Privacy Policy

Our Commitment to Your Privacy

At Pecan Talent, your privacy is paramount. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our AI-powered resume generation and talent matching platform.

Key Principle: Your data is yours. We never sell your personal information to third-party data brokers or marketers. We operate a consent-based two-sided marketplace where you control your visibility to recruiters.

1. Information We Collect

a. Information You Provide

• Profile Information: Name, email, phone number, location, LinkedIn, website, GitHub
• Career Information: Work experience, education, skills, projects, certifications, languages
• Resume Files: PDF or DOCX files you upload for AI parsing
• Job Descriptions: Job postings you provide for tailored resume generation
• Account Information: Email address and password (hashed) for authentication

b. Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Authentication Data: OAuth tokens from Google Sign-In (if used)

2. How We Use Your Information

• Resume Generation: Process your career data with AI (OpenAI GPT-4o-mini, Google Gemini) to create tailored resumes
• Profile Management: Store and sync your profile across devices
• Talent Matching (Opt-In Only): If you opt-in, make your profile searchable by recruiters for job opportunities
• Service Improvement: Analyze usage patterns to improve our AI models and user experience
• Communication: Send account notifications, updates, and support responses
• Security: Detect and prevent fraud, abuse, and security incidents

3. Two-Sided Marketplace & Recruiter Visibility

How Recruiter Visibility Works:

• Default: Private. Your profile is private by default. Recruiters cannot see or contact you unless you explicitly opt-in.
• Opt-In Control: You can toggle "Make my profile visible to recruiters" in your settings. This allows recruiters who subscribe to our platform to search and view your profile.
• What Recruiters See (if opted-in): Name, work experience, education, skills, contact information (email, phone, LinkedIn)
• What Recruiters Pay For: Recruiters pay for access to our search platform and credits to contact candidates — not for raw data exports
• Opt-Out Anytime: You can disable recruiter visibility at any time, and your profile will immediately become hidden from recruiter searches

Recruiter Restrictions:

• Recruiters cannot bulk export candidate data
• Recruiters cannot share candidate information outside our platform without your permission
• Recruiters must respect opt-out requests immediately

4. Third-Party Services We Use

To provide our AI-powered resume generation, we share your data with the following trusted third-party services:

• OpenAI (GPT-4o-mini): Processes your career data and job descriptions to generate tailored resume content. OpenAI Privacy Policy
• Google Gemini (2.5 Flash): Parses your uploaded resume files (PDF/DOCX) to extract structured data. Google Privacy Policy
• Supabase: Securely stores your profile data, authentication credentials, and generated resumes. Supabase Privacy Policy
• Google OAuth: If you choose to sign in with Google, we receive your name and email address. We do not access your Google Drive or other Google services.

These services process your data solely to provide our platform functionality. We do not share your data with any other third parties without your consent.

4b. Chrome Extension

Our Chrome Extension ("Pecan Talent - Resume Generator") integrates with the Pecan Talent platform to provide one-click resume generation from job postings across the web.

Extension Permissions & Why We Need Them

The extension requests the following permissions to provide its functionality:

• storage: Store your profile data, authentication session, and saved jobs locally for offline access and faster performance
• tabs: Detect when you're viewing a job posting to enable the extension popup
• activeTab: Read job details (title, company, description) from the current page when you click "Create Resume"
• cookies: Maintain your login session between the extension and web app at www.pecantalent.com. When you sign in through the extension, it securely connects to your existing web account.
• scripting: Execute content scripts to extract job posting data from supported career sites
• alarms: Schedule periodic session refresh checks
• All websites (https://*/*): Support job sites across the web, including major job boards, applicant tracking systems, and company career pages. We need broad permissions to ensure compatibility with any job site you visit.

What Data the Extension Collects

The extension collects data only when you explicitly click "Create Resume for This Job":

• Job posting data: Job title, company name, job description, and posting URL
• Browser session data: Authentication tokens for maintaining your login
• Saved job status: Tracking which jobs you've saved and their resume generation status

Supported Job Sites

The extension works on the following types of websites:

• Job aggregator sites: Popular job boards and professional networks
• Applicant tracking systems (ATS): Modern recruiting platforms used by companies
• Company career pages: Any company's job postings page
• Generic job boards: Any website with job postings

How Extension Data is Processed

When you click "Create Resume for This Job":

1. The extension extracts job posting data from the current page
2. This data is sent to our backend servers (hosted on Railway)
3. Our AI models (OpenAI GPT-4o-mini) process your profile and the job description
4. A tailored resume is generated and saved to your Pecan Talent account
5. Your resume is visible in your profile page when ready (~1-2 minutes)
6. All data is processed according to this Privacy Policy

Uninstalling the Extension

You can remove the extension at any time by right-clicking the extension icon and selecting "Remove from Chrome". This will delete all locally stored data. Your profile and saved resumes at www.pecantalent.com will remain accessible unless you delete your account.

5. How We Protect Your Data

• Encryption: All data transmitted to and from our platform is encrypted using SSL/TLS
• Secure Storage: Your data is stored on enterprise-grade servers (Supabase) with encryption at rest
• Access Controls: Only authorized personnel can access user data, and only for support or security purposes
• Password Hashing: Passwords are hashed using industry-standard bcrypt
• Regular Audits: We monitor our systems for vulnerabilities and security incidents

6. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate profile information at any time
• Deletion: Request permanent deletion of your account and all associated data
• Export: Download your data in a machine-readable format (JSON)
• Opt-Out: Disable recruiter visibility at any time
• Withdraw Consent: Revoke permission for data processing (note: this may limit platform functionality)

To exercise these rights, please contact us at [email protected] or use the settings in your account dashboard.

7. Data Retention

• Active Accounts: We retain your data as long as your account is active
• Account Deletion: When you delete your account, we permanently delete your profile data within 30 days
• Legal Obligations: We may retain certain data longer if required by law (e.g., tax records, fraud prevention)
• Generated Resumes: If you've exported resumes to Google Docs, those are stored in your Google Drive and are not affected by account deletion

8. Cookies & Tracking

We use minimal cookies and local storage to:

• Maintain your login session (authentication)
• Remember your preferences (e.g., recruiter visibility setting)
• Analyze usage patterns (anonymous analytics)

You can disable cookies in your browser settings, but this may limit platform functionality.

9. Children's Privacy

Pecan Talent is not intended for users under 18 years old. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Pecan Talent, you consent to the transfer of your data to these jurisdictions. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a notice on our platform. Your continued use of Pecan Talent after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: