Privacy Policy

Last updated July 2026. Applies to the Prospect web app at prospect.kaarizmatic.com. There is also an unlisted browser extension (sideload only, not published to the Chrome Web Store) covered by a separate policy.

What Prospect is

Prospect is a job-application tracker. You can use it with no account at all — your data stays in your browser's local storage — or sign in with Google to sync across devices.

What we collect

• If you don't sign in: nothing leaves your device. Applications, events, your base resume, and settings are stored in your browser's local storage only.
• If you sign in with Google: your name, email, and profile photo (standard Google sign-in — not Gmail access), used to identify your account and sync your data to our database.
• Application data: whatever you enter or import — company, role, dates, notes, job descriptions, interview notes, and resume/cover letter files you choose to link.
• Your base resume text: if you paste one in Settings, it's stored so it can be used to generate tailored resumes/cover letters on request. It is never sent anywhere except to Anthropic (see below) at the moment you ask for a tailored document.

Gmail import (optional, separate permission)

Gmail import is a distinct, opt-in feature with its own Google permission request (read-only access to your Gmail). It is never enabled by default. When used, matching emails are scanned to detect job-application activity; we store the structured result (company, role, stage) as an application record, not the raw email content itself.

AI features

Several features — parsing a pasted job posting, drafting follow-up emails, tailoring a resume or cover letter, and Gmail import scanning — send the relevant text (the job posting, your resume, or an email snippet) to Anthropic's Claude API to be processed. Anthropic does not receive your name, email, or account identity through these calls — only the text needed to complete that specific request.

Where data is stored

• Supabase — our database, used only if you sign in. Access is restricted so your data is only ever readable by your own account.
• Vercel — hosts the app and serverless functions, and provides basic, aggregate Web Analytics (page views) with no per-visitor tracking or advertising identifiers.
• Anonymous usage counts — we log coarse, content-free events (e.g. "a follow-up draft was generated") to understand which features are used. These records contain an event name and, when signed in, your account id — never resume text, job descriptions, notes, or any other free-text content.

Your controls

Settings includes an Export as CSV option (download everything you've tracked) and a Clear all data option (permanently delete your applications). Signing out stops any further sync; signing back in restores your synced data.

Changes

If this policy changes, the update will be posted here with a new date.

Contact

Questions about this policy: reach out via prospect.kaarizmatic.com.