Privacy Policy
Overview
Trackply ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using Trackply — including the web app and Chrome extension — you agree to the practices described here.
1. Information We Collect
Account Information
When you create an account, we collect your email address and a hashed password. If you sign in with Google, we receive your email address and profile name from Google.
Job Application Data
Data you enter into Trackply — job applications, company names, job titles, interview notes, application status, and related details — is stored in your account and is only accessible to you.
Resume and Cover Letter Content
Resumes and cover letters you create or upload in Trackply are stored in your account. When you use AI features, the relevant content is sent to Anthropic's API to generate a response and is not retained by us beyond the active request.
Usage Information
We collect basic usage data such as feature interactions and error events to improve the product. Usage counters (e.g. number of AI requests) are stored in your profile to enforce plan limits. This data is not sold or shared with advertisers.
Payment Information
Pro and Pro Max plan payments are processed by Stripe. We do not store your card number, CVV, or sensitive payment details — only a Stripe customer reference token used to manage your subscription.
Chrome Extension
The Trackply Chrome extension reads page content only when you actively click "Detect Job." It does not passively monitor your browsing activity, track websites you visit, or collect any data without your explicit action. Detected job data is sent to your Trackply account only when you confirm by clicking "Track" or "Generate."
2. How We Use Your Information
We use the information we collect to:
- Provide the service: store and display your job applications, resumes, and cover letters
- Power AI features: resume content and job descriptions you submit for AI processing are sent to the Anthropic API to generate responses
- Authenticate you: verify your identity and keep your account secure
- Manage your subscription: enforce plan limits and process payments via Stripe
- Respond to support: answer your questions and resolve issues
- Prevent abuse: detect and block fraudulent or abusive use
- Improve the product: aggregated, anonymized usage data helps us understand how features are used
3. Third-Party Services
Supabase
We use Supabase for database storage and authentication. Your account data and application records are stored in Supabase infrastructure. Supabase is SOC 2 compliant. See supabase.com/privacy.
Anthropic
AI features (cover letter generation, resume tailoring, resume scoring, LinkedIn optimization) are powered by Anthropic's Claude API. Content you submit is sent to Anthropic's servers for processing. Anthropic does not use API inputs to train their models by default. See anthropic.com/privacy.
Stripe
Subscription billing is handled by Stripe. Payment data is collected and stored by Stripe under their own privacy policy. See stripe.com/privacy.
Vercel
Trackply is hosted on Vercel. Vercel may collect standard server logs including IP addresses and request metadata. See vercel.com/legal/privacy-policy.
4. Data Storage and Security
All user data is stored in Supabase with row-level security (RLS) — your records are only accessible when authenticated as you. Data in transit is encrypted using TLS. Data at rest is encrypted by Supabase's storage infrastructure.
While we take security seriously and follow industry best practices, no system is 100% secure. We cannot guarantee the absolute security of your information.
5. Data Retention
We retain your account and application data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
Server logs are retained for a maximum of 30 days.
6. Your Rights
You have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: update inaccurate information in your account settings
- Deletion: delete your account and all associated data at any time from your account settings
- Portability: export your application data (PDF/Word on Pro plan)
- Opt-out: unsubscribe from non-essential communications at any time
Depending on your location, you may have additional rights under GDPR, CCPA, or other applicable privacy laws. Contact us at the address below to exercise any of these rights.
7. Cookies and Local Storage
Trackply uses minimal browser storage:
- Authentication tokens: stored in browser local storage to keep you signed in
- Preferences: theme (light/dark) and accent color stored in local storage
- No advertising cookies: we do not use ad trackers or third-party marketing cookies
8. Children's Privacy
Trackply is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.
9. International Users
If you access Trackply from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. By using Trackply, you consent to this transfer.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of Trackply after changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: