Privacy Policy

1. Who we are

Reskoped is operated by Akshat Sharma (sole proprietor). In this policy, "we," "us," and "our" refer to Reskoped.

2. Information we collect

• Account information: When you sign in with GitHub or Google, we receive your name, email address, and avatar from the OAuth provider. We do not receive or store your password.
• Profile data: Work experience, skills, education, projects, and contact details you enter into your profile.
• Application details: Answers you save for filling job applications, such as your address, work authorization, visa sponsorship, salary expectations, notice period and links. You can optionally save voluntary self-identification answers (gender, race or ethnicity, veteran status, disability status); these are sensitive and are only ever used to fill application forms you choose to autofill. You can change any of them to "Decline to self-identify" at any time on the Application details page.
• Job descriptions: The job descriptions you paste, or select on a web page with the Chrome extension, to check your match or generate a resume.
• Generated content: Tailored resumes and analysis results produced by our AI pipeline.
• Payment information: Payments are processed by Paddle (our Merchant of Record). We do not store your credit card number. Paddle provides us with your customer ID, transaction ID, and subscription status.
• Usage data: Generation counts, timestamps, and basic analytics (page views, feature usage).

3. How we use your information

• To provide, maintain, and improve the Reskoped service.
• To show how your profile matches a job and to generate tailored resumes based on your profile and job descriptions.
• To fill job application forms with your saved application details, when you ask the Chrome extension to.
• To manage your account, subscription, and billing.
• To communicate with you about your account or service updates.
• To enforce our Terms of Service and prevent abuse.

4. Data sharing

We do not sell your personal data. We share data only with:

• Paddle: Payment processing (as Merchant of Record).
• Supabase: Database hosting and authentication.
• Google (Gemini API): Your profile data and job descriptions are sent to Google's Gemini API for AI processing. Google's API data usage policies apply. Your application details are never sent to the AI.
• Langfuse: AI requests and responses (job descriptions, profile data and generated content) are recorded with Langfuse so we can monitor and improve the quality of results.
• Hosting providers: Vercel (frontend) and Google Cloud (backend) for application hosting.

5. Chrome extension

The Reskoped Chrome extension only acts when you use it:

• Checking a job: when you click "Check my match", it reads the text you have selected on the current page and sends it to Reskoped to analyze the job.
• Autofill: when you click "Autofill this form", it reads the form fields on the current page and fills them with your saved application details. This happens on your device; the contents of the page and form are not sent to us.
• Stored in your browser: the access token that connects the extension to your account, and which tab of the panel you last used. Disconnecting removes the token.
• Site access: the extension reads a page only after you click one of its buttons on that page, or if you choose "Allow on all sites", which you can turn off in Chrome's extension settings. It does not collect your browsing history.

The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide the features described above. We do not sell it, use it for advertising, or use it to determine creditworthiness, and we do not allow humans to read it except with your permission, for security purposes, or to comply with the law.

6. Data retention

Your profile and generation history are retained as long as your account is active. You can edit or remove your profile data and application details at any time on the Profile and Application details pages. If you wish to delete your entire account and all associated data, contact us at akshatsharma101st@gmail.com.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), row-level security in our database, and API key authentication between services. No system is 100% secure, and we cannot guarantee absolute security.

8. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us. Depending on your jurisdiction, you may have additional rights under applicable privacy laws (e.g., GDPR, CCPA).

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date.

11. Contact

For privacy-related inquiries, contact us at akshatsharma101st@gmail.com.