Privacy Policy

We collect only the information we need to operate the Service:

• Account information — your email address (used for sign-in via magic link).
• Resume — the PDF file you upload, and the text we extract from it.
• Profile — structured information extracted from your resume (name, contact details, education, experience, skills, links). You can review or edit this in Settings.
• Self-identification data (optional) — if you provide answers to EEO / demographic / work-authorization questions while saving a job application, we store them as part of your profile so we can autofill them on future applications.
• Job-application snapshots — when you click “Save application” in the extension, we store the form fields and your answers from that page so you have a record of what you submitted.
• Saved-job pipeline — the jobs you swipe right on, dismiss, your filters, and the stage of each saved application.
• Authentication cookies / session tokens — used to keep you signed in.
• Payment information (when subscribed) — Stripe handles payment data directly; we never see your full card number. We receive a customer ID and subscription status.

We do not collect analytics about how you use the Service beyond what is necessary to provide it. We do not use tracking cookies for advertising.

• To provide the autofill feature on job application pages.
• To remember and display the applications you've saved.
• To improve future autofill accuracy by learning, from your saved applications, what answers you give to common questions.
• To send you account-related emails (sign-in links, billing receipts).
• To enforce our Terms of Service and prevent abuse.

We do not sell your personal information. We do not use your information for advertising.

We use a small set of vendors to operate the Service. Each receives only the information it needs:

• Supabase — database, authentication, and file storage hosting for your account data and resume PDF.
• Anthropic — AI processing. We send your resume text, profile, and form-field text to Anthropic's Claude API to power the autofill, cover-letter drafting, and profile-enrichment features. Anthropic does not train its models on our API traffic.
• Stripe — payment processing for the optional paid subscription.
• Our hosting provider — to run the Service's servers.

These vendors are bound by their own privacy practices and our agreements with them.

The Career Ember Autofill extension runs on job-application pages of supported ATS sites (Greenhouse, Lever, Ashby, SmartRecruiters, Rippling, Workday). On those pages, the extension reads the form fields so it can offer to fill them in for you. It only sends data to Career Ember when:

• You click “Autofill” — we fetch your profile to fill the form, and may send the unanswered fields to our AI to draft answers.
• You click “Save application” — we record the form's current contents and update your profile from them.

The extension never auto-submits an application. Submitting is always your action. The answers it fills in are suggestions for you to review and edit before submitting.

You can, at any time:

• Access your profile, saved jobs, and saved applications through the Service.
• Edit or delete your resume, profile fields, saved jobs, and saved applications.
• Cancel your subscription, which stops the autofill feature.
• Delete your account, which permanently removes your profile, resume, saved jobs, and saved applications from our systems.
• Export your data by contacting us at the address below.

Residents of California, the EU/UK, and other jurisdictions may have additional rights under their local laws (e.g. CCPA, GDPR). To exercise any of these rights, contact us.

We keep your information for as long as your account is active. When you delete your account, we permanently remove your profile, resume, saved jobs, and saved applications from our database within 30 days. We may retain limited information for legal, accounting, or fraud-prevention purposes (e.g. invoice records).

All data in transit is encrypted via HTTPS. Resume files are stored in private cloud storage. Database access is enforced by row-level security so that one user's data is never visible to another. No security measure is perfect; if you become aware of a vulnerability, please contact us so we can investigate.

Career Ember is not intended for individuals under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Career Ember is operated from the United States. If you use the Service from outside the U.S., you understand that your information will be transferred to, stored in, and processed in the U.S.

We may update this policy as the Service evolves. We will post the new policy with an updated effective date and, for material changes, notify you by email.

Questions or requests? Email hello@careerember.com.