Privacy Policy

1. Information We Collect

We collect various types of information to provide and improve our Service:

• Personal Information: Identifiable data such as your name, email address, profile information, resume details, and other information you provide directly.
• Career and interview content: Information you submit or generate through the Service, such as resumes, cover letters, job details, interview notes, profile details, transcripts, recordings, prompts, responses, headshots, and other materials you upload or create.
• Usage Data: Information about your interactions with the Service, including pages visited, features used, timestamps, and interaction metrics.
• Technical Data: Device and connection information such as IP address, browser type, operating system, and device identifiers.
• Payment and credit information: Information related to credit purchases, checkout sessions, payment status, transaction identifiers, and billing-related records. We do not store full payment card numbers.

2. How We Collect Information

We collect information that you provide directly when registering, submitting content, or communicating with us. We also collect data automatically through cookies, web beacons, and similar tracking technologies as you interact with the Service.

Chrome Extension and Application Autofill

This section describes the data practices of the CoPrep AI Chrome extension. These extension-specific terms control if another section of this Policy describes a broader practice for the website or another CoPrep AI service.

• Information handled: When you explicitly connect your CoPrep profile, the extension receives the profile fields you selected for autofill. Depending on your profile, this may include your name, email address, telephone number, address, links, education and employment history, resume-derived information, work authorization, sponsorship preferences, and optional application information such as pronouns, background-check consent, gender, race/ethnicity, LGBTQ+ identity, Indigenous or newcomer status, military experience, veteran status, or disability status. If you add employer-specific question-and-answer pairs or opt into filling limited application declarations, those choices are also included in the connected autofill profile.
• Local storage:The connected profile is stored in Chrome's local extension storage and is restricted to trusted extension pages. It remains there until you disconnect, replace the connected profile, clear the extension's data, or uninstall the extension. Disconnecting removes the local profile copy and consent record.
• Website access: The extension requests access to HTTPS websites because job application forms may be hosted on many different domains or inside embedded frames. The autofill engine runs only after you press Autofill. It reads visible form labels, controls, and options needed to match your profile to the application. It does not collect browser history, cookies, passwords, or unrelated browsing activity, and it does not submit applications for you.
• Sharing with a job site: When you press Autofill, the extension inserts matching profile information into the application page open in your browser. That website and its form provider can then receive or process the inserted information under their own privacy policies. Always review the completed form before submitting it.
• No extension analytics or advertising use: The extension does not send the connected profile, application-form content, or browsing activity back to CoPrep AI for analytics or advertising. The general advertising and marketing provisions elsewhere in this Policy do not apply to information obtained through Chrome extension permissions.

CoPrep AI's use and transfer of information received through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell extension-derived data, use it for personalized or retargeted advertising, use it to determine creditworthiness, or allow humans to read it except with your explicit consent for support, when necessary for security or legal compliance, or in aggregated and anonymized form for permitted internal operations.

3. Cookies and Similar Technologies

We use cookies, local storage, pixels, tags, and similar technologies to run the Service, remember your preferences, understand product usage, measure campaigns, and support advertising where applicable. We group these technologies into the following categories:

• Necessary: Required for account login, session management, security, checkout, consent storage, and core app functionality. These cannot be disabled through our cookie banner.
• Analytics: Helps us understand traffic and product usage, including through tools such as Google Analytics and Ahrefs Analytics.
• Marketing: Helps us measure advertising, conversions, and campaign performance, including through tools such as Meta Pixel and Google Ads.

You can accept, reject, or manage non-essential analytics and marketing technologies using our cookie banner or the Cookie Preferences link in the footer.

4. Data Processing and Legal Basis

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent to process your personal data for specific purposes.
• Contractual Necessity: To fulfill our contractual obligations to you.
• Legitimate Interests: To operate and improve our Service, prevent fraud, and ensure security, provided these interests are not overridden by your rights.
• Legal Compliance: When required by applicable laws or regulations.

5. How We Use Your Information

Your information is used to:

• Provide, maintain, and enhance the Service.
• Personalize content and user experience.
• Communicate with you, including responding to inquiries and sending important updates.
• Analyze usage and improve our offerings.
• Prevent fraudulent or unauthorized activities.

6. Marketing Communications

With your consent where required by law, we may send you promotional materials and updates about our products and services. You may opt out of marketing communications at any time by following the unsubscribe instructions included in these communications or by contacting us directly.

7. Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers and partners who assist in operating the Service under strict confidentiality agreements.
• Affiliates and business partners for joint marketing or service delivery.
• Law enforcement, regulators, or other authorities as required by law or to protect our rights.

8. Service Providers and Data Flows

We use third-party service providers to operate, secure, analyze, advertise, and improve the Service. Depending on how you use CoPrep AI, your information may be processed by or shared with:

• Authentication and account infrastructure: Supabase, including Supabase Auth and related database or storage services, to create accounts, manage sessions, store user profile information, and support uploaded files.
• Google sign-in: Google OAuth, when you choose to sign in or register with your Google account.
• AI, speech, and interview processing: Deepgram, Google Gemini, and our backend infrastructure to process audio, transcripts, prompts, interview context, resume details, and generated responses when you use interview, transcription, mock interview, or AI-assistance features.
• Analytics, advertising, and measurement: Google Analytics, Google Ads, Meta Pixel, and Ahrefs Analytics to understand traffic, measure conversions, improve the Service, prevent abuse, and deliver or measure ads where applicable.
• Payments: Payment processors such as Stripe to handle checkout and payment processing for credit purchases. We may receive payment status, checkout identifiers, purchased credit pack details, and related transaction metadata, but full card details are handled by the payment processor.
• Cloud, hosting, and communications providers: Vendors that help host the Service, deliver emails, monitor performance, provide customer support, and keep the Service secure.

These providers may process information in countries other than your country of residence and may use their own subprocessors, subject to their contractual, technical, and legal safeguards.

9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your information may be processed and stored in countries outside your country of residence, including the United States. We ensure that such transfers comply with applicable data protection laws by implementing appropriate safeguards.

12. Your Rights as a Data Subject

Depending on your jurisdiction, you have certain rights regarding your personal data, including:

• The right to access and receive a copy of your personal data.
• The right to correct or update inaccurate or incomplete data.
• The right to request deletion or restriction of processing.
• The right to object to processing based on legitimate interests.
• The right to data portability.
• The right to withdraw consent at any time where processing is based on consent.
• The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the information provided below.

13. Children’s Privacy

Our Service is not intended for individuals under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us immediately so we can take appropriate action.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our Service and updating the effective date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: support@coprep.ai