Privacy Policy

Pursuit — Job Application Tracker · Last updated: July 30, 2026

This Privacy Policy explains what information Pursuit ("the app", "we", "our") collects, why it's collected, how it's stored, and the choices you have. Pursuit is a personal job application tracker that helps you organize job applications, track progress, and get resume feedback.

This is a student-built portfolio project. Pursuit is not a commercial product, does not sell data, and does not share your data with third parties except as described below (for example, the AI providers and cloud infrastructure needed to run core features).

1. Information We Collect

We collect the following categories of information:

Category	Examples	Source
Account information	Name, email address, profile photo	Provided by you at sign-up, or from Google Sign-In / GitHub OAuth
Authentication data	Hashed password (bcrypt), JWT session tokens, OAuth provider ID	Generated during sign-up or OAuth login
Application data	Company names, job titles, application status, notes, dates	Entered by you
Resume files	Uploaded PDF resumes and extracted text	Uploaded by you
Resume Coach chat data	Messages you send to the AI resume assistant	Entered by you
Usage data	Basic app settings/preferences (e.g. font size, goals)	Generated by your use of the app

2. How We Use Your Information

To create and secure your account, and keep you signed in.
To let you add, edit, and track job applications on your dashboard.
To display your name, email, and profile photo back to you inside the app.
To analyze uploaded resumes and provide AI-generated feedback and chat responses through a third-party AI API (Google Gemini).
To send account-related emails (e.g. password reset) via our transactional email provider.

3. Google Account Information

If you sign in with Google, Pursuit only requests your basic profile information — name, email address, and profile photo — through Google's standard openid, email, and profile scopes. We do not request access to your Gmail, Google Drive, Calendar, or any other Google service. This information is used solely to create and authenticate your Pursuit account and is not shared with any third party for advertising or marketing purposes.

4. Third-Party Services We Use

Service	Purpose
Google Sign-In / GitHub OAuth	Account authentication
Google Gemini API	Resume analysis and Resume Coach chat responses
Aiven (MySQL)	Database hosting for your account and application data
Render	Backend server hosting
Vercel	Frontend hosting
Email provider (Brevo / Gmail SMTP)	Sending account-related emails such as password resets

Each of these providers processes data only as needed to provide their respective service and maintains their own security and privacy practices.

5. Data Storage & Security

Passwords are never stored in plain text — they are hashed using bcrypt.
Authentication uses signed JWT tokens with expiry.
Database connections use SSL/TLS encryption.
Access to your application data is restricted to your own account through ownership checks on every request.

6. Data Retention & Deletion

Your data is retained as long as your account is active. You may request deletion of your account and all associated data (applications, resumes, chat history) at any time by contacting us at the email below. We will delete your data within a reasonable timeframe, except where retention is required for legal or security purposes.

7. Your Choices

You can edit or delete your job applications and resumes at any time from within the app.
You can request a copy of your stored data.
You can request full account deletion at any time.

8. Children's Privacy

Pursuit is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

10. Contact

For questions about this Privacy Policy or your data, contact: ravitsrivastava3@gmail.com