At Leepo, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Account Information

• Email address (from Google OAuth)
• Name and profile picture (from Google OAuth)
• Country (detected from IP address for pricing)

User Content

• Resumes you upload
• Job application details you enter
• Notes and other content you create

Usage Data

• Pages visited and features used
• Device and browser information
• IP address and approximate location

Leepo Chrome extension

If you install Leepo Companion, it acts as your leepo.ai account using the sign-in you already have there (your session cookie); it stores no password of its own. On the job sites it supports, and on other sites only after you allow them, it reads the page you are viewing and sends Leepo:

• The page's address, and the job title and company it shows, to find the application it belongs to
• The text of a job posting, when you ask Leepo to check how it matches your resume
• The labels of an application form's fields (for example “First name” or “School”), so Leepo can say which of your saved answers each field takes
• The name, headline, company and profile address of a person you choose to save as a contact from a LinkedIn profile you opened

It never sends what is typed into a form, and it never submits a form or sends a message for you. It fills fields only when you press Fill, using answers you saved in Leepo, and attaches the resume you chose. When you open an employer's form from Leepo, the extension remembers in your browser which application that tab is for, until you close it.

Gmail (only if you connect it)

Connecting Gmail is optional. If you connect it, Leepo gets read-only access to your Gmail through Google's API (the gmail.readonly permission), and:

• Searches your mailbox, once a day and when you press Check now, for emails that name the company of an application you track in Leepo and are still waiting on (Applied, OA or Interviewing), received since the day you applied
• Reads only the sender, subject, date and Gmail's short preview (about 200 characters) of each email it finds, never the full email or its attachments
• Keeps those details only for emails that are about one of your applications, with what the email means for it (for example, an interview invitation)

Your Leepo address (only if you use one)

On Pro you can get an email address at inbox.leepo.ai to give job sites. Email sent to it reaches Leepo through our email provider, Resend, and:

• Is kept in your Leepo account: the sender, subject, date, the text and HTML of the email, and the names of any attachments. The attachments themselves stay with Resend for a limited time and are opened from your Inbox
• Is copied to the email on your account, with replies going straight to the sender, unless you turn copies off
• Is matched to the application it is about, and when it plainly says what happened (an assessment, an interview, an offer or a rejection), that application is moved forward, noted in its history and can be undone
• Has any one-time code or sign-up link in it picked out, so the Leepo extension can fill the code in on the job site for you

You can delete any of these emails from your Inbox. Deleting your account deletes all of them.

2. How We Use Your Information

• To provide our services: Store your resumes, track applications, generate AI content
• To improve our product: Analyze usage patterns to enhance features
• To communicate with you: Send important updates about your account
• To process payments: Handle subscription billing through our payment partners
• To show localized pricing: Display prices in your local currency

3. AI Processing

We use AI services to provide features like:

• Resume parsing and analysis
• Job description parsing
• ATS score calculation
• Resume generation and optimization
• Sorting an application email that our word rules can't read, if you connect Gmail (see section 4) or use a Leepo address. Only its subject and short preview, the sender's name and the application's company and role are sent, never the whole email

Your data is processed securely and is not used to train AI models. We use industry-standard AI providers with appropriate data processing agreements.

4. Gmail and Google User Data

Leepo uses the Gmail data described in section 1 only to show those emails in your Leepo Inbox and to keep your applications up to date. When an email plainly says what happened (an assessment, an interview, an offer or a rejection), Leepo moves that application forward, notes the email in its history and lets you undo the change. It never sends, deletes, moves or labels your email.

• AI: When our word rules can't tell what an email means, its subject and preview, the sender's name and the application's company and role are sent to our AI provider to sort it. Nothing else from your mailbox is sent, and it is not used to train AI models.
• No advertising, no selling: We never use Gmail data for advertising, never sell it, and never share it except with the service providers that run Leepo (hosting, database and our AI provider) to provide this feature, or where the law requires it.
• People don't read your email: No one at Leepo reads your Gmail data unless you ask us to (for example, for support), or it is needed for security or to comply with the law.
• Security: The key that lets Leepo read your Gmail is encrypted (AES-256-GCM) when stored. The short-lived keys made from it to read your email are never stored.
• Your control: Disconnect Gmail at any time in Settings → Connections. That cancels Leepo's access in your Google account, and you can delete the emails Leepo kept at the same time. You can also remove Leepo at myaccount.google.com/permissions. Deleting your account deletes all of it.

Leepo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage & Security

• Your data is stored securely using Supabase (hosted on AWS)
• All data transmission is encrypted using HTTPS/TLS
• We implement row-level security to ensure you can only access your own data
• Resumes are stored in secure cloud storage with access controls

6. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: Razorpay (payments in India) and Dodo Payments (payments from other countries) for billing
• AI providers: For processing resume and job data
• Email provider: Resend, to send Leepo's emails and to receive and copy the email sent to your Leepo address
• Analytics services: To understand product usage
• Legal requirements: If required by law or legal process

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Delete your account and all associated data
• Export: Download your data in a portable format
• Withdraw consent: Opt out of optional data processing

8. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how you use our service. You can control cookie preferences through your browser settings.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete all your personal data within 30 days, except where we are required to retain it for legal purposes.

10. International Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

11. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the Service.

13. Contact Us

For privacy-related questions or to exercise your rights, please contact us at our contact page.