Privacy Policy

1. Information We Collect

When you use Touchdwn, we may collect:

• Account Information: your name, email address, and authentication data provided by Firebase Authentication.
• Professional Data: the contents of resumes and LinkedIn profiles you upload to our platform for analysis.
• Browser Extension Data: when you use the Touchdwn browser extension, job listing details from the page you choose to save, including the role title, company, location, URL, description, source site, and capture timestamp.
• Usage Data: information about how you interact with our automation tools, search for jobs, and navigate the application.
• Coaching and AI Inputs: the job descriptions, career notes, resume highlights, LinkedIn content, interview context, microphone audio, and interview transcripts you choose to use with analysis, generation, or live coaching features.

2. How We Use Your Information

We use your information strictly to provide and improve our services:

• To operate our matching and profile generation engines.
• To let the Touchdwn browser extension keep you signed in by reading authentication state stored in local browser storage on `touchdwn.net` pages you have opened.
• To save job listings you choose to capture through the Touchdwn browser extension into your Touchdwn workspace.
• To process payments and subscription billing through Stripe.
• To communicate with you regarding your account or support requests.

Crucially: We do not sell your personal data or uploaded resumes to third parties.

3. Browser Extension Permissions and Data Handling

The Touchdwn browser extension uses limited browser permissions to help you capture jobs and connect the extension to your Touchdwn account.

• Open Tabs: the extension may inspect open `touchdwn.net` tabs to detect your existing Touchdwn sign-in state.
• Local Browser Storage on Touchdwn Pages: if you are already signed in on `touchdwn.net`, the extension may read authentication data stored by Firebase in local browser storage on those Touchdwn pages so the extension can connect to your account without asking you to sign in again.
• Active Job Listing Pages: when you click the extension's save action, the extension may read job-related page content from the active tab, such as title, company, location, URL, and description, to create a saved job in your Touchdwn account.
• Transmission to Touchdwn: the extension sends captured job details and related metadata to Touchdwn over encrypted connections so the job can be stored in your workspace.

The extension is not designed to read unrelated browsing data, and it does not sell captured job information to third parties.

4. Data Sharing & Third-Party Services

We employ trusted third-party services to operate Touchdwn, including:

• Database & Auth: Firebase (stores your user profile and saved jobs).
• Google Gemini: processes resume documents, LinkedIn content, job information, interview transcripts, and related context for reviews, matching, and coaching feedback.
• DeepSeek: processes resume text, job information, career notes, and requested drafting inputs for fit scoring, tailoring, and generation features.
• OpenAI: processes microphone audio and interview context to provide live voice interview coaching.
• Payments: Stripe processes web billing and Apple processes App Store purchases. Touchdwn does not receive complete payment-card details from either provider.

Touchdwn remains responsible for its service providers and requires them to handle user data only for authorized services and with protections consistent with this policy and applicable requirements. Provider retention and processing may vary by service configuration and applicable terms.

5. Security

We implement commercially reasonable security measures to protect your personal information, including encrypted transport for API traffic and access controls designed to ensure users can access only their own records.

6. Retention, Deletion, and AI Permission

We retain account and workspace information while your account is active and as needed to provide the features you request. You may revoke future AI processing permission in the iOS app under Profile > AI Data Permissions. Revocation stops new AI transmissions but does not undo processing already completed. You may delete your Touchdwn account from Profile or contact support to request deletion. Limited transaction, security, or compliance records may be retained where legally required.

7. Contact Us

If you have questions about this Privacy Policy, consent, or deletion, please contact us at support@touchdwn.app.