Privacy Policy

2.1 Account Information

• Registration Data: Name, email address, password
• Subscription Details: Billing information, subscription tier, usage history
• Account Preferences: Communication settings, data retention preferences

2.2 Documents You Upload

• Resume Content: Personal information, work experience, education, skills, contact details contained in uploaded resumes
• Job Descriptions: Role requirements, company information, job specifications from external sources
• Analysis History: Previous analyses, results, and saved comparisons

2.3 Automatically Collected Information

• Usage Data: Features used, analysis frequency, time spent on platform
• Technical Data: IP address, browser type, device information, operating system
• Firebase Analytics: User interactions, performance metrics, error logs
• Session Data: Login times, page views, click patterns

3.1 Core Service Functions

• Document Analysis: Process uploaded resumes and job descriptions to provide compatibility insights
• Results Generation: Create scoring, skills matching, and experience alignment reports
• Account Management: Maintain user accounts, subscription status, and usage tracking
• Service Improvement: Enhance analysis algorithms and platform functionality

3.2 Communication

• Service Updates: Notify about new features, analysis results, account changes
• Billing Communications: Subscription confirmations, renewal notices, payment issues
• Support: Respond to questions, troubleshoot issues, provide assistance

3.3 Legal Basis for Processing

• Consent: When you check the consent box during account registration
• Contract Performance: To provide resume analysis services you've purchased or signed up for
• Legitimate Interest: For service improvement, security, and platform optimization

3.4 Legal and Security

• Compliance: Meet legal obligations and enforce Terms of Service
• Security: Detect fraud, prevent abuse, and protect platform integrity
• Data Protection: Implement security measures and respond to data requests

4.1 User Responsibility

• Third-Party Resumes: If you upload someone else's resume, you must have their explicit consent
• Consent Verification: We rely on your attestation that you have proper authorization
• No Verification: We do not independently verify consent or document ownership

4.2 Our Limitations

• No Liability: We are not responsible for unauthorized uploads or consent violations
• User Accountability: You assume full responsibility for third-party content you upload
• Reporting: We may investigate and remove content upon notice of unauthorized use

4.3 Automated Analysis

• Subjective Scoring: Our Service uses automated systems to analyze resumes and provide scoring across multiple criteria
• Interpretative Results: Analysis provides subjective grades and explanations that should not be taken as definitive professional advice
• User Control: You determine how to interpret and use the results - our system does not make decisions about your employment or professional standing
• No Decision-Making: The analysis is entirely for informational purposes and requires human interpretation

5.1 Service Providers

• Firebase/Google Cloud: Backend services, hosting, authentication, analytics, and file storage
• Payment Processors: Subscription billing and payment processing (Stripe, PayPal, etc.)
• Analytics Services: Platform usage analysis and service optimization

5.2 Legal Requirements

• Law Enforcement: When required by valid legal process or court order
• Safety Protection: To protect rights, property, or safety of users or others
• Legal Compliance: To meet regulatory requirements or legal obligations

5.3 Business Transfers

• Merger/Acquisition: In case of business sale, merger, or asset transfer
• Notice Required: We will provide notice before transferring your data

5.4 What We Never Do

• No Data Sales: We never sell, rent, or trade your personal information
• No Marketing Lists: We don't share data for third-party marketing
• No Bulk Access: We don't provide mass access to user databases

5.5 Security Breach Notification

• Prompt Investigation: We will investigate and assess any data security incident promptly
• User Notification: Affected users will be notified within 7 days of discovery
• Incident Details: Notifications will include the nature of the incident and steps being taken to address it

6.1 Firebase Integration

• Backend Services: Authentication, database, file storage, hosting
• Analytics: Firebase Analytics for usage tracking and service improvement
• Cloud Functions: Automated processing and analysis algorithms

6.2 Google's Policies

• Additional Terms: Google's Terms of Service and Privacy Policy also apply
• Data Processing: Google processes data according to their privacy standards
• International Transfers: Data may be processed in Google's global infrastructure

6.3 Firebase Data Handling

• Shared Responsibility: We configure privacy settings; Google provides infrastructure
• Security: Google's enterprise-grade security protects your data
• Compliance: Firebase meets major compliance standards (SOC 2, ISO 27001, etc.)

7.1 Default Retention Period

• 30-Day Default: Uploaded documents and analysis results stored for 30 days
• Automatic Deletion: Data automatically deleted after retention period expires
• Extension Options: You may request monthly extensions to keep data longer

7.2 Account Data

• Active Accounts: Account information retained while subscription is active
• Closed Accounts: Account data deleted within 30 days of account closure
• Billing Records: Subscription history retained for tax and legal compliance (typically 7 years)

7.3 Manual Deletion

• Immediate Deletion: You can delete documents and results anytime through your account
• Account Deletion: Full account deletion removes all associated data
• Backup Systems: Data removed from backups within 90 days

8.1 Data Access and Management

• View Your Data: Access all information we have about you
• Download Data: Export your documents and analysis results
• Correct Information: Update inaccurate account information
• Delete Content: Remove specific documents or analysis results

8.2 Account Controls

• Privacy Settings: Control data retention and sharing preferences
• Communication Preferences: Manage notification settings
• Subscription Management: Modify or cancel subscription anytime

8.3 Legal Rights (GDPR/CCPA)

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Portability: Export data in machine-readable format
• Right to Object: Opt-out of certain processing activities

8.4 Request Processing

• Request Methods: Email support@dependableaisolutions.com for all privacy-related requests
• Response Time: We will respond within 7 days of receiving your request
• Identity Verification: We may request verification through your account login before processing requests
• No Fees: No charges for reasonable privacy requests

9.1 Technical Safeguards

• Encryption: All data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Restricted access to personal data on need-to-know basis
• Firebase Security: Google's enterprise-grade security infrastructure
• Regular Updates: Security patches and system updates applied promptly

9.2 Operational Security

• Staff Training: Privacy and security training for all team members
• Data Minimization: We collect only necessary information
• Incident Response: Procedures for detecting and responding to security breaches
• Regular Audits: Periodic security assessments and improvements

9.3 Document Security

• Secure Upload: Encrypted transmission of resume and job description files
• Isolated Processing: Analysis performed in secure, isolated environments
• Secure Deletion: Cryptographic deletion when retention period expires

9.4 Sensitive Information Protection

• Automated Scrubbing: We make automated efforts to remove potentially sensitive information including names, personally identifiable information, and protected characteristics
• Bias Prevention: Information that could lead to discriminatory bias is filtered out to ensure fair analysis
• Continuous Improvement: We continuously improve our detection systems to better identify and remove sensitive data
• Incident Response: If sensitive data is detected after processing, we will promptly delete the affected data and notify you
• User Reporting: Contact us at support@dependableaisolutions.com if you notice any sensitive information issues

10.1 Global Service

• Firebase Infrastructure: Data may be processed in Google's global data centers
• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: Legal safeguards for other international transfers

10.2 Your Consent

• Informed Consent: By using the Service, you consent to necessary international transfers
• Withdrawal: You may withdraw consent by closing your account

10.3 Google Cloud Safeguards

• Standard Contractual Clauses: Our data processor (Google) automatically applies Standard Contractual Clauses to business services for international transfers
• Adequacy Decisions: Transfers to countries with adequate data protection where applicable
• Enterprise Security: Enterprise-grade security protections across Google's global infrastructure
• Data Processing Agreement: Google provides data processing agreements automatically for Firebase/Vertex AI business customers

11.1 Types of Cookies

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Firebase Analytics for usage tracking and improvement
• Preference Cookies: Remember your settings and login status

11.2 Cookie Management

• Browser Settings: Control cookies through your browser preferences
• Opt-Out Options: Disable analytics cookies without affecting core functionality
• Clear Information: See exactly what cookies we use and why

13.1 California Privacy Rights (CCPA)

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We don't sell data, but you can opt-out of future sales
• Non-Discrimination: Equal service regardless of privacy choices

13.2 European Privacy Rights (GDPR)

• Lawful Basis: We process data based on contract performance and legitimate interest
• Data Protection Officer: Contact information available upon request
• Supervisory Authority: Right to lodge complaints with your local data protection authority

13.3 Exercising Your Rights

• Request Methods: Use our privacy request form or contact legal@dependableaisolutions.com
• Identity Verification: We may verify your identity before processing requests
• Response Time: We respond to verified requests within 30-45 days

14.1 Policy Updates

• Regular Reviews: We review this policy periodically
• Change Notifications: Significant changes communicated via email or platform notice
• Effective Date: Changes take effect immediately upon posting

14.2 Your Choices

• Continued Use: Using the Service after changes means you accept the updated policy
• Account Closure: You may close your account if you disagree with changes

15.1 Privacy Questions

• Email: legal@dependableaisolutions.com
• Response Time: We aim to respond within 5 business days

15.2 Support

• Email: support@dependableaisolutions.com

15.3 Governing Law

• Applicable Law: This Privacy Policy is governed by the laws of the State of California and applicable federal law
• Jurisdiction: Any disputes will be resolved in the courts of Riverside County, California
• Conflict Resolution: Without regard to conflict of law principles

15.4 Marketing Communications

• Opt-Out Method: Email marketing@dependableaisolutions.com to opt out of marketing and promotional emails
• Response Time: Opt-out requests processed within 5 business days
• Transactional Communications: Account-related and service communications will continue as necessary for service delivery

16.1 Extension Overview

16.2 Extension Permissions

• Storage: Stores authentication tokens, cached job analyses (7 days), job posting data (30 days), user preferences, and selected resume identifiers locally on your device
• Tabs: Detects job postings on active tabs and retrieves URLs to identify analyzable content
• Scripting: Injects scripts on job boards (LinkedIn, Indeed, Glassdoor, ATS platforms) to detect and extract job posting information
• Identity: Enables secure Google authentication through our web application
• Notifications: Alerts you when job analyses complete or when job postings are detected
• Side Panel: Provides a persistent interface for viewing analysis results alongside job postings
• Host Permissions: Accesses job board websites and company career pages to detect job postings across the web

16.3 Data Collection and Usage

• Job Posting Content: Extracts job descriptions, titles, company names, and requirements from pages you visit while the extension is active
• Local Storage: All extension data is stored locally on your device and automatically expires based on retention policies
• Backend Communication: Sends extracted job postings to our Firebase backend for AI analysis when you request an analysis
• No Background Collection: The extension only processes pages when you actively use it; it does not collect browsing history or monitor your activity

16.4 Extension-Specific Privacy

• All data handling practices in this Privacy Policy apply to both the web application and Chrome Extension
• The extension shares the same authentication system and backend infrastructure as the web application
• Job postings extracted by the extension follow the same 30-day retention period as manually uploaded job descriptions