Privacy Policy

Last updated: February 18, 2025

Bexalabs ("we", "us", "our") operates the Bexalabs web application and the Bexalabs Chrome extension (together, the "Service"). This policy explains what data we collect, why we collect it, and how we handle it.

The short version: We collect only what is necessary to generate your tailored resumes. We do not sell, rent, or share your personal data with third parties for advertising or marketing. We do not use your data to build profiles for upselling or cross-selling.

1. Information We Collect

Account information. When you create an account we collect your email address and a hashed password. Authentication is handled by Supabase; we never store your password in plain text.

Resume and experience data. You may upload PDF or DOCX files containing your work history. The parsed content is stored as structured data in your account so the Service can generate tailored resumes on your behalf.

Job description data. When you request a resume, the Service receives the job description text (and optionally the job posting URL) you provide. This data is processed to tailor your resume and is not retained after generation is complete.

Usage metadata. We log basic events — such as the number of resumes generated, timestamps, and job titles — to enforce rate limits and help you track your activity. We do not log the full content of your resumes or job descriptions in these records.

Chrome extension data. The extension reads page content on supported job-board sites (e.g., hiring.cafe) solely to extract job description text for resume generation. It does not read content on any other websites. Your authentication session token is stored locally in chrome.storage.local and is only sent to our API server.

2. How We Use Your Data

To generate tailored resumes, cover letters, and application-question answers based on the job descriptions you provide.
To run gap analysis between your experience and job requirements.
To authenticate you and enforce per-account usage limits.
To maintain and improve the Service (e.g., diagnosing errors).

We do not use your data for advertising, behavioral profiling, training machine-learning models, or any purpose unrelated to delivering the Service to you.

3. Third-Party Services

The Service relies on the following third-party providers to function:

Anthropic (Claude API) — processes job descriptions and generates resume content. Data sent to Anthropic is governed by Anthropic's privacy policy. Anthropic does not use API inputs to train its models.
Supabase — provides authentication and database hosting. Data is stored in Supabase-managed infrastructure and governed by Supabase's privacy policy.
Render — hosts the application server. See Render's privacy policy.

We do not share your data with any other third parties.

4. Data Storage and Security

Your data is transmitted over HTTPS and stored in encrypted databases. Access to production systems is restricted to authorized personnel. Generated resume files are stored temporarily and are automatically cleaned up.

5. Data Retention

Account and repository data is retained for as long as your account is active.
Generated files (resumes, cover letters) are stored temporarily for download and are periodically purged.
Job description text is processed in memory during generation and is not persisted afterward.

6. Your Rights

You may at any time:

Access your stored repository data through the web app.
Delete your account and all associated data by contacting us.
Export your data by downloading your generated files.

7. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. If we make material changes we will notify you by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

Questions or requests? Contact us at privacy@bexalabs.com.