Privacy Policy

1. Introduction

Ramen Labs LLC ("CareerMax," "Company," "we," "us," or "our"), a Wyoming limited liability company, operates CareerMax, including the CareerMax website, web application, browser extension, APIs, AI-powered tools, job search features, resume and cover letter tools, interview tools, auto-apply features, content, documentation, and related services (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access, create an account for, install, connect, or use the Service.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

This Privacy Policy is incorporated into our Terms of Service.

2. Scope of This Privacy Policy

This Privacy Policy applies to information we collect through:

• The CareerMax website and web application
• The CareerMax browser extension
• CareerMax account, billing, and subscription flows
• Resume, cover letter, interview, job search, job tracking, and auto-apply features
• AI-powered features
• Email, support, and communications with us
• APIs, integrations, and developer tools if made available

This Privacy Policy does not apply to third-party websites, employers, recruiters, job boards, application systems, browser providers, extension stores, payment processors, AI providers, analytics providers, or other third-party services except to the extent we describe how we share information with them. Those third parties process information according to their own terms and privacy policies.

3. Information We Collect

We collect information you provide directly, information generated through your use of the Service, information collected automatically, and information received from service providers or integrations.

A. Account Information

• Name and email address
• Account identifier
• Authentication information
• Profile photo or avatar if provided
• Account creation date and account settings
• Login, authentication, and session information
• Connected browser extension status
• Support and communication history

B. Career Profile and Job Search Information

• Target roles, target companies, and target locations
• Job search preferences, filters, saved searches, and shortlisted jobs
• Seniority level, years of experience, skills, certifications, licenses, projects, and achievements
• Work history and education history
• Salary expectations or salary search queries
• Work authorization information if you provide it
• Relocation preferences and remote-work preferences
• Job search status and application pipeline information

C. Resume, Cover Letter, and Professional Profile Data

• Uploaded resumes, including PDF or other supported document formats
• Structured resume data and resume text
• Resume scores, analysis, and AI-generated resume suggestions
• Customized resumes and exported resumes
• Cover letters and professional summaries
• Professional profile content and portfolio URLs
• Contact information included in resumes or profiles, such as phone number, address, email, professional profile URL, personal website, or other links
• Resume formatting, template, and document preferences

You should not upload or include information you are not authorized to share.

D. Interview, Voice, Audio, and Transcript Data

• Interview role, company, and job description context
• Interview questions and your spoken or typed answers
• Audio recordings or audio snippets
• Transcripts
• AI-generated interviewer audio
• Text-to-speech prompts and generated speech
• Speech-to-text inputs and outputs
• Voice analysis, including confidence, clarity, pace, tone, and feedback
• Interview session metadata
• Feedback, scores, coaching suggestions, and analysis
• Technical data needed to operate real-time voice or audio sessions

E. Job Listings, Application, and Auto-Apply Data

• Job search filters and preferences
• Job listing IDs and job listing metadata
• Job titles, company names, application URLs, job descriptions, and job locations
• Seniority, salary, remote status, and technology metadata where available
• Saved jobs and shortlisted jobs
• Application status and application progress
• Application answers, cover letters, and job-specific resume versions
• Application packets
• Unanswered application questions
• Skipped, failed, or completed application attempts
• Failure reasons and diagnostic information related to application workflows
• Page snapshots or form metadata where needed to operate, debug, or improve auto-apply functionality
• Employer, website, or application system page information relevant to the application workflow

F. Browser Extension Data

If you install, connect, or use the CareerMax browser extension, the extension may collect and process information needed to provide extension functionality, including:

• Extension connection status and extension version
• Extension authentication state
• Locally stored extension API key or authentication token
• Connected account name or identifier
• Current active tab URL and page title when using extension features
• Whether the current page appears to be a supported job application page
• Supported job application page structure
• Form fields, field labels, field types, visible questions, prompts, and metadata
• Job context, including company, role, application URL, profile data, resume data, and job packet data
• Generated answers and field-fill results
• Application workflow status and run state for queued application workflows
• Success, failure, skipped, timeout, and cancellation events
• Resume file name and resume file data when needed to attach or upload a resume to an application
• Local extension storage data necessary for authentication, workflow continuity, and recovery

The extension is intended to operate on CareerMax pages and supported job application pages. We do not intentionally collect unrelated browsing history through the extension. We do not intentionally collect passwords, payment card numbers, banking credentials, or unrelated private page content. If the extension encounters an unsupported page or sensitive field, it may skip the workflow, require manual input, or fail.

G. Payment, Subscription, and Credit Information

• Subscription tier, billing interval, subscription status, renewal status, and cancellation status
• Credit allocation, credit usage, and credit transaction history
• Checkout status, invoice metadata, payment confirmation, refund status, and dispute status
• Account identifiers used to link billing records to your CareerMax account

Payment card numbers, banking credentials, and certain billing details are generally collected and processed directly by our payment processor or merchant of record. We do not intentionally store full payment card numbers on our own servers.

H. Communications and Support Information

• Email address and message content
• Support requests, feedback, bug reports, and feature requests
• Survey responses if provided
• Notification preferences and job shortlist notification settings
• Email delivery metadata and communication history

I. Analytics, Usage, and Product Interaction Data

• Pages viewed, buttons clicked, and features used
• Onboarding events, resume uploads, resume exports, and AI actions started or completed
• Credit usage events, subscription events, interview events, job search events, and auto-apply events
• Error events, session duration, scroll depth, referrer, and campaign information
• Device and browser information
• Approximate location inferred from IP address
• Network and performance information, including web vitals
• Session replay or screen recording data where enabled

For signed-in users, analytics data may be associated with your account, including user ID, email, name, subscription tier, subscription status, credits, target roles, onboarding status, and feature usage.

We use masking and configuration controls intended to avoid collecting sensitive form content in session replay. However, you should avoid entering unnecessary sensitive information into the Service.

J. Device, Technical, Security, and Log Data

• IP address, browser type, operating system, device type, screen size, language settings, time zone, and user agent
• Referring URL and request timestamps
• Authentication events and security events
• API request metadata and rate-limit metadata
• Hashed IP address or other pseudonymous identifiers for abuse prevention
• Error logs, crash logs, diagnostic logs, and performance logs

4. How We Use Your Information

We use the information we collect to:

• Create and manage accounts
• Authenticate users
• Provide resume, cover letter, interview, job search, job tracking, and auto-apply features
• Generate AI-powered outputs
• Parse, analyze, score, and customize resumes
• Generate cover letters and application answers
• Provide interview coaching and voice features
• Provide speech-to-text and text-to-speech functionality
• Search, rank, shortlist, reveal, and display job listings
• Fill or assist with job application forms
• Manage browser extension connection and workflows
• Process credits, subscriptions, and paid features
• Provide customer support
• Send transactional and administrative communications
• Personalize resumes, cover letters, job matches, interview questions, feedback, learning resources, and product onboarding
• Analyze product usage, understand feature adoption, debug errors, monitor performance, improve reliability, prevent abuse, detect fraud, enforce rate limits, protect accounts, maintain logs, comply with legal obligations, and enforce our Terms of Service

We may send relevant User Content and context to AI providers to generate, analyze, transform, transcribe, synthesize, or evaluate content. This may include resumes, job descriptions, job application questions, application answers, interview transcripts, audio snippets, profile data, career preferences, and other context needed for the requested feature.

We may send job search filters, preferences, target roles, locations, seniority, and related search criteria to job data providers to search, rank, shortlist, reveal, or display job listings.

5. How We Share Your Information

We do not sell your personal information. We do not share personal information with third-party advertisers for cross-context behavioral advertising.

A. Service Providers and Processors

We share information with service providers that help us operate the Service. Depending on the features you use, service providers may include:

• Authentication and account management providers: May process name, email address, account identifiers, authentication metadata, and session data.
• Cloud backend, database, and application infrastructure providers: May process account data, User Content, application data, operational data, logs, and storage-related data.
• AI processing providers: May process prompts, resumes, job descriptions, transcripts, audio snippets, application answers, generated content, and related User Content needed to provide AI features.
• Voice AI and audio infrastructure providers: May process text prompts, audio snippets, transcripts, generated speech, connection metadata, session metadata, and technical audio data.
• Product analytics and session replay providers: May process user identifiers, email address, usage events, page views, session metadata, performance data, and related analytics data.
• Extension analytics providers: May process extension usage events, engagement metrics, technical metadata, and extension performance data.
• Payment processors and merchants of record: May process billing information, transaction records, invoices, tax information, payment metadata, refunds, and disputes.
• Email delivery providers: May process recipient email addresses, message content, and email delivery metadata.
• Search and research providers: May process search queries, role, company, and location context, returned search results, and related metadata.
• Bot prevention and abuse protection providers: May process IP address, browser or device signals, challenge response tokens, and verification metadata.
• Job data providers: May process job search filters, preferences, target roles, locations, seniority, technology filters, and related search criteria.

Service providers we use for these purposes may include Clerk, Convex, Google Vertex AI/Gemini, xAI, PostHog, Piqo, Polar.sh, Resend, Exa, Cloudflare Turnstile, LiveKit, TheirStack, and other providers that support authentication, hosting, database or storage, AI processing, payments, analytics, email delivery, abuse prevention, search, job data, voice, support, security, logging, monitoring, or related Service functionality.

B. Third-Party Websites and Platforms You Interact With

If you use the Service to interact with third-party websites, job boards, employers, application systems, browser extensions, or application forms, information may be transmitted to those third parties at your direction.

For example, if you use Auto-Apply Features to fill or submit a job application, information from your profile, resume, cover letter, application answers, and attachments may be entered into or submitted to the relevant employer, website, job board, or application system.

Those third parties process information under their own terms and privacy policies. We are not responsible for their practices.

C. Legal, Safety, and Compliance Disclosures

We may disclose information if we believe it is reasonably necessary to:

• Comply with applicable law, regulation, subpoena, court order, legal process, or governmental request
• Enforce our Terms of Service
• Protect our rights, property, safety, users, service providers, or the public
• Investigate fraud, abuse, security incidents, or technical issues
• Prevent harm or illegal activity
• Respond to disputes, chargebacks, or claims

D. Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, change of control, or similar transaction. The receiving entity will be required to handle personal information in a manner consistent with this Privacy Policy or provide notice where required by law.

E. With Your Consent or Direction

We may disclose information with your consent or at your direction, including when you connect an integration, install the browser extension, enable an auto-apply workflow, request a job application action, contact support, or share content externally.

6. AI Provider Data Handling

When you use AI-powered features, relevant User Content may be sent to third-party AI providers for processing. The information sent depends on the feature and may include resumes, profile data, job descriptions, application questions, answers, transcripts, audio snippets, prompts, and generated content.

We use commercially available API or cloud AI services for these features. Provider handling of inputs and outputs is governed by the provider's applicable terms, data processing terms, settings, and retention policies.

Where available and appropriate, we seek to use business or API offerings that state they do not use customer API inputs and outputs to train foundation models unless permitted by the customer or applicable terms. However, provider practices may vary, and providers may retain data for limited periods for security, abuse monitoring, debugging, legal compliance, or service operation according to their own terms.

You should not submit highly sensitive information to AI-powered features unless necessary for the feature and you are comfortable with it being processed by the Service and relevant providers.

7. Browser Extension Limited Use Disclosure

CareerMax's use and transfer of browser extension user data is limited to providing, maintaining, securing, and improving CareerMax's user-facing browser extension, application autofill, and auto-apply features.

We do not sell browser extension user data. We do not use browser extension user data for personalized advertising, retargeting, creditworthiness, lending, or unrelated monetization.

We transfer browser extension user data only when necessary to provide or improve the extension's user-facing features, maintain, secure, debug, or support the extension and related Service features, comply with applicable law, protect against fraud, abuse, spam, phishing, malware, security threats, or technical issues, or complete a merger, acquisition, reorganization, or sale of assets as permitted by applicable law and policy.

We do not allow humans to read browser extension user data except where you give explicit consent for support or troubleshooting, access is necessary for security, abuse, fraud, or technical investigation, access is necessary to comply with law, or the data has been aggregated and anonymized and is used for internal operations.

The extension is not designed to collect your general browsing history. It processes page information only when needed for CareerMax pages, supported job application pages, extension connection, authentication, diagnostics, or user-facing autofill and auto-apply workflows.

Where required, we may provide additional in-product disclosures or consent screens before collecting or using certain browser extension, job application, audio, or other sensitive data. Those disclosures supplement this Privacy Policy.

8. Human Access to User Data

We restrict human access to personal information and User Content. Our personnel, contractors, or service providers may access personal information only where reasonably necessary to provide support at your request, investigate fraud, abuse, security incidents, or technical issues, comply with law, enforce our Terms of Service, perform internal operations using aggregated or anonymized data, or maintain, debug, or secure the Service.

We do not manually review resumes, application answers, audio, transcripts, or browser extension page data as a routine practice.

9. Cookies and Tracking Technologies

We use cookies, local storage, pixels, scripts, SDKs, browser APIs, and similar technologies to operate, secure, analyze, and improve the Service.

A. Essential Technologies

Essential technologies are necessary for authentication, account sessions, security, fraud prevention, billing, browser extension connection, preferences, and core Service functionality. Disabling essential technologies may prevent the Service from working.

B. Analytics Technologies

We use analytics technologies to understand usage, improve the product, diagnose errors, and measure performance. Analytics may collect page views, events, clicks, feature usage, technical metadata, session duration, performance data, account-level properties for signed-in users, and session replay data where enabled.

We do not use analytics cookies for third-party advertising or cross-site behavioral advertising.

C. Local Browser Extension Storage

The browser extension may use local browser storage to maintain authentication state, API keys or tokens, connected user name or identifier, run state, job context, workflow recovery data, and extension settings.

This local extension data is stored in your browser environment and may remain until you disconnect, clear extension storage, uninstall the extension, or clear browser data.

D. Managing Cookies and Tracking

You can manage cookies through your browser settings. You may also use available in-app or banner controls where provided. If you block cookies, local storage, or extension storage, some features may stop working.

10. Browser Extension Privacy

The browser extension is designed to help connect your CareerMax account to supported job application workflows.

When installed and connected, the extension may request permissions to access CareerMax pages and supported job application pages. This access is used to detect supported application pages, read form fields, fill forms, attach resumes, operate queued workflows, and report workflow status.

The extension may process information locally in your browser and may send relevant data to CareerMax servers to perform AI generation, application filling, resume customization, status tracking, and diagnostics.

We do not intentionally use the extension to collect unrelated browsing history, passwords, payment card numbers, banking credentials, or unrelated private page content.

The extension may not work on every site. If a page is unsupported, blocked, restricted, or technically incompatible, the extension may fail, skip the workflow, or require manual action.

You can disconnect, disable, or uninstall the extension through your browser. Uninstalling the extension may remove local extension data from your browser but does not automatically delete your CareerMax account or server-side data.

11. Sensitive Information

The Service may process information that could be considered sensitive depending on your jurisdiction, including resume and employment history, education history, contact information, audio recordings, transcripts, interview responses, job application answers, work authorization information if provided, demographic, disability, veteran, or equal-employment-opportunity information if you choose to enter it into application forms, salary expectations or compensation-related information, and location information inferred from IP address or provided by you.

You should only provide sensitive information when necessary for the feature you are using. We do not intentionally collect sensitive personal information for the purpose of inferring characteristics unrelated to providing the Service. We do not intentionally use sensitive personal information for cross-context behavioral advertising.

12. Data Retention

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain security, and operate our business. Retention periods vary depending on the type of data and the purpose.

• Account Data: Retained while your account is active and for a reasonable period after deletion where needed for legal, security, backup, fraud prevention, or legitimate business purposes.
• User Content: Resume data, profile data, job application data, interview data, job search data, and other User Content are generally retained while your account is active or until you delete the relevant content, subject to backups, legal requirements, and legitimate business needs.
• Browser Extension Data: Local extension data may remain in your browser until you disconnect, clear extension storage, uninstall the extension, or clear browser data. Server-side extension workflow data may be retained as part of your account, application history, diagnostics, or logs.
• AI Processing Data: Data sent to AI providers may be retained by those providers according to their applicable terms, settings, and policies. We retain our own AI outputs, logs, and related content as needed to provide the Service, show history, debug issues, prevent abuse, and comply with law.
• Payment and Billing Records: Payment, invoice, tax, subscription, dispute, and transaction records may be retained by us and our payment providers or merchant of record for as long as required by law, accounting rules, tax rules, fraud prevention, and dispute resolution.
• Analytics Data: Analytics data is retained according to our settings and our analytics providers' retention policies. We may retain aggregated or de-identified analytics for longer periods.
• Logs and Security Data: Logs, security events, rate-limit records, hashed IP records, error logs, and diagnostic data may be retained for security, fraud prevention, debugging, and operational purposes.

If you delete your account or request deletion, we will delete or anonymize personal information within a reasonable period, unless retention is required or permitted for legal, security, fraud prevention, dispute resolution, backup, tax, accounting, or legitimate business purposes. Backups may persist for a limited period before being overwritten.

13. Data Security

We use commercially reasonable technical and organizational measures designed to protect information, including HTTPS/TLS encryption in transit, authentication and access controls, provider-side infrastructure security, role-based access practices where applicable, input validation and sanitization, file size and type controls, abuse prevention and rate limiting, logging and monitoring, security reviews of sensitive workflows, limits on browser extension origin access, and local extension storage for extension state.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials, email account, device, browser, and extension environment secure.

If you believe your account or data has been compromised, contact us immediately at hey@ramensoftwarelabs.com.

Data Breach Notification

In the event of a security breach that results in unauthorized access, disclosure, or loss of personal data, we will notify affected users and authorities where required by applicable law. Notifications may be sent to the email address associated with your account and, where appropriate, through an in-app notification.

14. International Data Transfers

We are based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate.

These countries may have data protection laws different from those in your jurisdiction. Where required for transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards, which may include Standard Contractual Clauses, data processing terms, adequacy decisions, transfer frameworks, contractual commitments, and other lawful transfer mechanisms.

15. Your Privacy Rights

Depending on your location, you may have rights regarding your personal information, including the right to access personal information we hold about you, request correction of inaccurate information, request deletion of personal information, request restriction of processing, object to processing, request portability of your information, withdraw consent where processing is based on consent, opt out of certain disclosures or processing, appeal a decision where required by law, and lodge a complaint with a data protection authority.

To exercise privacy rights, contact us at hey@ramensoftwarelabs.comwith the subject line "Privacy Request."

We may need to verify your identity before fulfilling a request. We may deny or limit requests where permitted by law, including where fulfilling the request would affect another person's rights, conflict with legal obligations, interfere with fraud prevention or security, or require disproportionate effort.

EEA, UK, and Swiss Users

If you are in the European Economic Area, United Kingdom, or Switzerland, we process personal information under the following legal bases: performance of a contract, legitimate interests, consent where required, and legal obligations.

California Residents

California residents may have the right to know, access, delete, correct, opt out of sale or sharing where applicable, limit certain uses of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights.

We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law, except as permitted by law, such as to provide the Service, prevent fraud, secure accounts, process transactions, or comply with legal obligations.

16. California Privacy Notice

This section applies to California residents and is intended to address the California Consumer Privacy Act as amended by the California Privacy Rights Act.

A. Categories of Personal Information We May Collect

• Identifiers: Name, email address, account ID, IP address, and online identifiers
• Customer Records Information: Billing information, account information, payment metadata, and contact information
• Commercial Information: Subscription history, credit usage, purchases, invoices, and transaction records
• Internet or Network Activity: Pages viewed, events, clicks, browser data, device data, extension usage, and session data
• Geolocation Information: Approximate location inferred from IP address or location preferences you provide
• Audio or Electronic Information: Interview recordings, voice snippets, generated speech, transcripts, and related audio data
• Professional or Employment Information: Resumes, work history, job preferences, skills, application data, and interview data
• Education Information: Schools, degrees, graduation dates, certifications, coursework, and related resume or profile data
• Inferences: Resume scores, job match scores, interview feedback, skill assessments, user segments, and product analytics
• Sensitive Personal Information: Only where you provide or generate it, such as certain application answers, work authorization, demographic fields, disability or veteran disclosures, precise content in resumes or forms, or account credentials handled by authentication providers

B. Sources, Purposes, and Disclosures

We collect personal information from you, your use of the Service, your browser or device, the browser extension, service providers, payment providers, job data providers, AI providers, analytics providers, and third-party sites you interact with through the Service. We collect and use personal information for the purposes described in this Privacy Policy, including providing the Service, personalization, AI processing, job search, auto-apply, billing, analytics, security, support, and legal compliance. We may disclose the categories above to the categories of recipients described in Section 5.

17. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from individuals under 18.

If you believe an individual under 18 has provided personal information to us, contact us at hey@ramensoftwarelabs.com. If we learn that we collected personal information from an individual under 18 in violation of applicable law, we will take reasonable steps to delete it.

18. Do Not Track Signals

Some browsers transmit "Do Not Track" signals. There is no uniform standard for responding to these signals, and we do not currently respond to them.

You can manage cookies and tracking through your browser settings and any controls we provide.

19. Data Accuracy

Because CareerMax is used for job applications, resumes, profiles, interviews, and career workflows, accuracy matters. You are responsible for ensuring that the information you submit to the Service is accurate, truthful, current, and not misleading, especially information used in resumes, applications, cover letters, work authorization responses, certifications, and employer communications.

We are not responsible for consequences arising from inaccurate, outdated, false, or misleading information you provide or approve.

20. Third-Party Links and Websites

The Service may contain links to third-party websites, employers, job boards, application systems, payment portals, browser extension stores, AI providers, analytics providers, or other services.

We are not responsible for the privacy practices, content, terms, security, or data handling of third-party websites or services. Review their policies before providing information to them.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, providers, features, legal requirements, or business operations.

If we make material changes, we may notify you by updating the "Last Updated" date, posting a notice in the Service, sending an email, or using another reasonable method.

Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.