Privacy Policy

• Your account: your name, email address and password (stored only as a secure hash by our sign-in provider).
• Your resume and Profile: the resume you upload and what we read from it, and what you add or edit: contact details, education, jobs, projects, the work items under them, and skills.
• Application answers: answers you give for application forms, such as work authorization, start date, salary expectations and preferred locations. This can include optional voluntary self-identification (gender, race or ethnicity, veteran and disability status). We use these only to fill forms you choose to fill; they never appear on a resume and are never used to rank or tailor anything.
• Jobs and applications: postings you open with the extension or pick in Jobs, the resumes we tailor for them, what was filled into each application, and the applications you track in Applied.
• Autopilot: your Autopilot settings, the jobs it matched for you, and what happened with each (filled, waiting for you, sent, skipped).
• Gmail, if you connect it: see section 4.
• Basic technical data: server logs (such as IP address, browser type and errors) used to keep the service running and secure. We don’t use advertising trackers.

The extension runs on the pages you visit so it can recognize job postings and application forms. On other pages it stays idle. It does not record your browsing history.

• When you check your fit, tailor a resume or ask for written answers, it sends that job's posting text and the form's questions to our servers.
• When it fills a form, it writes your Profile and answers into that form on the page; nothing is submitted unless you click the site's Submit button, or you've turned on Complete Autopilot.
• When a site confirms an application you filled with Cherrypick, the extension logs the job, what was filled and the resume used to your Applied list.

• To build your Profile, tailor resumes and fill applications.
• To run Autopilot: matching new jobs, filling applications, and, if you choose Complete Autopilot, submitting them on your behalf.
• To track your applications and draft email replies you ask for.
• To operate, secure, support and improve the service, and to enforce our Terms.

We don’t sell your information, use it for advertising, or share it with employers except what you (or Autopilot, on your instructions) submit in an application.

Connecting Gmail is optional. If you connect it, we request read-only access (gmail.readonly) and use it only to find emails about your job applications (confirmations, interviews, assessments, offers and rejections) and update your Applied list. We keep only what those emails say about your applications: the company, role, stage, dates and times, interviewer names, meeting links, and the email’s subject, sender and a short snippet. We don’t store full email bodies, and we never read, keep or use other email.

Cherrypick’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is not used for advertising, is not sold, is not used to train AI models, and is not read by people except with your permission, for security or abuse investigations, or where the law requires it. You can disconnect Gmail at any time in Settings; that revokes our access at Google and deletes the stored access.

We use Anthropic’s Claude models to read resumes, compare your Profile with job postings, write tailored resume bullets and draft answers, cover letters and email replies, and to read job emails. For that, the relevant parts of your Profile, the posting, the form’s questions or the email are sent to Anthropic’s API. Under Anthropic’s commercial terms, that data isn’t used to train their models. AI output is written only from your own Profile and the job posting.

• Supabase: database, sign-in and file storage.
• Our hosting provider: runs the website and its servers.
• Anthropic: AI processing (section 5).
• Google: Gmail, only if you connect it.
• PostHog: anonymous product analytics: which pages and features are used, tied only to a random account id. No resume, answer, job or email content, no recordings of your screen, and your browser’s Do Not Track is honoured. Turn it off in Settings.
• A payment processor (such as Stripe), once paid plans open: it handles card details; we never see your full card number.

They process data only to provide their service to us. We may also share information if the law requires it, to protect people or the service, or as part of a sale or merger of Cherrypick, in which case this policy keeps applying to it.

We keep your information while you have an account. When you delete your account, we delete your Profile, resumes (uploaded and tailored), applications, Autopilot data and Gmail connection right away; copies in our backups expire within 30 days. Job listings in the Jobs catalog come from public company job boards and aren’t personal data.

• See and download your data: “Download Your Data” on your Account page gives you everything we hold about you as a file.
• Correct it: edit your Profile and answers at any time.
• Delete it: “Delete Account” on your Account page deletes your account and data.
• Stop processing: disconnect Gmail, turn off Autopilot, turn off usage data in Settings, or remove the extension whenever you like.

Depending on where you live (for example California or the EU), you may have further rights, such as objecting to processing or complaining to a data protection authority. To use them, email support@cherrypick.work.

Data is encrypted in transit, Gmail access is encrypted at rest, and every account can reach only its own data. No service is perfectly secure; if something goes wrong that affects your information, we’ll tell you.

Cherrypick isn’t for anyone under 16, and we don’t knowingly collect their information.

If we change this policy in a way that matters, we’ll tell you by email or in the app before it takes effect. Questions or requests: support@cherrypick.work.