Privacy Policy

Effective Date: December 16, 2025
Last Updated: May 20, 2026

Introduction

Side Door Jobs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, job board, and browser extension (collectively, the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

Age Restriction: Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, do not use the Service.

Geographic Scope

This Service is currently available to users located in the United States and Canada.

Information We Collect

1. Personal Information You Provide

When you create an account and use our Service, you may provide:

• Account Information: Email address, password (encrypted)
• Profile Information: Name, phone number, address, work authorization status
• Professional Information: Resume, work history, education, skills, job preferences, answers to common job application questions
• Payment Information: Processed by Stripe (we do not store full payment card details)

2. Information Collected Automatically

Website & Job Board:

• Device information (browser type, operating system)
• IP address and general location
• Pages visited, time spent, links clicked
• Cookies and similar tracking technologies

Browser Extension:

• URLs of job application pages you visit (only on supported ATS vendor sites: Greenhouse, Lever, Ashby, BambooHR)
• Form fields and questions on job applications
• Your responses and autofill actions
• Extension usage statistics

3. Information from Third Parties

• Stripe: Payment processing confirmation, subscription status
• Job Application Sites: We do not receive data from ATS vendors; our extension operates locally in your browser

How We Use Your Information

We use your information to:

1. Provide the Service:
   • Autofill job applications using your profile data
   • Match job application questions to your stored responses
   • Generate AI-assisted responses for long-form questions (via OpenAI/Anthropic LLMs)
   • Display personalized job recommendations
   • Track job applications you've completed
2. Process Payments:
   • Manage subscriptions and billing through Stripe
   • Track usage against subscription limits
3. Improve the Service:
   • Analyze usage patterns to improve autofill accuracy
   • Identify commonly asked questions to expand our matching database
   • Fix bugs and optimize performance
4. Communicate with You:
   • Send service-related emails (account confirmation, password resets, subscription changes)
   • Respond to customer support inquiries
   • Send optional marketing communications (you can opt out)
5. Legal Compliance:
   • Comply with applicable laws and regulations
   • Enforce our Terms of Service
   • Protect our rights and property

How We Share Your Information

1. Service Providers

• Stripe: Payment processing (PCI-DSS compliant)
• Supabase: Database and authentication infrastructure
• OpenAI/Anthropic: AI language models for generating long-form responses (we minimize personal data sent to these services)
• Vercel/Digital Ocean: Hosting infrastructure
• Google LLC (Google Analytics 4): Aggregate marketing-site usage analytics (pages viewed, referral sources, session metrics). Not used for advertising, remarketing, or individual visitor identification. See Cookie Policy for opt-out instructions.
• Resend: Transactional email delivery (account confirmation, password resets, subscription notifications)

2. Third-Party Job Applications

When you use our browser extension to autofill a job application:

• Your profile data is filled into the application form locally in your browser
• Data is submitted directly from your browser to the employer's application system
• Side Door Jobs does not send your application data to our servers or third parties (except when you explicitly use the "Ask AI Assistant" feature)

3. Legal Requirements

We may disclose your information if required by law, subpoena, or court order, or to protect our rights and property.

4. Business Transfers

If Side Door Jobs is acquired or merged with another company, your information may be transferred to the new owner.

We Do Not Sell Your Data

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Active accounts: Data retained indefinitely while subscription is active
• Inactive accounts: Deleted after 24 months of inactivity (you will receive a notification before deletion)
• Deleted accounts: Permanently deleted within 24 hours of deletion request
• Backup retention: May persist in backups for up to 30 days after deletion
• Payment records: Retained for 7 years as required by tax law
• Usage logs: Retained for 90 days

Your Data Rights

Depending on your location, you may have the following rights:

1. Right to Access

You can request a copy of all personal data we hold about you. Email us at support@sidedoorjobs.com with "Data Access Request" in the subject line.

2. Right to Rectification

You can update your profile information at any time through your account settings.

3. Right to Deletion (CCPA/GDPR)

You can delete your account and all associated data at any time:

• Self-Service Portal: Visit sidedoorjobs.com/account/delete to delete your account immediately
• Email Support: Contact support@sidedoorjobs.com with "Delete My Account" in the subject line

Your account and personal data will be permanently deleted within 24 hours. Some information may be retained:

• Backups: May persist in backups for up to 30 days after deletion
• Payment records: Must be retained for 7 years as required by tax law (anonymized where possible)

4. Right to Data Portability

You can request a machine-readable copy of your data. Email us at support@sidedoorjobs.com with "Data Export Request" in the subject line.

5. Right to Opt-Out

• Marketing emails: Click "unsubscribe" in any marketing email
• Analytics cookies: Adjust your cookie preferences in your browser settings

California Residents (CCPA)

You have additional rights under the California Consumer Privacy Act. See the "California Privacy Rights" section below.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze how you use the Service
• Improve functionality and user experience

Types of Cookies:

• Essential Cookies: Required for the Service to function (login, session management)
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and choices

Your Choices:

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service.

Browser Extension Permissions

Our Chrome extension requests the following permissions:

• storage: Stores your profile data, authentication tokens, and preferences locally in your browser for offline access and faster performance.
• tabs: Detects when you navigate to supported job application pages (Lever, Greenhouse, Ashby, BambooHR) to automatically open the extension popup for quick access.
• alarms: Syncs your profile data with our servers every 30 minutes to ensure you always have the latest information when autofilling applications.

What the extension accesses: The extension only activates on job application pages from supported ATS platforms (Lever, Greenhouse, Ashby, BambooHR). On these pages, it reads form field labels to map them to your profile data and reads job descriptions for AI-powered question answering. The extension does not access pages outside of these platforms, does not read or modify your browsing history, and does not track your web activity.

Data Security: The extension stores your authentication token locally. Form data is processed locally in your browser and not transmitted to our servers unless you use the "Ask AI Assistant" feature.

AI-Generated Content

When you use the "Ask AI Assistant" feature:

• Your profile data, the job description, and the specific question are sent to OpenAI or Anthropic LLMs
• The AI generates a response based on this context
• AI-generated responses may contain errors or inaccuracies - always review before submitting
• We cannot guarantee the accuracy or appropriateness of AI-generated content
• You are responsible for reviewing and editing all AI-generated responses before submission

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (database encryption via Supabase)
• Secure authentication (Supabase Auth with JWT tokens)
• Access controls and least-privilege principles
• Regular security audits and updates

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act:

Categories of Personal Information Collected:

• Identifiers (name, email, IP address)
• Professional information (resume, work history)
• Internet activity (browsing history on job sites)
• Payment information (processed by Stripe)

Business Purpose for Collection:

• Providing job application autofill services
• Subscription management and billing
• Service improvement and analytics

Third Parties We Share With:

• Service providers (Stripe, Supabase, OpenAI, Anthropic, Vercel, Digital Ocean, Google LLC for analytics, Resend for transactional email)

Your CCPA Rights:

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out of Sale: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To Exercise Your Rights: Email support@sidedoorjobs.com with your request. We will respond within 45 days.

International Data Transfers

Our servers are located in the United States. If you are accessing the Service from outside the U.S., your information will be transferred to and stored in the U.S.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when we post the revised policy on our website. We will notify you of material changes via email or a prominent notice on our website.

Last Updated: May 20, 2026

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: support@sidedoorjobs.com
• Website: www.sidedoorjobs.com