Privacy

1. What we collect

• Account basics: email, display name, and a Supabase user ID.
• Search criteria you configure (keywords, salary, location, employment type).
• Prospect history: job listings matched to your criteria and the status you’ve assigned them.
• Delivery metadata: your Telegram chat ID and message IDs of cards we’ve sent, plus 👍/👎 feedback you tap.
• Minimal operational logs (request timestamps, error traces) used to keep the service alive.

2. How we use it

We use your data to run the Service: score listings, deliver matches to your Telegram, remember what you’ve seen, and debug failures. We don’t sell your data and don’t run ads.

3. Third parties we rely on

• Supabase — Postgres database and auth (hosts your account and prospect rows).
• Vercel — hosts the web app and serverless functions.
• Telegram — the delivery channel for match cards.
• OpenAI (via Vercel AI Gateway) — re-ranks candidate listings. Prompts include job text and your criteria snapshot; they are not used to train models.

4. Your rights

• Access or export your prospect history from inside the app.
• Delete your account and associated data by emailing us — we’ll remove it within 30 days.
• Unpair Telegram at any time from the Criteria screen.

5. Retention

We keep prospect and feedback history for as long as your account is active so the Service can avoid re-delivering the same listings. Operational logs are retained up to 30 days.

6. Contact

Privacy questions or deletion requests: email hi@harpoon.app.