Privacy Policy

1. Introduction

Welcome to SARNBERT ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume matching system. Please read this privacy policy carefully.

2. Information We Collect

2.1 Personal Information

When you use SARNBERT, we may collect:

• Account Information: Name, email address, and profile picture (via Google OAuth)
• Resume Data: Temporarily stored in memory only during your active session
• Job Description Data: Job titles, descriptions, requirements, and industry information
• Usage Data: Information about how you interact with our system

2.2 Automatically Collected Information

• Browser type and version
• IP address (anonymized)
• Device information
• Session cookies for authentication
• Usage patterns and analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

• Resume Matching: To analyze and match resumes with job descriptions using our AI technology
• Authentication: To verify your identity and provide secure access to your account
• Service Improvement: To enhance and optimize our AI algorithms and user experience
• Communication: To send you important updates about our service
• Analytics: To understand how users interact with our platform and improve functionality
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Security

4.1 Resume Data Privacy

4.2 Job Description Data

Job descriptions are stored in our secure database to allow you to reuse them across multiple matching sessions. This data includes:

• Job titles and descriptions
• Required skills and qualifications
• Industry categories

4.3 Security Measures

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data transmission
• Secure OAuth 2.0 authentication via Google
• Session-based access control
• Regular security audits and updates
• Encrypted database connections
• Memory-only storage for sensitive resume data

5. Google OAuth and API Usage

SARNBERT uses Google OAuth for authentication and optionally Google Drive API for resume import. When you authorize Google Drive access:

• We request read-only access to files you explicitly select
• Access tokens are stored in memory only during your session
• We never access files without your explicit permission
• You can revoke access at any time through your Google Account settings

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party services that help us operate (e.g., cloud hosting, analytics)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Revoke Consent: Withdraw consent for data processing at any time

8. Cookies and Tracking

We use session cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns (anonymized)
• Improve system performance

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

9. Data Retention

• Resume Data: Deleted immediately after session ends (memory-only storage)
• Account Information: Retained until account deletion
• Job Descriptions: Retained until manually deleted by user
• Usage Logs: Retained for 90 days for security and analytics

10. Children's Privacy

SARNBERT is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending email notifications for significant changes

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

14. Compliance

SARNBERT is committed to compliance with applicable data protection laws, including:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable regional data protection laws