Privacy Policy

Last updated October 13, 2026

PathBot.ai ("we") helps you find jobs, tailor your resume and cover letters, and fill in job applications with our Chrome extension. This policy explains what we collect, why, and the choices you have.

What we collect

• Account: your name and email from sign-in (handled by our auth provider, Clerk).
• Job-search profile: your onboarding answers (target roles, seniority, locations, salary floor, work-authorization and sponsorship answers, industries), skills, and the autofill details you enter in Settings (phone, links, current role).
• Resumes and documents: files you upload, the text we extract from them, and the tailored resumes and cover letters you generate or edit.
• Applications: jobs you save, applications you log, their status and notes, and the screening answers you submit through the extension.
• Extension: a random install ID, extension version and browser user-agent, so you can see and revoke installs in Settings.
• Billing: subscription status from Stripe. We never see or store your full card number.

What the Chrome extension reads

The extension only sends us page content in these cases:

• the URL of the application page you're on, to find the matching job;
• the labels and options of screening questions it couldn't fill, when you click Autofill, to suggest answers;
• the visible job posting text when you click "Save this job".

It does not read your browsing history, other tabs or cookies, and it never submits an application for you. You review and click Submit yourself.

How we use it

• to show jobs with a match score and explain the match;
• to generate tailored resumes, cover letters and suggested answers;
• to autofill applications you choose to fill, and track them;
• to run your subscription, prevent abuse, and keep the service working.

We don't sell your personal data, and we don't use it for advertising.

AI processing

When AI features are on, relevant parts of your profile, resume text and the job description are sent to our AI provider (OpenAI) to produce match explanations, tailored documents and answer suggestions. We remove your email, phone number and LinkedIn URL from resume text before sending it. Under OpenAI's API terms, this data isn't used to train their models. Questions about work authorization, sponsorship, salary, criminal history and demographics are never answered by AI. Those come only from answers you saved yourself, or you fill them in.

Service providers

We use Clerk (sign-in), Stripe (payments), OpenAI (AI features), Vercel and Railway (hosting and databases), Vercel Web Analytics (anonymous page-view stats), Cloudflare R2 (file storage) and Resend (email alerts, if you turn them on). They process data only to provide their service to us.

Cookies and local storage

We only use cookies that are essential to run the service. No advertising cookies, no cross-site trackers and no cookie-based analytics, so there's no cookie banner.

• Clerk sign-in cookies (__session, __client_uat and related __clerk_* cookies): keep you signed in. Essential.
• Stripe: Checkout and the billing portal run on Stripe's own pages (checkout.stripe.com / billing.stripe.com), where Stripe sets its own cookies for payments and fraud prevention. Our pages don't load Stripe scripts.
• Vercel Web Analytics: counts page views (page path, referrer, country, browser and device type) to show us aggregate traffic. It is cookieless: no cookies or local storage, no cross-site tracking, and visitors are identified only by a short-lived hash that resets daily and can't be linked back to you. We don't send your account, resume or job data to it.
• Local storage (stays in your browser, never sent to us): your light/dark theme, sidebar layout, and whether you turned the homepage music on.

Do Not Sell or Share My Personal Information

We don't sell your personal information, and we don't share it for cross-context behavioral advertising (as defined by the CCPA/CPRA). There's nothing to opt out of; if you have questions, email support@pathbot.ai.

Job sources

Jobs come from public job-board APIs (Greenhouse, Lever, Ashby) and from pages you save yourself. We don't scrape LinkedIn, Indeed or Glassdoor.

Retention and deletion

We keep your data while your account is open. In Settings you can export everything as JSON or delete your account. Deletion cancels your subscription and removes your profile, files, documents, applications and login. Payment records Stripe must keep for tax and accounting remain with Stripe.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export or delete your data, or object to processing. Use Settings or email support@pathbot.ai.

Security

Data is encrypted in transit. Access is limited to your signed-in account, and the extension's permissions are kept to the minimum it needs.

Children

PathBot.ai isn't meant for anyone under 16.

Credits

Homepage music: “8 Bit Lofi” by ThePixel, from OpenGameArt.org, released under CC0 (public domain). It never plays unless you press the lollipop.

Changes

If we make material changes, we'll update the date above and let signed-in users know.