Privacy Policy

What We Collect

When you create an account, we collect the profile information you provide:

• Name, email address, and phone number
• Education history (school, degree, graduation date)
• Work experience (titles, companies, dates, descriptions)
• Job preferences (target titles, locations, salary)
• Voluntary demographics (gender, race/ethnicity, veteran status, disability status) — used only to fill EEO fields on applications at your direction

What We Do NOT Collect

Your ATS passwords (e.g., Workday, Greenhouse) are never transmitted to or stored on our servers. Passwords are stored exclusively on your local machine and used only by the desktop agent to sign into application portals on your behalf. We have no ability to access, read, or recover your ATS passwords.

How We Store Your Data

Your profile data is stored in a secure database hosted by Supabase with row-level security enabled. All data is transmitted over HTTPS. Access to your data is restricted to your authenticated account.

How We Use Your Data

• To populate job application forms via the desktop agent at your direction
• To match jobs against your preferences and display relevant listings
• To track your application history in your dashboard
• To process your subscription payment via Stripe

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

• Supabase— database and authentication
• Stripe— payment processing (we never see or store your full card number)
• Vercel— web application hosting

Each service has its own privacy policy governing how they handle your data.

Data on Your Local Machine

The desktop agent stores the following locally on your computer:

• Your ATS passwords (in a local config file)
• Browser session cookies (to avoid repeated sign-ins)
• A local database of scraped jobs and application results
• Video recordings of application runs (for your review)

None of this local data is transmitted to our servers. You can delete it at any time by removing the application folder.

Data Retention and Deletion

You may delete your account and all associated cloud data at any time from your dashboard. Upon deletion, we remove your profile, application history, and all personally identifiable information from our database. Local data on your machine is not affected by account deletion and must be removed manually.

California Residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect; request deletion of your data; and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, email us at the address below.

Contact

Questions about your privacy? Email us at support@bomodos.online.