1. Introduction

Matatah ("we", "us", "our") operates Matatah. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and Chrome extension (collectively, the "Service"). Please read this policy carefully. By using Matatah, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, and authentication credentials (managed via Clerk). Profile data: resume text, work experience, skills, education, LinkedIn URL, GitHub URL, personal website, target roles, and location preferences. Application data: job descriptions, tailored resumes and cover letters, application status, and notes.

2.2 Information Collected Automatically

Usage data: pages visited, features used, timestamps, and interaction patterns within the Service. Device information: browser type, operating system, and screen resolution. The Chrome extension collects: job posting URLs you choose to apply to, form field data on job application pages (only when you actively trigger autofill), and page metadata for job matching purposes.

2.3 Information We Do NOT Collect

We do not collect browsing history beyond job application pages you explicitly interact with. We do not collect passwords to third-party job sites. We do not collect financial information (payments are processed by Stripe). We do not collect data from your browser outside of the Matatah extension's active use.

3. How We Use Your Information

We use your information to:

(a) Provide, maintain, and improve the Service; (b) Generate AI-tailored resumes and cover letters matched to specific job descriptions; (c) Score and rank job matches against your profile; (d) Autofill job application forms via the Chrome extension; (e) Track your application pipeline and status; (f) Send transactional emails related to your account and applications; (g) Respond to support inquiries; (h) Detect and prevent fraud or abuse.

4. AI Processing

Matatah uses third-party AI models (including Anthropic's Claude) to generate tailored application materials. When processing your data through AI: (a) your resume, profile, and job descriptions are sent to the AI provider to generate tailored content; (b) we send only the minimum data necessary for content generation; (c) AI providers process data according to their own privacy policies and data processing agreements; (d) AI-generated content is stored in your account and is accessible only to you.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service providers: Clerk (authentication), Supabase (database hosting), Vercel (application hosting), Stripe (payment processing), and Anthropic (AI content generation) — each bound by data processing agreements. Legal requirements: when required by law, regulation, legal process, or governmental request. Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice to users.

6. Data Storage and Security

Your data is stored on servers in the United States via Supabase and Vercel. We implement industry-standard security measures including: encryption in transit (TLS/HTTPS), encryption at rest for sensitive data, access controls and authentication via Clerk, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion: profile data and generated documents are deleted within 30 days; anonymized usage analytics may be retained for product improvement; data required by law (e.g., billing records) is retained as legally required. You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

(a) Access the personal data we hold about you; (b) Correct inaccurate or incomplete data; (c) Delete your personal data; (d) Export your data in a portable format; (e) Object to or restrict certain processing of your data; (f) Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@hakunamatatah.com. We will respond within 30 days.

9. Chrome Extension Privacy

The Matatah Chrome extension: (a) only activates on job application pages when you explicitly trigger it; (b) does not run in the background or monitor general browsing; (c) communicates only with Matatah servers (matatah.com); (d) stores minimal data locally (your authentication token and cached profile data); (e) does not inject ads, trackers, or analytics into web pages; (f) can be disabled or uninstalled at any time through Chrome settings.

10. Cookies and Tracking

We use essential cookies for authentication and session management via Clerk. We do not use third-party advertising cookies or cross-site tracking. We may use anonymous analytics to understand Service usage patterns. You can control cookies through your browser settings.

11. Children's Privacy

Matatah is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

12. International Data Transfers

If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

13. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@hakunamatatah.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice within the Service. The "Last updated" date at the top indicates when the policy was last revised.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@hakunamatatah.com.