Privacy Policy
Compass helps you run a job search: it keeps your profile and resumes, finds and tracks openings, drafts tailored materials with AI, and helps you fill in applications. This policy explains what data that involves and what happens to it.
What we collect
- Account details: your email address, and if you sign in with Google, your name and profile picture as Google shares them. We never see your Google password.
- What you put in: your profile, resumes, cover letters, job descriptions, tracked jobs, notes, application answers, and settings.
- API keys you add: encrypted before they're stored, and never shown again after you save them.
- Application forms (Chrome extension): when you click “Read this form”, the Compass Apply extension reads the questions and choices on that page and sends them to your Compass account to draft answers. It only reads pages where you ask it to, and it never submits an application.
How we use it
- To provide the features you use: storing your data, matching jobs to your profile, drafting materials and answers, and filling forms you choose to fill.
- To keep the service secure and working.
We don't sell your data, we don't use it for advertising, and we don't use it to train AI models.
Who we share it with
- AI providers you choose (Anthropic, Google Gemini, or OpenAI): when you use an AI feature, the relevant parts of your profile and the job description are sent to that provider to generate a response, under their API terms.
- Supabase hosts our database and sign-in.
- Job sources: we fetch public listings from job boards and company career sites. If you add a JSearch key, your job titles and locations are sent to JSearch to search listings.
Google user data
If you sign in with Google, we use only your email address, name, and profile picture to create and identify your account. We don't request access to Gmail, Drive, Calendar, or other Google data. Compass's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Keeping and deleting your data
We keep your data while your account is open. To export or delete your data or your account, email support@compass-os.dev and we'll do it within 30 days. Deleted data may remain in backups for up to 30 more days.
Security
Data is sent over HTTPS, each account can only access its own records, and API keys are encrypted at rest. No system is perfectly secure, so please use a strong sign-in.
Changes and contact
If we change this policy in a way that matters, we'll update the date above and tell you in the app. Questions: support@compass-os.dev.