Privacy Policy

• Account — your email and basic profile from Google sign-in (via Supabase Auth).
• Applications you save — company, role, job description, location, and any links or notes you add.
• Profile / résumé — what you add to your profile vault, used to score fit and tailor documents.
• Usage — basic operational logs and AI-credit usage for billing.
• Gmail (optional) — only if you connect it: thread metadata for threads you link to an application, to keep status current. We do not read your wider mailbox.

• It reads a job page's content only when you choose to save it (or click "Read this page") — to capture the company, role, and description.
• It stores your sign-in session token in the browser's local extension storage so you stay logged in. Tokens are never shared with third parties.
• It talks only to the HotAuro API to save jobs and read your pipeline.

To provide the service: fit analysis, visa-sponsorship checks, company research, document tailoring, and application tracking. We use it to operate, secure, and improve HotAuro. We do not sell your personal data or use it for advertising.

We share data with processors strictly to run the product:

• Supabase — authentication and database.
• Google — sign-in, and Gmail access if you connect it.
• AI providers (e.g. OpenAI / Anthropic) — to analyse job descriptions and generate documents.
• Tavily — company research lookups.
• Stripe — payments, if you purchase credits.
• Vercel — hosting.

We keep your data while your account is active. You can delete individual applications at any time, and you can request full account and data deletion by contacting us — we'll remove your data promptly. You can disconnect Gmail or log out of the extension whenever you like.

Questions or deletion requests: [email protected].