Privacy Policy

1. Introduction

Matatah ("we", "us", "our") operates the Matatah web application and Chrome extension (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Matatah you agree to the practices described here.

2. Information We Collect

2.1 Information you provide

Account information: your name and email address, obtained when you sign in with Google or GitHub. Profile data: résumé text, work experience, skills, education, LinkedIn/GitHub/website URLs, target roles, salary preferences, and location. Application data: job descriptions, tailored résumés and cover letters, application status, and notes. Community data: posts, replies, and upvotes you create in the in-app community.

2.2 Information collected automatically

Usage data: pages visited, features used, and timestamps. Device information: browser type, operating system, and screen size. The Chrome extension collects job-posting URLs you choose to apply to, form-field data on application pages (only when you actively trigger autofill), and page metadata used for matching.

2.3 Information we do NOT collect

We do not collect general browsing history beyond the application pages you explicitly interact with, we do not collect passwords to third-party job sites, and we do not store your full payment-card details (payments are handled by Stripe).

3. How We Use Your Information

We use your information to:

(a) provide, maintain, and improve the Service; (b) generate AI-tailored résumés and cover letters matched to specific job descriptions; (c) score and rank job matches against your profile; (d) autofill application forms via the Chrome extension, at your direction; (e) track your application pipeline; (f) run the in-app community; (g) send transactional emails about your account; (h) respond to support requests; and (i) detect and prevent fraud or abuse.

4. AI Processing and Automated Applications

Matatah uses third-party AI models (including Anthropic's Claude) to generate tailored application materials. When we do this: (a) your résumé, profile, saved answers, and the relevant job description are sent to the AI provider; (b) we send only the minimum data needed; (c) providers process data under their own privacy policies and data-processing agreements; and (d) generated content is stored in your account and visible only to you.

When you use autofill or automated-application features, your profile and generated documents are entered into the third-party job sites and applicant-tracking systems you choose to apply to. Those third parties receive and process that data under their own terms. You direct and authorize each submission and are responsible for the information sent. We record your acceptance of our Terms and this Policy — with a timestamp and version — as a record of your consent. Matatah never submits an application without you reviewing it first.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service providers who help us run Matatah, each bound by their own terms and data-processing agreements: Google and GitHub (sign-in), Neon and Vercel (database and application hosting, United States), Stripe (payments), Resend (transactional email), and Anthropic (AI content generation). We may also disclose data when required by law or legal process, or in connection with a merger, acquisition, or sale of assets, with prior notice to users.

6. Community Content

Anything you post in the in-app community — posts, replies, and the display name shown on them — is visible to other signed-in Matatah members. Please don't share sensitive personal information or other people's private details there. You can delete your own posts, and admins may remove content that violates our guidelines. Feature requests you post may be copied into our internal roadmap tooling.

7. Data Storage and Security

Your data is stored on servers in the United States (Neon and Vercel). We use industry-standard safeguards including encryption in transit (TLS/HTTPS), encryption at rest for sensitive data, and access controls. No method of transmission or storage is completely secure, and — as an early-stage prototype — we cannot guarantee absolute security or that data will never be lost.

8. Data Retention

We retain your data while your account is active or as needed to provide the Service. On account deletion, profile data and generated documents are removed within 30 days; anonymized usage analytics may be kept for product improvement; and records required by law (e.g., billing) are retained as required. You can request deletion at any time.

9. Your Rights

Depending on where you live, you may have the right to:

(a) access the personal data we hold about you; (b) correct inaccurate data; (c) delete your data; (d) export your data; (e) object to or restrict certain processing; and (f) withdraw consent where processing relies on it. To exercise these rights, email privacy@matatah.com. We aim to respond within 30 days.

10. Chrome Extension Privacy

The Matatah Chrome extension (a) activates only on job-application pages when you trigger it; (b) does not run in the background or monitor general browsing; (c) communicates only with Matatah servers (matatah.com); (d) stores minimal data locally (your auth token and cached profile); (e) does not inject ads, trackers, or analytics into web pages; and (f) can be disabled or removed at any time from Chrome.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. We may use privacy-respecting, aggregate analytics to understand how the Service is used. You can control cookies through your browser settings.

12. Children's Privacy

Matatah is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it promptly.

13. International Data Transfers

If you use the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer, and we maintain appropriate safeguards in line with applicable data-protection laws.

14. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information. To exercise these rights, email privacy@matatah.com.

15. Changes to This Policy

We may update this Policy from time to time. We'll note material changes via email or a prominent notice in the Service. The "Last updated" date above reflects the latest revision.

16. Contact Us

Questions about this Policy or our data practices? Email privacy@matatah.com or support@matatah.com.