Privacy Policy

Last updated: July 13, 2026

OfferQuest ("we", "us", "OfferQuest") provides a Chrome extension and web dashboard that help job seekers generate resumes, cover letters, and interview prep materials tailored to specific roles. This Privacy Policy describes what data we collect, how we use it, and the choices you have.

Short version: Your resume, data pool, and job-search information live in your browser's local storage and in your private Supabase account. We only send content to Anthropic (via our secure backend) when you ask us to generate something. We never sell your data.

1. Information we collect

We collect only the minimum information needed to operate the service:

Account information: email address, full name (optional), and a hashed password or Google OAuth identifier. Provided when you sign up.
Profile details: name, email, phone, location, LinkedIn, portfolio, and GitHub URLs, entered by you for inclusion in generated documents.
Career data pool: the master career history you paste or import. Used to generate tailored resumes and cover letters.
Applications & generations: company names, role titles, job descriptions, ATS scores, resumes, cover letters, interview prep materials, and notes you create.
Usage metadata: the number of AI generations you've run, which model was used, and token counts. Used to enforce free-tier limits and bill Pro subscribers.
Billing information: if you subscribe to Pro, Stripe (our payment processor) stores your payment method. We never see or store your card number.
Product analytics: high-level feature events (e.g. "resume generated", "application saved") tied to your account ID and email, so we can understand which features help and fix what doesn't. We never send your resume content, data pool, or job descriptions to our analytics provider.

2. How we use your information

To generate ATS-optimized resumes, cover letters, and interview prep from your data.
To calculate and display your AI usage for the current day.
To enforce free-tier limits and grant Pro entitlements.
To process payments and manage your subscription.
To send transactional emails (confirmations, password resets, billing receipts).
To investigate abuse or security incidents.

We do not use your data to train AI models. We do not sell your data to third parties. We do not run targeted advertising.

3. Third-party services

OfferQuest uses the following subprocessors. Each of these receives only the data required for its specific purpose:

Anthropic (AI generation): job description, resume context, and data pool excerpts are sent to Anthropic's Claude API through our secure backend to generate content. Anthropic does not use API traffic for training. See Anthropic Privacy Policy.
Supabase (authentication & database): your account, profile, applications, and usage logs are stored in a Supabase Postgres database with Row-Level Security. See Supabase Privacy Policy.
Stripe (payments): subscription billing, payment methods, and invoices are handled by Stripe. We only store your Stripe customer ID. See Stripe Privacy Policy.
PostHog (product analytics): feature-usage events, your account ID, email, and extension version are sent to PostHog (US cloud) to measure product usage. Document content is never sent. See PostHog Privacy Policy.
Resend (transactional email): your email address and name are shared with Resend to deliver signup confirmations, password resets, and billing receipts. See Resend Privacy Policy.
Vercel (marketing site hosting): the offerquest.app website is hosted on Vercel. See Vercel Privacy Policy.
Google OAuth (optional): if you choose to sign in with Google, Google shares your email, name, and Google ID with us. See Google Privacy Policy.

4. Where data is stored

In your browser (chrome.storage.local): profile, applications, cached resumes and cover letters, preferences, and session tokens. This data stays on your device unless you also have an authenticated Supabase session.
On Supabase servers: account records, subscription state, and authoritative usage logs. Protected by row-level security — only you can read your own rows.
On Stripe servers: billing information.

5. Your choices and rights

You have the right to:

Access your data — everything we store about you is visible in the extension's Settings page and your marketing-site dashboard.
Export your data — the extension exports applications, system logs, and generated documents as CSV / DOCX / PDF.
Delete your account — email us at support@offerquest.app and we will delete your profile, subscriptions, applications, and usage logs within 30 days.
Uninstall the extension to immediately stop data collection. Chrome will purge chrome.storage.local for OfferQuest when you remove the extension.
Cancel your subscription at any time through the Stripe Customer Portal.

EU / EEA / UK residents have additional rights under the GDPR (access, rectification, erasure, portability, restriction, objection). California residents have rights under the CCPA (know, delete, opt-out of sale — we do not sell data). To exercise these rights, email support@offerquest.app.

6. Data retention

Account data and applications are retained for as long as your account is active. Usage logs are retained for 90 days for analytics and anti-abuse. On account deletion, all of the above is deleted within 30 days.

7. Security

We use industry-standard encryption in transit (HTTPS / TLS 1.2+) and at rest (Supabase-managed Postgres with AES-256). API keys are never exposed to the browser — all AI calls go through our authenticated backend. Row-level security policies ensure users can only see their own data.

8. Children's privacy

OfferQuest is not intended for users under 16. We do not knowingly collect personal information from children.

9. Changes to this policy

If we make material changes, we will notify you by email and update the "Last updated" date above. Continued use of the service after changes take effect constitutes acceptance.

10. Contact

Questions? Email support@offerquest.app.