Privacy Policy
Last updated: July 4, 2026
1. Who we are
Offer Pilot, Inc. ("Offer Pilot", "we") provides AI-assisted resume tailoring and job-application tooling. This policy explains what personal information we process and your choices.
2. Information we collect
- Account data (name, email) via our authentication provider.
- Resume / CV content and the job descriptions you submit.
- Generated artifacts (tailored resumes, cover letters, evaluations).
- Standard application answers you choose to enter — work authorization and sponsorship, salary expectation, notice, relocation, and voluntary EEO self-identification (race/ethnicity, veteran, and disability status). These are entered by you, never AI-generated or inferred, stored encrypted, shown only back to you, and never transmitted to employers automatically.
- Usage and billing metadata required to operate the service.
3. How we use it
To provide and improve the service: tailor resumes to roles, score fit, and track applications. We do not sell your personal information.
4. Sharing & subprocessors
We do not sell your personal information. We share it only with the service providers ("subprocessors") needed to operate Offer Pilot, under contracts that limit them to processing it on our behalf. All of our current subprocessors are located in the United States.
| Provider | Purpose | Data processed |
|---|---|---|
| Clerk | Authentication & account management | Name, email, login identifiers |
| Anthropic (Claude) | AI processing — resume tailoring, fit scoring, cover letters, interview prep | Resume/profile content and the job descriptions you submit |
| Voyage AI | Semantic job matching (text embeddings) | Profile and job-posting text |
| DigitalOcean | Cloud hosting and encrypted backups / file storage | All service data, at rest |
| Stripe | Payment processing (paid plans) | Billing and payment details (not resume content) |
| Resend | Transactional and digest email | Email address and message content |
| Sentry | Error monitoring and reliability | Diagnostic / error context |
We keep this list current — if we add or change a subprocessor that processes your personal information, we will update this page.
5. Security & retention
Sensitive fields are encrypted at the application layer (AES-256-GCM). We retain data for as long as your account is active or as needed to provide the service, then delete or anonymize it.
6. Your privacy choices (US)
Depending on your state (including under the CCPA/CPRA), you may have the right to know, access, correct, delete, and port your personal information, and to limit certain processing. We do not sell or share your personal information for cross-context behavioral advertising. Signed-in users can submit and track privacy requests using the controls below. We will not discriminate against you for exercising your rights.
See also our Terms of Service.