address, work-eligibility answers, optional equal-opportunity answers, and a label showing where each saved detail came from
• Limited information about the selected employer form, including its web address, field labels, field types and options, whether fields are required or disabled, and signals used to confirm that the form has not changed
• Workflow details such as the fields you selected, whether each field was added or already matched, timestamps, your submit action, and limited confirmation signals used for your application history

Optional equal-opportunity details, including ethnicity, gender, veteran status, or disability status, start unselected and are added only when you choose them for that application. Copilot may compare a current form value locally to show whether it matches a saved detail, but it does not send applicant-entered current values while discovering the form. It also does not send confirmation-page text or HTML.

Copilot does not collect cookies, passwords, file contents, complete page HTML, screenshots, device location, or browsing activity outside the employer application and confirmation pages you selected.

How this information is used

We use this information only to open the application you selected, show the review panel, add the fields you choose, preserve progress safely, and record limited confirmation evidence in your application history. We do not sell this information or use it for advertising, unrelated profiling, or creditworthiness decisions.

Our personnel do not read extension user data unless you affirmatively consent for support, access is necessary to investigate security or abuse, disclosure is required by law, or the information has been aggregated and de-identified for internal operations. Our use of information received through Copilot complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Storage, deletion, and sharing

Temporary extension state, including approved application details, field selections, secure session credentials, and results waiting to be delivered, stays in browser-session storage, is available only to trusted extension components, and clears when that browser session ends. The one-time credential used to start a workflow is never saved and is removed immediately after use. Server-side account and workflow records follow the retention and deletion rules in this Privacy Policy.

Copilot communicates only with OfferGenie and writes the details you choose into the selected employer form. The employer handles a completed form under its own privacy terms. OfferGenie service providers, legal disclosures, security disclosures, and business transfers remain governed by the other sections of this Privacy Policy. You may request access, correction, or deletion by contacting us as described below.

We use artificial intelligence to enhance our Services. Here's how:

• Interview responses and transcriptions are processed by AI to provide real-time feedback and personalized coaching suggestions
• We use OpenAI's API to generate interview questions, analyze responses, and provide improvement recommendations. Your data is processed according to OpenAI's data usage policies
• Resume data is analyzed by AI to provide optimization suggestions and match job requirements
• We do NOT use your personal interview data to train our own machine learning models without your explicit consent
• Audio recordings are processed through Azure Speech Services for transcription. These recordings are deleted immediately after transcription unless you choose to save them
• AI-generated content is tailored to your specific profile and is not shared with other users

We share your information only in the following circumstances:

• We NEVER sell, rent, or trade your personal information
• Service Providers: We share data with trusted third-party services that help us operate our platform (see 'Third-Party Services' section)
• Legal Requirements: We may disclose information if required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred with appropriate notice
• With Your Consent: We share information when you explicitly authorize us to do so
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you personally

We work with trusted third-party services to provide our Services:

• OpenAI: For AI-powered interview coaching and content generation
• Azure Speech Services: For speech-to-text transcription of interview recordings
• AWS S3: For secure cloud storage of resumes and user-uploaded files
• Stripe: For secure payment processing (we never see or store your credit card details)
• Google Analytics: To understand usage patterns and improve our Services
• Email Service Providers: For transactional emails and communications

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for authentication, security, and basic site functionality. These cannot be disabled
• Analytics Cookies: Help us understand how you use our Services to make improvements
• Preference Cookies: Remember your settings, language preferences, and personalization choices
• Session Cookies: Maintain your logged-in state during your visit
• Third-Party Cookies: Used by our service providers (like Google Analytics) to provide their services
• You can manage cookie preferences through your browser settings. Note that disabling cookies may limit functionality

We retain your data only as long as necessary to provide our Services:

• Active Account Data: Retained while your account is active and for 30 days after account closure
• Interview Audio and Video: Not written to our servers. Audio is transcribed in real time and the raw audio and video are discarded
• Voice Samples: Stored only if you record one yourself, and retained until you remove it
• Transcriptions: The text of the session, together with the questions and the AI's answers, is saved to your account so your report and feedback can be generated from it, and retained while the account is active
• Resume Data: Retained while your account is active. You can delete individual resumes at any time
• Payment Records: Retained as required by financial regulations (typically 7 years)
• Usage Logs: Retained for 12 months for security and analytics purposes
• Account Deletion: You can request deletion of your account and personal data at any time by contacting [email protected]
• Upon deletion request, we will remove your personal data within 30 days, except where retention is required by law

We take the security of your data seriously:

• Encryption: All data transmissions are encrypted using SSL/TLS protocols
• Secure Storage: Your data is stored in encrypted databases with restricted access
• Access Controls: Only authorized personnel with a legitimate need can access personal data
• Regular Security Audits: We conduct regular security assessments and updates
• Password Protection: User passwords are hashed and salted using industry-standard methods
• Third-Party Security: We require our service providers to maintain appropriate security measures
• Incident Response: We have procedures in place to detect, investigate, and respond to data breaches

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request we limit processing of your personal information
• Objection: Object to certain uses of your personal information
• Withdraw Consent: Withdraw consent for processing where we rely on your consent
• To exercise any of these rights, please contact us at [email protected]
• We will respond to your request within 30 days in accordance with applicable laws

Additional rights based on your location:

• California Residents (CCPA): You have the right to know what personal information we collect, request deletion, opt-out of sale (we don't sell data), and non-discrimination for exercising your rights
• European Residents (GDPR): You have enhanced rights including data portability, right to erasure, and the right to lodge a complaint with supervisory authorities
• Nevada Residents: You may opt-out of the sale of personal information (we don't sell data)
• Other Jurisdictions: We comply with applicable data protection laws in all regions where we operate

Protecting children's privacy is important to us:

• Our Services are not intended for children under the age of 16
• We do not knowingly collect personal information from children under 16
• If you are under 16, please do not use our Services or provide any personal information
• If we learn we have collected information from a child under 16, we will promptly delete it
• Parents who believe we have collected information from their child should contact us immediately at [email protected]

Your information may be transferred internationally:

• Our Services are operated from the United States
• Your information may be stored and processed in any country where we or our service providers maintain facilities
• By using our Services, you consent to the transfer of information to countries outside your country of residence
• We ensure appropriate safeguards are in place for international transfers as required by law

• We may change this Privacy Policy from time to time.
• If we make changes, we will notify you by revising the date at the top of the policy.
• In some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification).

If you have any questions about this Privacy Policy, please contact us at: [email protected]
We will make every effort to respond to your inquiries in a timely manner.