Privacy Policy

Last updated: March 2026

Jobtoss ("we," "our," or "us") is operated by Marc Bender / MosarcAI LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Jobtoss Chrome extension and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account, or your Google account information if you sign in with Google OAuth.
• Resume Content: Your master resume, work history, education, skills, and other profile information you enter during onboarding.
• Writing Samples: Text samples you provide to train cover letter generation to match your writing style.
• Job Application Data: Information related to job postings you apply to, including job descriptions, screening question responses, and application status.
• Payment Information: Billing details are collected and processed by Stripe. We do not store your credit card numbers on our servers.

1.2 Information Collected Automatically

• Usage Data: Application counts (daily and monthly), feature usage, and error logs to improve the Service.
• Browser Information: Browser type and version, as necessary for the Chrome extension to function.

1.3 Information We Do Not Collect

• We do not use tracking cookies or third-party analytics trackers.
• We do not collect browsing history beyond the job posting pages you actively apply to using Jobtoss.
• We do not sell your personal information to third parties.

2. How We Use Your Information

• Resume Tailoring: Your resume content and job descriptions are processed by our AI to generate tailored resumes for each application.
• Cover Letter Generation: Your writing samples and job descriptions are used to generate personalized cover letters.
• Form Auto-Fill: Your profile information is used to automatically fill job application forms on supported platforms (Greenhouse, Lever, Ashby, LinkedIn).
• Screening Q&A: Your profile and the job posting are used to generate suggested answers to screening questions.
• Account Management: To manage your account, process payments, and communicate with you about the Service.
• Service Improvement: Aggregated, anonymized usage data may be used to improve the Service.

3. Third-Party Services

We use the following third-party services to provide the Service:

• Anthropic (Claude API): Resume content, job descriptions, writing samples, and screening questions are sent to Anthropic's Claude API for AI processing. Anthropic's use of this data is governed by their privacy policy. Anthropic does not use API inputs to train their models.
• Stripe: Payment processing is handled by Stripe. Your payment information is subject to Stripe's privacy policy.
• Google: If you sign in with Google, authentication is handled via Google OAuth. Your Google account information is subject to Google's privacy policy.
• Supabase: Our backend infrastructure is hosted on Supabase. Data is stored in cloud-hosted PostgreSQL databases.

4. Data Storage and Security

• Your data is stored in Supabase-hosted PostgreSQL databases with encryption at rest.
• All data transmitted between your browser, our servers, and third-party services is encrypted in transit using HTTPS/TLS.
• Access to production databases is restricted and audited.
• Session tokens are stored locally in your browser's Chrome extension storage and refreshed automatically.

5. Data Retention

• Your account data is retained while your account is active.
• If you delete your account, all associated data (profile, resumes, application history) will be permanently deleted within 30 days.
• Aggregated, anonymized usage statistics may be retained indefinitely.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal data.
• Deletion: Request deletion of your account and all associated data.
• Export: Request an export of your data in a portable format.

To exercise any of these rights, contact us at marc@copytier.com.

7. Cookies

Jobtoss uses minimal cookies for authentication session management only. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your CCPA rights.

To submit a CCPA request, contact us at marc@copytier.com.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: marc@copytier.com
• Company: MosarcAI LLC