Privacy Policy

1. Who we are

OfferTailwind is operated by Alex Chen, an individual operator in Halifax, Nova Scotia, Canada. This policy covers our website, workspace, and Chrome extension. Contact alex@offertailwind.com with privacy questions or requests. Employers and other independent websites have their own privacy policies.

2. Information we collect and why

We use the information below to provide the features you choose, manage your account, respond to support requests, and keep the service secure and working.

• Account and career information: your name, email, sign-in information, Profile, work and education history, skills, links, job preferences, and work-authorization information you choose to provide.
• Documents and job-search records: uploaded resumes and files, saved generated documents, file details, projects, job descriptions and URLs, applications, statuses, dates, goals, reminders, notes, and saved questions and answers. Answers you choose to save may include sensitive information, such as disability or accommodation details.
• Recruiting-page information: job details, form labels, answer choices, and relevant field values used for scanning and assisted filling. When you confirm a snapshot, selected fields, the page URL, and capture time are saved.
• Feedback and service information: messages you send us, optional error diagnostics, sessions, preferences, request status, timing, and AI usage counts. Providers may also process IP addresses and request metadata. Feedback does not automatically attach your resume, Profile, or page contents.

3. Browser access and applications

The extension reads accessible active pages for job and application information while its side panel is open, and may rescan them as they change. You control site access through Chrome: allow individual sites or explicitly grant optional access across websites for automatic scanning. All-site access is not granted by default, and you can revoke access. These features do not require a record of your general browsing history.

Page access alone does not fill forms, attach files, start AI, or submit applications. Saving jobs, snapshots, files, or answers sends the relevant information to OfferTailwind. AI sharing is described below. Review selected snapshot fields; automated filtering cannot guarantee exclusion of all sensitive information.

Autofill and attachments send information to the recruiting website, which may save it before final submission. Review the destination and content. You control final submission; saved records are not proof that an employer received an application.

4. Optional AI features

DeepSeek processes information for Profile and resume review, resume preparation and tailoring, cover letters, and job matching. In the extension, AI actions are identified by buttons naming DeepSeek and run when you choose them. Settings > AI assistance explains the data used by each feature. On the website, AI actions also run when you explicitly choose them. Opening the workspace, uploading a resume, or scanning a job does not by itself start these AI actions. Manual editing, ordinary resume generation, and application tracking remain available without them.

Profile and resume review can send Profile facts, extracted Base Resume text, and the resume draft being reviewed. Profile review includes current unsaved Profile edits; other resume workflows use the sources selected for that feature. These inputs can contain names, contact details, links, and career history. Structured work-authorization and job-preference fields are excluded from Profile review, but free text can still contain them.

Job-tailored resumes and cover letters send saved Profile career facts and job details; cover letters also use application information or motivation you enter. These actions exclude the Base Resume, unsaved Profile edits, and dedicated name and contact fields. Cover-letter requests also exclude dedicated public-link fields. Descriptions may still identify you or other people.

Job matching sends the job description, saved Profile evidence, and extracted Base Resume text. If provided, evidence includes work authorization, sponsorship needs, permit expiry, availability, relocation, and role, location, industry, work-arrangement and salary preferences. Filtering does not make these inputs anonymous or reliably remove all sensitive information.

We send these inputs to DeepSeek’s official API over an encrypted connection. We have opted out of model-training use for the API account used by OfferTailwind. This does not mean that inputs and outputs are never retained; provider processing remains subject to the applicable API terms and account settings. Review the relevant sources and remove unwanted information before starting an AI action, or choose not to use AI. Do not include passwords, financial account details, or identity-document numbers.

AI results can be inaccurate. Review suggestions before applying or saving them. Saved documents and matching reports may remain with your records for reuse. Matching scores compare evidence in your materials with job requirements; they do not determine hiring outcomes or legal eligibility.

5. Google sign-in and other integrations

Google sign-in supplies account identity and authentication; it does not give us access to your mailbox. Gmail integration, OpenAI semantic question matching, and the legacy Qwen matching service are not enabled in the current public release. Before enabling additional data sharing, we will update the relevant notices and obtain any required permission.

6. Sharing and permitted use

AWS hosts our website and backend. Supabase provides authentication, database storage, and private file storage. Namecheap Private Email sends account verification and password-reset emails and handles support correspondence. Google provides sign-in. DeepSeek’s official API, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., processes the AI inputs described above. Recruiting websites receive information you fill or attach.

We operate from Canada and our current AWS deployments are configured there. Website delivery and service providers may process information in other countries; processing is not exclusively in Canada. DeepSeek states in its general privacy policy that it processes and stores personal data in China; AI inputs may therefore be processed outside your country.

We use extension-derived data only for the disclosed job-search features and related operation and security. We do not sell it, use it for personalized advertising, transfer it to data brokers, or use it to determine creditworthiness. We do not use Google user data to train generalized AI models.

Transfers of extension-derived and Google user data are limited to providing disclosed features, legitimate security needs, legal obligations, or a business transfer with prior user consent where required. We restrict our personnel’s access to identifiable data to your explicit permission for specific data or necessary security or legal purposes. Aggregated and anonymized data may be used for internal operations.

OfferTailwind’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Its use of extension-derived data will comply with the Chrome Web Store User Data Policy, including its Limited Use requirements.

7. Storage, retention, and deletion

Browser and extension storage hold sessions, preferences, and temporary work. Clearing browser data can remove documents stored only on that device. We generally retain account, career, document, and job-search information while you maintain an account, unless you remove it or request deletion, subject to security and legal needs.

You can request account deletion at alex@offertailwind.com. We verify account ownership and handle removal of your account records and stored documents, including follow-up if cleanup fails. Deletion does not immediately erase provider logs or backups. Limited deletion-status records remain to support recovery and prevent continued access; support correspondence may remain to handle your request and related issues. Downloaded files and copies held independently by employers or other services are not removed.

Deleting an OfferTailwind record or declining future AI requests does not automatically delete information already sent to DeepSeek. Contact alex@offertailwind.com for help with these requests. We coordinate provider-side requests through the API account administrator and communicate the confirmed outcome and any retention exceptions. We do not promise immediate deletion of provider caches, logs, or backups.

8. Your choices and security

You can edit your Profile, manage saved records and answer reuse, decline AI, and revoke extension or Google permissions. Where available, delete your account in Settings > Account, or contact us for access, correction, export, or deletion. We may verify account ownership. Signing out or uninstalling the extension does not delete your account. Keep copies you need, and contact us if deletion fails.

We use authenticated access, ownership checks, private storage, encrypted transmission, and protected credentials to help safeguard information. No system guarantees complete security. Avoid putting passwords, financial account details, or identity-document numbers in free-text fields or feedback.

Your rights and response deadlines depend on applicable law. You may complain to an appropriate privacy regulator; this policy does not limit rights that cannot be waived.

9. Eligibility and policy changes

Using the service requires legal capacity to agree to our Terms. Contact us if you believe a child provided information without appropriate authorization.

We will identify the policy’s effective date and notify you of material changes. New uses requiring permission will be disclosed before processing begins. An update alone does not authorize unrelated uses of previously collected information.