Privacy Policy

ObcerIQ (obceriq.com) is a career and compensation intelligence platform operated by Obcera (“we,” “us”). This policy explains, in plain English, what data we collect, why, and the controls you have over it. It applies to the website, the application, and the ObcerIQ browser extension.

Questions or requests: privacy@obcera.com.

Account information. Your name, email address, and a password. Passwords are hashed by our authentication provider (Supabase Auth); we never see or store them in plain text.

Career content you provide. This is the heart of the product, so here is exactly what happens to each input:

• Resumes (uploaded or pasted) are processed in memory to generate your report and are never written to storage. What we keep is the structured intelligence report the analysis produces — your market valuation, skills, scores, and recommendations.
• Offer letters you analyze are stored (the text you provide, capped, plus the analysis) so you can revisit them. They are deleted with your account, and you can request earlier removal anytime.
• Recruiter conversations analyzed in the Conversation Analyzer are stored, because the feature is built to be resumed, edited, and added to over time. That means the conversation text you paste or attach is kept verbatim, along with what the analysis extracts from it (role, company, compensation, recruiter details, and the other structured fields), any corrections you make to those fields, your answers to follow-up questions, and any reply suggestions generated for you. Text is extracted from files you attach and stored the same way; the original file itself is not kept.
• Third-party information inside those conversations. A recruiter message is written by someone else, so it often contains their personal information — name, email address, phone number, employer, and the terms they are offering. When you paste a conversation, you are storing that person's information in your account. We handle it under this policy and keep it private to your account, and it is deleted when you delete the conversation or your account. Please paste only what you need.
• Resume-optimizer, LinkedIn, and interview inputs are processed transiently to generate your results and are not stored as raw text.
• Optional context such as your current salary or target market is stored with your reports to power features like your salary-gap analysis.

Billing information. Handled entirely by Stripe. We store only your subscription tier and a Stripe customer reference — never card numbers.

Technical basics. Standard server logs (IP address, browser type, timestamps) generated by our hosting providers for security and reliability. We do not run advertising trackers, social pixels, or data brokers of any kind.

Product analytics — with your consent. If you agree to it (we ask on your first visit, and nothing is loaded until you do), we use PostHog to understand how the product is used — which pages people visit, which features they use, where they get stuck, and which steps fail. It records events about what happened, never the content you typed: no resume text, no recruiter messages, no decision details, no offer text, and no email addresses. Events carry counts, durations, scores, and plan names. Page addresses are recorded without their query strings, and identifiers in the URL are collapsed (so /reports/<id> is recorded as /reports/:id). Analytics requests are proxied through our own domain, so your browser never talks to a third-party analytics host directly. If your browser sends a Do Not Track signal, we do not load the analytics tool at all.

Session replay. PostHog can replay a session to show how a page behaved. We run it with all text and all form inputs masked, so a replay shows layout and interactions — clicks, scrolling, where something froze — and never the words on the screen or anything you typed.

Your career content — including the recruiter conversations you analyze — is sent to a large-language-model provider to generate your results. Today that provider is Google, using the Gemini models via Google's API (some requests are routed through Vercel's AI Gateway, which passes them to the same provider). These are API integrations, and we never grant any provider permission to train on your content. If we change the provider powering the platform, we'll update this policy.

On the BYOK plan, analyses — including recruiter conversation analysis — run on your own API key instead, sent directly to the provider you chose (Anthropic or OpenAI) under your own account, not to the platform provider above. Your key is validated once, encrypted at rest with AES-256-GCM, decrypted only server-side at the moment of use, and never sent to your browser. You can replace or remove it in Settings at any time. Your provider's own terms and privacy policy govern what they do with requests made on your key.

The ObcerIQ Chrome extension reads the job title, company, and description of the posting you're viewing and sends them — with your personal API key — to our API to compute the overlay (fair pay, recruiter budget, negotiation anchor). The result is computed on the fly and not stored. Your extension key is stored on our side only as a SHA-256 hash; the raw key exists only in your browser's extension storage, and you can revoke it in Settings.

The extension does not track your browsing, does not read pages other than job postings, and sends nothing anywhere except our API.

• In transit: all traffic is encrypted with TLS.
• At rest: our database and infrastructure encrypt stored data with AES-256.
• Access isolation: every record is scoped to your account with database row-level security — other users cannot query your data, even in the event of an application bug.
• Secrets: BYOK keys are AES-256-GCM encrypted; extension keys are stored as one-way hashes; passwords are hashed by Supabase Auth.

• We never sell or rent your personal data. To anyone. Ever.
• We never share your resume or reports with employers, recruiters, or data brokers.
• We never use your content to train AI models — ours or anyone else's.
• We never show ads or embed advertising trackers.
• We never send your resume, reports, decisions, or messages to our analytics tool.

We keep your data for as long as your account exists, so your reports, recruiter conversations, and history remain available to you. We do not expire or auto-delete them on a timer — a conversation you saved stays until you remove it or delete your account.

Deleting your account (Settings → Danger zone) permanently and immediately erases your profile, reports, offer analyses, recruiter conversations, alerts, scripts, and keys — the deletion cascades through every table at the database level, so no orphaned copy of a conversation survives. You can also email privacy@obcera.com and we'll do it for you. Stripe retains billing records as required for tax and accounting law.

Wherever you live, we extend the same rights to everyone:

• Access & portability — your reports are always visible in the app and exportable to PDF; ask us for a full copy of your data anytime.
• Correction — update your profile in Settings, or ask us to fix anything else.
• Deletion — self-serve in Settings, or by email.
• Objection & restriction — tell us if you want any processing stopped; since we do no advertising or profiling beyond the service itself, this usually means account deletion.

We respond to all requests within 30 days. We will never discriminate against you for exercising these rights.

Our infrastructure (Vercel and Supabase) is hosted in the United States. If you use ObcerIQ from outside the US, your data is processed there under the safeguards described in this policy.

ObcerIQ is a career tool for working professionals and is not directed at children under 16. We do not knowingly collect data from them; if you believe a minor has created an account, contact us and we'll delete it.

If we make material changes, we'll update the date below and note the change prominently in the app before it takes effect. We will never weaken the “What we never do” commitments without your explicit consent.