CareerLunch ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and web application (collectively, the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
Information We Collect
1. Information You Provide
Account Information: When you create an account, we collect your email address, name, and any other information you choose to provide.
Profile Information: We collect information you provide in your profile, including your CV/resume, skills, work experience, education, and professional background.
Job Information: When you save job postings using our Chrome extension, we collect and store the job title, company name, job description, location, salary information, and other details from the job posting.
CV Content: We process and store the content of your CV/resume to generate tailored CVs for specific job applications.
2. Automatically Collected Information
Usage Data: We collect information about how you interact with our Service, including pages visited, features used, and time spent on the Service.
Device Information: We may collect information about your device, including browser type, operating system, and device identifiers.
Log Data: Our servers automatically record information ("Log Data") created by your use of the Service, including IP address, browser type, access times, and pages viewed.
3. Chrome Extension Specific Data
LinkedIn Data: Our Chrome extension accesses job posting information from LinkedIn pages you visit. We only collect data from pages you explicitly choose to save using our extension.
No Personal LinkedIn Data: We do not access, collect, or store your LinkedIn profile information, connections, messages, or any other personal LinkedIn data beyond the job postings you choose to save.
How We Use Your Information
We use the information we collect for the following purposes:
Service Provision: To provide, maintain, and improve our Service, including CV generation, job matching, and skill analysis.
CV Tailoring: To analyze job descriptions and your profile to generate tailored CVs using AI technology (Google Gemini).
Job Management: To store and organize your saved job postings and track your application progress.
Communication: To send you service-related notifications, updates, and respond to your inquiries.
Analytics: To understand how users interact with our Service and improve user experience.
Security: To detect, prevent, and address technical issues, fraud, and security threats.
Data Storage and Security
Storage
Your data is stored securely using Firebase (Google Cloud Platform), which provides enterprise-grade security and compliance. Your information is stored in the following locations:
Firestore Database: Your profile, saved jobs, and CV versions are stored in Google Cloud Firestore.
Firebase Storage: Your uploaded CV files and generated PDFs are stored in Google Cloud Storage.
Data Location: Data is stored in secure data centers managed by Google Cloud Platform.
Security Measures
We use industry-standard encryption (TLS/SSL) to protect data in transit.
All data is encrypted at rest using Google Cloud Platform's encryption.
We implement authentication and authorization controls to ensure only you can access your data.
We regularly review and update our security practices to protect against unauthorized access, alteration, disclosure, or destruction of your data.
Access to your data is restricted to authorized personnel only, and all access is logged and monitored.
Third-Party Services
We use the following third-party services that may have access to your information:
Google Services
Firebase: We use Google Firebase for authentication, database, and storage services. Your data is subject to Google's Privacy Policy and Terms of Service.
Google Gemini AI: We use Google's Gemini AI to analyze job descriptions and generate tailored CVs. Job descriptions and your CV content are sent to Google's AI service for processing. This data is processed according to Google's AI Privacy Policy.
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We only share your information in the following circumstances:
Service Providers: With trusted service providers who assist us in operating our Service (e.g., hosting, analytics) and who are bound by confidentiality obligations.
Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, property, or safety.
Business Transfers: In connection with any merger, sale of company assets, or acquisition, your information may be transferred to the acquiring entity.
Your Rights and Choices
You have the following rights regarding your personal information:
Access: You can access and review your personal information at any time through your account settings.
Correction: You can update or correct your information directly through the Service.
Deletion: You can request deletion of your account and associated data by contacting us. We will delete your data within 30 days of your request, subject to legal retention requirements.
Data Export: You can export your data at any time through your account settings.
Opt-Out: You can opt out of non-essential communications by adjusting your notification preferences.
Chrome Extension Permissions
Our Chrome extension requires the following permissions:
Active Tab Access: To read job posting information from LinkedIn pages when you click the "Save Job" button. We only access the current tab when you explicitly use the extension.
Storage: To store your authentication token and extension preferences locally on your device.
Web Request: To communicate with our API servers to save job postings and sync data.
Important: We do not access your browsing history, other tabs, or any data from websites other than LinkedIn job posting pages you explicitly choose to save.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our Service. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.
Children's Privacy
Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.
If you are located in the European Economic Area (EEA) or United Kingdom, we ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: yusufyn04@gmail.com
Your Rights Under GDPR (EU Users)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
Right to Access: You can request a copy of your personal data we hold.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: You can request limitation of how we process your data.
Right to Data Portability: You can request transfer of your data to another service.
Right to Object: You can object to processing of your personal data.
Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact us at privacy@careerlunch.com. You also have the right to lodge a complaint with your local data protection authority.
Your Rights Under CCPA (California Users)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
Right to Know: You can request information about what personal information we collect, use, and disclose.
Right to Delete: You can request deletion of your personal information.
Right to Opt-Out: You can opt out of the sale of your personal information (we do not sell your personal information).
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at privacy@careerlunch.com.