Privacy Policy
Last Updated: March 24, 2026
Welcome to JobLander. This Privacy Policy explains how we collect, use, store, handle, and share your information when you use the JobLander Chrome Extension and related web services (collectively, the "Service").
The Service is operated by Vladislav Sorokin, acting as an independent sole trader registered in Portugal ("we", "us", or "our").
By installing the Chrome Extension or using the Service, you agree to the collection and use of information as described in this Privacy Policy.
1. Information We Collect
a. Information You Provide
When you use the Service, we collect the following information directly from you:
- your name and email address, collected when you sign in via Google OAuth or email registration;
- your Google profile picture, if you sign in via Google;
- preferences you configure within the Service, such as your preferred language and job position;
- messages or requests you send via support forms or in-app feedback.
b. Meeting Audio and Interaction Data
The core functionality of the Chrome Extension is to provide real-time AI-powered interview coaching. To do this, we collect:
- audio captured from your browser tab during video meetings on Google Meet, Zoom, and Microsoft Teams, using the Chrome tabCapture API;
- real-time transcriptions generated from the captured audio by our speech-to-text service;
- AI-generated responses, interview hints, and coaching suggestions produced during your sessions.
Audio recordings are stored securely on Google Cloud Storage for the duration of your account to enable features such as post-session debriefs and session history. Transcriptions and AI-generated content are also retained as part of your session history. Anonymized excerpts of AI-generated content (such as sample interview questions) may be displayed on our website for product demonstration purposes. We do not sell or share audio recordings or transcriptions with third parties for marketing purposes.
c. Technical and Usage Data
We automatically collect technical and usage data to operate and improve the Service, including:
- device type, operating system, and browser version;
- approximate geographic location derived from your IP address (country or region level only);
- the URL of the active browser tab when the extension is activated, to detect supported meeting platforms (Google Meet, Zoom, Microsoft Teams);
- interaction events within the extension and website (such as feature usage, button clicks, and session start/end times);
- error logs and performance metrics to diagnose and fix technical issues.
2. How We Use Your Information
We use the information we collect for the following purposes:
- to provide, operate, and maintain the Service, including real-time interview coaching and post-session debriefs;
- to authenticate your identity and manage your account sessions securely;
- to personalize your experience based on your language and job position preferences;
- to monitor the performance, reliability, and security of our infrastructure;
- to analyze usage patterns and improve product features using aggregated analytics;
- to communicate important service-related updates, such as changes to this policy or service disruptions;
- to display anonymized, aggregated examples of AI-generated content for product demonstration on our website;
- to comply with applicable legal obligations.
We do not use your personal data or audio recordings to train third-party AI models. We do not sell, rent, or trade your personal data to any third party.
3. Legal Basis for Processing (EU / GDPR)
For users in the European Economic Area, we process personal data on the following legal bases:
- Contract performance: processing necessary to provide the Service you signed up for (e.g., authentication, session management, delivering interview coaching);
- Legitimate interests: processing necessary for improving and securing the Service, analyzing aggregated usage patterns, and preventing fraud or abuse;
- Consent: where required by applicable law, such as for optional analytics or marketing communications. You may withdraw consent at any time by contacting us.
4. Data Sharing and Third-Party Services
We share your data only with the following categories of service providers, strictly as necessary to operate the Service:
- Google Cloud Platform (EU region: europe-west1): cloud hosting, compute infrastructure, and audio storage on Google Cloud Storage;
- Firebase Authentication (by Google): secure user authentication and session management via Google OAuth and email/password sign-in;
- Deepgram: speech-to-text transcription — audio is streamed to Deepgram for real-time transcription during meetings;
- Groq: AI model provider that processes transcribed text to generate real-time coaching responses — no audio is sent to this provider, only text;
- PostHog (US-hosted): product analytics and feature flag management — we send your email address as a pseudonymous identifier and interaction events to understand product usage;
- Resend: transactional email delivery for account-related communications (e.g., one-time passwords, onboarding emails).
We do not share your personal data with advertisers, data brokers, or any parties for purposes unrelated to operating the Service. We may also disclose information when required by law, legal process, or governmental request.
5. Data Storage and Retention
Your data is stored primarily on Google Cloud Platform servers in the EU (europe-west1 region, Belgium). Audio recordings are stored in Google Cloud Storage within the same GCP project. Some third-party services (PostHog, Deepgram, Groq) may process data in the United States. Where data is transferred outside the EU, we rely on Standard Contractual Clauses or equivalent safeguards as required by GDPR.
We apply the following retention practices: account data (name, email, preferences) is retained for as long as your account is active; audio recordings are stored on Google Cloud Storage for the duration of your account; session data (transcriptions, AI responses, debriefs) is retained for up to 12 months to allow you to review past sessions; technical logs and analytics data are retained for up to 90 days. You may request deletion of all your personal data, including audio recordings, at any time by contacting us at hello@joblander.app. We will process deletion requests within 30 days.
6. Data Security
We implement the following technical and organizational measures to protect your information: all data is transmitted over HTTPS/TLS encrypted connections; audio streams are transmitted over secure WebSocket (WSS) connections; authentication tokens are stored securely and transmitted via encrypted channels; access to production infrastructure is restricted to authorized personnel with multi-factor authentication; we conduct regular security reviews of our codebase and infrastructure. Despite these measures, no system can guarantee absolute security. If you become aware of any security vulnerability, please contact us immediately at hello@joblander.app.
7. Your Rights
Depending on your location, and particularly under the EU General Data Protection Regulation (GDPR), you may exercise the following rights:
- Right of access: request a copy of the personal data we hold about you;
- Right to rectification: request correction of inaccurate or incomplete data;
- Right to erasure: request deletion of your personal data;
- Right to restriction: request that we limit the processing of your data;
- Right to object: object to processing based on legitimate interests;
- Right to data portability: receive your data in a structured, commonly used format;
- Right to withdraw consent: where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at hello@joblander.app. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence.
8. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a child under 18, we will delete it promptly.
9. Chrome Extension Permissions
The JobLander Chrome Extension requests the following browser permissions, each necessary for the described functionality: 'tabs' permission is used to read the URL of your active tab to detect supported meeting platforms (Google Meet, Zoom, Microsoft Teams) and activate the extension accordingly; 'tabCapture' permission is used to capture audio from your browser tab during meetings for real-time transcription and AI coaching; 'offscreen' permission is used to create an offscreen document required for audio recording, as Chrome restricts media recording APIs to offscreen contexts; 'identity' permission is used to enable secure Google OAuth sign-in; 'storage' permission is used to save your preferences (such as language and job position) locally in your browser; host permissions for Google Meet, Zoom, and Microsoft Teams domains are used to inject the functionality needed to capture meeting audio and display coaching overlays.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
Changes become effective when posted with an updated "Last Updated" date. For significant changes, we will notify registered users via email. We encourage you to review this page periodically.
11. Data Controller & Contact
Data Controller:
Vladislav Sorokin
Independent sole trader registered in Portugal
VAT: PT300084099
Contact:
hello@joblander.app