Privacy

In plain English

Iterlane helps job seekers tailor resumes, remember screening answers, save jobs, and review supported ATS applications before submit. To run those workflows we collect what you give us (account email, profile, resume text, saved jobs, screening answers) and basic usage telemetry (signup events, paywall hits, page views). We do not sell your data or use it for third-party marketing. We do not auto-submit applications on your behalf. The Chrome extension only runs on supported ATS domains, plus any custom domain you explicitly enable.

Information we collect

We collect the following categories of information. Each is described with its source and purpose below.

• Account & authentication data. Email address, display name, password hash (handled by our authentication provider, never seen by us in plain text), and — if you use social sign-in — the identifiers and email returned by that provider. We never receive your social-login password.
• Profile data. The resume text you upload or paste, plus structured profile fields you provide or confirm: contact info, work history, education, skills, certifications, and stated location.
• Generated materials. Tailored resumes, cover letters, and structured outputs we produce from your profile and a job description. PDFs of these may be stored in object storage keyed to your account.
• Saved jobs. Job listing URLs, titles, companies, locations, and descriptions you save or that come from connected job-feed sources, plus any tags or notes you add.
• Screening-answer memory. Question text, your approved answers, and content fingerprints used to detect when a future question matches one you have already answered.
• Usage events. Aggregate signals about how you use Iterlane: signups, tailoring runs created, paywall events, trial-warning views, autofill outcomes (which fields filled, which were skipped), and feature use. These help us understand what works and improve the product.
• Billing data. If you upgrade to Pro, our payment processor collects and processes your payment information. We receive customer ID, subscription state, and billing email. We do not store your full card number.
• Operational logs. Standard application and infrastructure logs (timestamps, request paths, error traces) used for debugging, security, and reliability.
• Chrome extension data. When you have the Iterlane extension installed and visit a supported ATS application page, the extension reads the visible form fields on that page so it can propose fills. It also reads visible page content (job title, company, posting URL) for context-matching screening answers. The extension stores your authentication token and a small profile cache locally in chrome.storage.local. It does not read other tabs, browsing history, cookies from unrelated sites, or page content outside the ATS application form.

How we use this information

• To run the product workflow: tailor resumes, draft cover letters, propose autofill, surface saved screening answers.
• To authenticate you and protect your account.
• To enforce plan limits (trial action cap, monthly Pro quota) and process billing if you upgrade.
• To send transactional email related to your account (sign-in links, password resets, billing notices). We do not send marketing email without your separate consent.
• To improve the product through aggregate analytics, quality evaluation, prompt iteration, and debugging specific user-reported issues with your permission.

What we do not do. We do not sell your data. We do not transfer your data to third parties for their own marketing. Your text is sent to AI providers to fulfill the request you initiated. We may use de-identified examples, aggregate product data, feedback, evaluation results, and prompts to improve Iterlane. We will not use identifiable resume, profile, or application content to train or fine-tune Iterlane-owned models for general use without appropriate notice or consent. We do not auto-submit applications on your behalf. We do not use your data to determine creditworthiness or for lending. We do not surveil you across the web or read pages outside supported ATS domains in the extension.

Service providers

We use service providers to run Iterlane. Each receives only the data needed for its function. Provider categories include:

• Authentication and email providers — account login, sessions, magic links, password resets, and optional social login.
• Database, hosting, and object-storage providers — the application database, generated files, backups, and infrastructure needed to serve the product.
• AI routing and generation providers — drafting tailored resume bullets, cover letters, and screening-answer adaptations. We send only the content needed for the request you initiate.
• Billing providers — checkout, subscription status, invoices, and payment-card handling. We do not store your full card number.
• Analytics and error-monitoring providers — product usage events and reliability signals. We do not intentionally send resume text, screening-answer text, or generated materials to analytics tools.

If we materially change provider categories that handle your account or resume content, we will update this page and, where reasonable, notify users via email or in-app banner before the change takes effect.

How long we keep data

• Account, profile, saved jobs, screening answers, generated materials: kept for the lifetime of your account.
• Operational logs: typically up to 30 days for debugging and security.
• Database backups: typically up to 30 days, depending on our hosting tier.
• Billing records: 7 years, as required by tax and accounting law.
• If you delete your account, we delete or de-identify the active data we control within a reasonable period, subject to backup expiry above and any non-waivable legal retention requirements.

Your rights and choices

• Access and export. You can view your profile, saved jobs, and generated materials inside the app. To export raw data, email [email protected].
• Correction. Edit your profile, screening answers, and saved jobs directly in the app at any time.
• Deletion. Delete individual screening answers and saved jobs in-app. To delete your entire account and associated active data, email [email protected]. Deletion removes data we control, subject to backups, legal retention obligations, and security logs.
• Analytics opt-out. You can block analytics at the browser level via tracking-prevention settings or extensions. Blocking analytics should not affect core product functionality.
• Privacy rights. Depending on where you live, privacy laws may give you rights to access, correct, delete, export, restrict, or object to certain uses of your personal information, and to appeal or complain to a regulator. Email [email protected] to exercise any rights that apply to you.

Chrome extension specifics

The Iterlane Chrome extension is published on the Chrome Web Store. It uses these permissions:

• storage — local browser storage for your auth token, profile cache, and extension preferences.
• activeTab — granted when you click the extension icon, used to read the application form on the page you have open.
• tabs — message-passing between the popup and the content script.
• scripting — injects the form-detection content script into supported ATS pages.
• Host permissions for validated ATS providers (Greenhouse, Lever, Ashby, Workday, SmartRecruiters, Jobvite, Workable, Recruitee, JazzHR, Personio, Comeet, Taleo, BambooHR, and iCIMS) — the extension runs on these domains by default.
• Optional HTTPS host permission — you may explicitly grant the extension access to the ATS or company-portal domain open in your current tab via the popup. This is off by default and requested per site. You can revoke access at any time in Chrome's extension settings.

The extension does not auto-submit applications. It does not collect data from sites outside the granted host permissions. It does not read your browsing history or cookies for unrelated sites. Any data the extension sends to Iterlane (form field labels, your saved profile data for fill suggestions, autofill outcome events) follows the same handling described above.

Children

Iterlane is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will close it and delete the associated data.

Security

We use TLS for data in transit, encrypted storage at rest via managed database and object-storage providers, and access controls scoped to each user's account. Authentication is handled by a managed authentication provider, which manages password hashing and session tokens. No system is perfectly secure; if you suspect unauthorized access to your account, email [email protected] and rotate your password.

Changes to this policy

We will update this page when our practices change materially. The "Last updated" date at the top reflects the most recent revision. For significant changes that affect how we use existing data, we will give reasonable notice in-app or by email before the change takes effect.

Contact

Iterlane is operated by Verund Labs LLC.

For privacy questions, deletion requests, data access requests, or to report a security concern, email [email protected]. We respond to substantive privacy requests within the timeframe required by applicable law.