Clarity Edit — Privacy Policy

1. Summary (Plain-Language Overview)

This summary is for convenience only; the full policy below controls.

• What we collect: account and identity data (name, email, profile picture), resume and career content you upload, job descriptions you save or select, company-research inputs, subscription/billing status, and technical/usage data.
• From the Extension specifically: your authentication tokens (stored in your browser), job-description text detected on supported job sites, and text you explicitly right-click and send to Clarity Edit from any web page.
• How we use it: to authenticate you, analyze resumes, generate tailored cover letters, research companies, and operate and improve the Services.
• AI processing: resume and job content are processed by Amazon Bedrock (Amazon Web Services) to generate analysis and cover letters.
• We do not sell your personal information, and we do not use your content to train third-party or foundation AI models for their own purposes.
• Your controls: you can access, export, correct, and delete your data, and delete your account, at any time.
• Contact for privacy/data requests: privacy@clarity-edit.io.

2. Information We Collect

We collect the following categories of information across the Services. Where a category is collected only through the Extension, that is noted and detailed further in Section 4.

2.1 Information you provide

• Account and identity information: name (given and family name), email address, and — if you sign in with Google — the profile picture and name associated with your Google account. Passwords for email/password accounts are handled by our identity provider (AWS Cognito) and are never stored by us in plaintext or accessible to us.
• Resume and career content: the resumes and documents you upload, and their parsed contents (work history, education, skills, and similar career details), plus career goals, preferences, personas, and voice-profile settings you configure.
• Job-application content: job descriptions you save, paste, select, or that the Extension detects on supported job sites; job titles; and company names.
• Company-research inputs: company names, locations, and search queries you enter to research prospective employers, and any notes you add.
• Support communications: information you provide when you contact us for support or otherwise correspond with us.

2.2 Authentication information

To keep you signed in, we and our identity provider (AWS Cognito) issue and process authentication tokens (ID token, access token, and refresh token). In the Extension, these tokens are stored in your browser (see Section 4.2). We do not have access to your account password.

2.3 Subscription and billing information

If you purchase a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not receive or store your full card number. We receive and store limited subscription metadata (for example, plan tier, subscription status, and a customer/subscription identifier) needed to provision your access.

2.4 Information collected automatically

• Device and technical data: browser type and version, operating system, and IP address (used, among other things, to infer approximate/region-level location for security and service delivery).
• Usage data: how you interact with the Services, such as features used, documents generated, and timestamps.
• Cookies and similar technologies (Web App): see Section 7.

2.5 Website content read by the Extension

When you use the Extension, it reads certain website content — specifically job-description text (and associated job title / company name) on supported job sites, and text you explicitly select and send to Clarity Edit from any web page. This is detailed in Section 4.1. The Extension does not perform general web browsing surveillance, keystroke logging, or passive collection of your browsing history.

3. How We Use Your Information

We use the information described above to:

• Authenticate you and maintain your session.
• Analyze your resume (including ATS-compatibility analysis and scoring against a job description).
• Generate tailored cover letters and other AI-assisted outputs.
• Research companies you ask us to research and save that research to your account.
• Provide, operate, maintain, secure, and improve the Services.
• Provision and manage subscriptions and billing.
• Communicate with you about your account, updates, security, and support.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

Legal bases (GDPR/UK GDPR). Where the GDPR applies, we rely on: performance of a contract (to provide the Services you request); your consent (for example, optional cookies or specific optional features); our legitimate interests (to secure and improve the Services); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

AI processing. Resume content, job descriptions, and related inputs are sent to Amazon Bedrock (operated by AWS) to produce analysis and generated text. This processing is performed to deliver the feature you request. See Section 5 for sub-processor details.

No sale of personal information; no third-party model training. We do not sell your personal information. We do not permit our AI sub-processor to use your content to train its foundation models for the sub-processor's own purposes, and we do not use your resume or personal content to train models for unrelated third parties.

4. Browser Extension — Additional Disclosures

This section describes practices specific to the Clarity Edit Chrome extension. It supplements (and does not replace) the rest of this Policy.

4.1 What the Extension accesses and why

The Extension requests the following Chrome permissions, each for a specific, user-facing purpose:

Content-script scraping (supported job sites). On LinkedIn job pages (linkedin.com/jobs/*), Indeed (indeed.com/*), and Greenhouse (greenhouse.io/*), a content script reads the job-description text, job title, company name, and the page URL so you can save the job or generate a cover letter for it. The Extension only reads this job-posting content; it does not read your private messages, feed, account settings, or unrelated page content, and it does not run on other websites automatically.

Right-click selection capture (any site). The Extension adds an "Add to Clarity Edit" context-menu item that appears only when you have selected text. When you click it, the text you selected — and the URL of the page you selected it on — is captured and used as a job description. This is a deliberate, user-initiated action: nothing is captured from a page unless you select text and choose the menu item. Because this feature is triggered by your selection, it can technically be used on any site, but the Extension does not read or transmit page content on that site at any other time.

When data leaves your browser. Detected or selected job content is first held locally in your browser (chrome.storage.session). It is only sent to the Clarity Edit backend when you take an action that requires it — for example, saving a job, running company research, or generating a cover letter.

4.2 How the Extension uses chrome.storage

• Your authentication tokens (ID, access, and refresh tokens) are stored in chrome.storage.session, which is cleared when your browser closes.
• Your refresh token is additionally stored in chrome.storage.local so that your session can be restored the next time you open your browser (so you are not forced to log in every time). You can clear this at any time by signing out, which revokes the tokens and clears them from storage.
• Detected/selected job data is stored transiently in chrome.storage.session until you act on it or close the browser.

These values are stored on your device. We do not maintain a copy of your browser's local storage.

4.3 Chrome Web Store data categories

For transparency, and consistent with the disclosures we certify on the Chrome Web Store, the Extension handles the following Chrome Web Store data categories:

• Personally identifiable information — your name and email address (from your account / sign-in).
• Authentication information — the session tokens described in Section 4.2. (Your password is entered into the AWS Cognito sign-in flow and is not handled or stored by the Extension.)
• Website content — job-description text, job title, and company name read from supported job sites, and text you explicitly select and send to us.
• User-provided content — resumes and career details you choose to process.

The Extension does not collect health information, financial/payment information (payment is handled in the Web App via our payment processor), personal communications, precise location, web browsing history, or user-activity data such as keystroke logging, clicks, or mouse tracking.

4.4 Chrome Web Store — Limited Use disclosure

Clarity Edit's use of information received from Google APIs, and any other information collected from Chrome Web Store users, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

1. We only collect and use the data described in this Policy to provide and improve the user-facing features of Clarity Edit that you engage with.
2. We do not sell this data, and we do not transfer it to third parties except (a) to the sub-processors listed in Section 5 who process it on our behalf to provide the Services, (b) as necessary to comply with applicable law or a valid legal process, (c) to protect the safety, rights, or security of users or the public, or (d) as part of a merger, acquisition, or sale of assets where the successor agrees to honor this Policy.
3. We do not use or transfer this data for personalized advertising.
4. We do not allow humans to read your data, except: with your affirmative consent (for example, to provide support you request); where necessary for security purposes or to comply with applicable law; or where the data has been aggregated and anonymized so it can no longer identify you.

If we ever access Google user data via a Google API (for example, your basic profile during Google sign-in), that access is likewise limited to the practices above.

5. How We Share Information — Sub-Processors and Third Parties

We share information with service providers ("sub-processors") who process it on our behalf under contract, and in the limited other circumstances described below. We do not sell your personal information.

Sub-processors:

Other disclosures. We may disclose information: (a) to comply with law or valid legal process; (b) to enforce our Terms or protect the rights, safety, and security of users, the public, or Clarity Edit; and (c) in connection with a merger, acquisition, financing, or sale of assets, where the recipient agrees to protect your information consistent with this Policy.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, and thereafter as required for legitimate business, legal, or compliance purposes.

• Account, resume, cover-letter, saved-job, and company-research data: retained while your account is active. When you delete an item, we delete it from your active account. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must retain limited records to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies of deleted data may persist in encrypted backups and prior file versions for up to 60 days after deletion before being purged.
• Authentication tokens in the browser: cleared when you sign out or when your browser closes (session tokens); the persisted refresh token is removed on sign-out.
• Billing records: retained as required by tax and accounting law.

7. Cookies and Similar Technologies (Web App)

The Web App uses cookies and similar technologies for:

• Essential purposes (authentication and security) — required for the Web App to function.
• Preferences — remembering your settings.
• Analytics (PostHog) — understanding how the Web App is used so we can improve it.

You can control cookies through your browser settings; disabling some cookies may affect functionality. The Extension does not use advertising cookies or tracking cookies.

8. Your Privacy Rights and Choices

All users can:

• Access and review the personal information in your account.
• Correct inaccurate information.
• Export your data.
• Delete individual items, or delete your account and associated data (via account settings or by contacting us).
• Sign out of the Extension, which revokes and clears stored tokens.

EU/EEA/UK residents (GDPR / UK GDPR) additionally have the rights to: data portability; restriction of processing; objection to processing (including profiling); withdrawal of consent; and to lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA) have the rights to: know what personal information is collected, used, and disclosed; access and delete personal information; correct inaccurate information; and to opt out of "sale" or "sharing" of personal information and limit use of sensitive personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

To exercise any right, contact privacy@clarity-edit.io. We will verify your request (typically by confirming control of your account email) and respond within the timeframe required by applicable law. You may use an authorized agent where permitted by law.

9. Data Security

We use appropriate technical and organizational measures to protect your information, including: encryption in transit (HTTPS/TLS); encryption at rest; authentication via AWS Cognito with server-side token verification; and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

We operate primarily in the United States, and your information may be processed in the United States and other countries where we or our sub-processors operate. Where required, we use appropriate safeguards (such as the EU Standard Contractual Clauses) for transfers of personal information out of the EEA/UK.

11. Children's Privacy

The Services are not intended for, and we do not knowingly collect personal information from, individuals under the age of 16. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice as required by law. For the Extension, material changes to data practices may also require an updated Chrome Web Store listing and re-consent.

13. Contact Us

Clarity Edit is operated from the United States. If we become required under the GDPR or UK GDPR to designate an EU/UK representative or Data Protection Officer, we will update this policy with their contact details. In the meantime, EU/UK users may reach us for any data-protection request at support@clarity-edit.io.