Privacy Policy

The short version

• We use your information only to run Wroteback for you.
• We don’t sell your data, show you ads, or share your information with employers.
• Nothing is ever sent or submitted in your name. You review and submit every application yourself.
• You can ask us to delete your account and data at any time by emailing heardback.team@gmail.com.

What we collect

• Account details. Your email address. If you sign in with Google, we also receive your name and profile picture from Google.
• Your résumé and profile. What you upload or type in: work history, education, skills, projects, summary and any contact details on your résumé.
• Job preferences. The roles, locations and work style you want, your own résumé rules, and whether you need visa sponsorship.
• What you do in Wroteback. Applications you track and their status, tailored résumé versions and the suggestions you accepted, match scores, people you note down for referrals and messages you draft, and how many times you’ve used features with limits.
• The Chrome extension. On supported job application pages (Greenhouse, Lever and Ashby), the extension reads the page to identify the job, fills in fields from your profile when you choose to, and records that you applied. It doesn’t read other websites or your browsing history.
• Basic usage data. We use Vercel Web Analytics to count visits: pages viewed, the site that referred you, your country and device type. It’s reported in aggregate and doesn’t use cookies. Inside the app we also use PostHog to see which features people use and whether they come back: page views and actions like tracking an application or tailoring a résumé, linked to your account when you’re signed in. It never includes your résumé’s contents.

The job listings in Wroteback come from companies’ public job boards. They aren’t personal information about you.

How we use it

• To show you jobs and score how well they match your background and preferences.
• To suggest specific changes to your résumé for a job, and to draft messages you can choose to send.
• To track your applications and show you insights, like which companies reply and when to follow up.
• To keep your account secure, prevent abuse and enforce limits during the beta.
• To understand how Wroteback is used so we can improve it, and to reply when you contact us.

Whether you need visa sponsorship is used only to filter jobs and flag postings that say they can’t sponsor.

How we use AI

Match scores, résumé suggestions and message drafts are generated by Claude, an AI model made by Anthropic. To produce them we send Anthropic the relevant parts of your profile and preferences along with the job posting. We ask the model to use only facts already in your résumé, and you review every suggestion before anything changes. AI output can still be wrong, so please check it.

Who we share it with

We share information only with the services that run Wroteback for us, and only what each one needs:

• Supabase stores our database and handles sign-in.
• Vercel hosts the website and provides visit counts.
• PostHog measures how the app’s features are used.
• Anthropic generates match scores, suggestions and drafts.
• Google handles sign-in if you choose “Continue with Google”.

We may also share information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of Wroteback, in which case this policy would continue to apply to your information.

Your choices

• View and edit your résumé, preferences and tracked applications in the app at any time.
• Ask for a copy of your data, or ask us to delete your account and data, by emailing heardback.team@gmail.com. We’ll do it within 30 days.
• Remove the Chrome extension at any time from your browser’s extensions page.

How long we keep it

We keep your information while your account is open. When you delete your account, we delete your data within 30 days, except for copies in backups, which are overwritten on a rolling basis, and anything we’re legally required to keep.

Security

Your data is stored with access controls so that only you can read your own résumé, applications and notes. Connections to Wroteback are encrypted. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

Connecting your inbox

Connecting Gmail is optional. If you connect it, Wroteback gets read-only access: it can never send, delete or change your email. About every 30 minutes it looks at new emails and keeps only the ones that mention a company you've applied to. For those, it sends the sender, subject line and short preview to our AI provider to decide whether it's a confirmation, an interview invite, an offer or a rejection, and updates that application in your tracker.

We store the result (which application, what kind of reply, and when), never the email itself. We don't use your email for advertising, don't sell it, and don't use it to train AI models. Wroteback's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Gmail from your profile at any time; we then revoke our access at Google and delete the stored results.

You can also forward job emails to your private Wroteback address instead of connecting Gmail. We keep the sender, subject and a short preview only until our system reads them (usually within 30 minutes), then delete them and keep only the result.

Children

Wroteback isn’t meant for anyone under 16, and we don’t knowingly collect information from them.

Changes to this policy

If we make meaningful changes, we’ll update the date at the top and let you know in the app or by email before they take effect.