Privacy Policy

Last updated: May 7, 2026

1. Introduction

Linora ("we", "us", "our") is a job-search productivity tool built and operated by an independent solo developer based in California, USA. Linora is composed of a marketing site (getlinora.com), a web application (app.getlinora.com), and a Chrome extension. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Linora you agree to this policy.

2. Information We Collect

Account information

  • Name and email address you provide when signing up.
  • Authentication credentials (passwords are hashed; OAuth tokens, where used, are stored encrypted).

Resume and profile data

  • Resumes you upload (PDF / DOCX) and the parsed structured fields (work experience, education, skills, contact information, links).
  • Optional profile inputs you provide directly in the app (target roles, locations, preferences, demographic information you choose to share).

Job application data

  • Jobs you view, save, tailor, or apply to through Linora.
  • Tailored resumes and cover letters generated for specific jobs.
  • Application form responses you submit through Linora.

Browser extension data

  • Page content is read only on supported job application sites and only for autofill purposes — when you actively use the extension's autofill feature, it reads form field labels and structure on the current page so it can map your profile data to the correct fields. Page content is not transmitted off-device except as needed to perform the autofill task.
  • Submission detection signals — when you click an Apply / Submit button on an application page, the extension detects success-state text (e.g. "Your application has been submitted") and reports a small signal { url, detected_at, button_text } back to your Linora account so your application status updates automatically. No form-field values are transmitted with this signal.

Email content

  • Each user is assigned an inbound forwarding address at our jobinmail.com domain (e.g. firstname.lastname@jobinmail.com). You may use this as the contact email when applying. Emails received at this address are routed into your Linora inbox and processed for application-status tracking (e.g. detecting recruiter replies, interview requests, rejections). Email bodies are stored encrypted and are visible only to you.

Usage analytics

  • We use Microsoft Clarity for aggregated interaction analytics — heatmaps, click patterns, scroll depth — so we can improve the product. Clarity masks input fields by default; passwords, resume file contents, and personally identifying form values are not captured. Microsoft Clarity's privacy practices are described at privacy.microsoft.com/privacystatement.

3. How We Use Your Information

  • Provide AI-tailored resume and cover letter generation for specific job postings.
  • Auto-fill job applications on your behalf when you trigger Apply, including submitting them to the destination employer's ATS.
  • Track the status of your applications via the inbound jobinmail.com email signal and the extension's submission-detection signal.
  • Communicate with you about your account, product updates, and support.
  • Improve product quality through aggregated, non-identifying analytics.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

We do not sell your personal information. We do not share your resume, application content, email content, or browsing behavior with third parties for advertising or marketing purposes.

4. Data Sharing and Third-Party Processors

We share your information only with the following service providers, each bound by a data processing agreement, and only to the extent necessary to operate Linora:

  • Supabase — primary database (PostgreSQL) hosting your account, profile, resume, and application data with row-level security.
  • Vercel — web app hosting and serverless API, including the AI Tailor pipeline.
  • Railway — background worker (Playwright) that performs the auto-submission of applications on your behalf.
  • Resend — outbound transactional email delivery (account, status notifications).
  • Anthropic (Claude API) — limited use only: parsing your uploaded resume PDF into structured fields during onboarding, and generating optional onboarding questions. Resume content and job-description text are NOT sent to Anthropic for the per-job tailoring pipeline — tailoring runs on a deterministic, embeddings-based system on Linora's own infrastructure.
  • Microsoft Clarity — aggregated UX analytics (see Section 2).

Application submissions. When you click Apply on a job in Linora, your tailored resume and form responses are submitted to the destination employer's Applicant Tracking System (ATS) — e.g. Greenhouse, Ashby, Lever, Workday — at your direction. Once submitted, the data is handled under that employer's privacy policy.

We may also disclose information when legally required (e.g. a valid subpoena or court order), or in connection with a corporate transaction such as a merger or sale of assets, in which case the successor entity will be bound by a privacy commitment no less protective than this one.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data — including resumes, tailored outputs, application records, and inbound email content — is purged within 30 days, except where we are required to retain a minimal record for fraud prevention or legal compliance.

6. Your Rights

Access, correction, deletion, export

You have the right to access, correct, delete, or export the personal data we hold about you at any time. Most of these can be performed directly in your account settings. For requests we cannot satisfy in-app, email support@getlinora.com.

If you are in the EU/EEA/UK (GDPR)

You additionally have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erasure ("right to be forgotten").
  • Data portability (receive your data in a machine-readable format).
  • Object to or restrict certain processing.
  • Lodge a complaint with your local data protection authority.

If you are in California (CCPA/CPRA)

You have the right to:

  • Know what personal information we collect about you.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information (we do not sell your data).
  • Non-discrimination for exercising these rights.

7. Browser Extension Permissions

Linora's Chrome extension declares the <all_urls> host permission. We need it because:

  • Application-success detection runs on company-built career sites (e.g. careers.acme.com, jobs.netflix.com, hr.toyota.com) whose hostnames cannot be enumerated in advance. The detector is purely passive: it observes a button click whose text matches a submit pattern, then watches for confirmation text on the resulting page.
  • Autofill targets any ATS-powered application form, not only the major hosted ATSes. Restricting to a static host list would mean autofill silently fails on company-owned career sites.

The extension does not read page content on sites where you are not actively using autofill or submitting an application. Domains where Linora's own UI runs (getlinora.com) and email providers (Outlook, Hotmail) are explicitly excluded from the detector. No browsing history, no keystrokes, and no form values are uploaded.

8. Cookies

We use cookies and similar technologies for:

  • Authentication (keeping you signed in).
  • User preferences (theme, language, settings).
  • Microsoft Clarity analytics (see Section 2).

We do not use advertising cookies, and we do not run any third-party ad networks. You can disable cookies in your browser settings, but parts of Linora may not function correctly without them.

9. Children's Privacy

Linora is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe we have, please contact us and we will delete it.

10. Security

We use industry-standard security measures including TLS encryption in transit, encrypted database storage, row-level security policies, and least-privilege access controls. No system is perfectly secure — if you suspect a security issue, please contact us immediately.

11. International Transfers

Your data may be processed in the United States and in other countries where our service providers operate. Where required, we rely on standard contractual clauses to protect data transferred outside your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Continued use of Linora after a change takes effect constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy or to exercise any of the rights described above: