Privacy Policy

1. Scope

This policy applies to the Scan Careers website, Scan Careers account service, and Scan Careers Chrome extension. It reflects the product as it operates on the effective date. Scan Careers is an evidence-oriented job-comparison tool, not a recruiting service or employer.

2. Information we collect

Google sign-in and account identity

When you choose Google sign-in, Scan Careers receives and stores your Google account subject identifier, verified email address, a bounded display name, and, when available, a bounded HTTPS Google-hosted profile-image URL. We also store basic account status and timestamps.

Sessions

Scan Careers issues a random, opaque session token to your browser. The service stores a SHA-256 hash of that token, along with session identifiers, creation and expiration times, last-seen time, and revocation state.

Career information you explicitly save

Signing in does not automatically upload pre-existing Chrome-extension data. If you explicitly choose to save local data to your account, the service can store a structured career profile, bounded confirmed or proposed evidence records, and bounded saved-scan records. These records can include role and work preferences, evidence text and review state, job identity details, canonical requirements, corrections, decisions, and actions.

Usage and first-party analytics

The service records bounded successful-analysis accounting, including a usage category, provider and model labels, quantity, and timestamp. First-party website analytics store only an allowlisted event name and timestamp. Those analytics rows contain no account identifier, custom metadata, pasted job text, or AI-provider content.

3. Job comparison processing

When you request a website comparison, the pasted job descriptions are sent to the Scan Careers Worker and processed to produce the requested comparison. They are not durably stored in the production Scan Careers D1 database. The website may retain the validated derived comparison in your browser until you clear it; pasted descriptions remain only in the active page memory and form state.

The Chrome extension can keep bounded profile, evidence, settings, and saved-scan information in local Chrome storage. Local browser or extension information is separate from optional cloud account data.

4. AI processing

Scan Careers uses Google Gemini, a service provided by Google, to analyze job-related information and return structured analysis. For a website comparison, the pasted job descriptions are included in the request sent to Gemini. Scan Careers validates and bounds provider output before presenting it. Google operates Gemini independently; this policy does not make claims about Google's separate retention, model-training, or other data practices. Review Google's applicable terms and privacy information for those practices.

5. Information we do not durably store in D1

• Google access tokens or refresh tokens.
• OAuth authorization codes after the authentication request that consumes them.
• Plaintext Scan Careers session or handoff tokens.
• The server-side Gemini API key in browser storage.
• Full pasted multi-job description collections.
• Raw Gemini prompts or raw Gemini responses.
• Raw or derived multi-job comparison data.
• Raw résumé files or raw imported résumé text.
• Google profile-image binaries, Gmail, Drive, contacts, or other unnecessary Google profile data.

Bounded structured information derived from user-reviewed career evidence may be stored locally, and may be stored in the cloud only after explicit save or sync.

6. Cloud save, restore, and deletion

Cloud save and restore are explicit actions. The current sync process compares data and reports conflicts instead of silently overwriting divergent records.

The authenticated Scan Careers account-deletion control deletes the cloud user record and cascades removal of linked Google identity records, sessions, handoffs, cloud career profile, cloud evidence, cloud saved scans, and linked usage records. The old session then becomes invalid.

Deleting a cloud account does not delete local Chrome-extension or browser data. Local data remains on the device until you use the product's local deletion controls or clear the relevant browser or extension storage. Metadata-free analytics events have no account identifier and cannot be linked back to an account for account deletion.

7. Service providers

• Cloudflare provides website hosting, Worker execution, and D1 database infrastructure.
• Google provides account authentication.
• Google Gemini provides AI processing for requested analyses.

No marketing-email service is currently implemented. A verified Google email address is used as an account and authentication identifier; Google sign-in does not subscribe you to a newsletter or establish marketing consent.

8. Security

Current safeguards include HTTPS transport, server-side secrets, random opaque sessions, hashed server-side session representations, expiring and single-use OAuth state and handoff records, exact origin and return-URL controls, bounded request fields, and user-scoped database access. No system can guarantee absolute security.

9. Your choices and requests

You can choose whether to sign in, whether to save eligible local data to the cloud, whether to restore cloud data, and whether to delete your cloud account. You can also clear the locally saved website comparison or use the extension's local privacy controls.

10. Policy updates

This policy may be updated as Scan Careers changes. Material changes will be reflected by updating this page and its effective date. The revised policy applies when posted, subject to applicable law.