We collect the minimum data needed to run the Service. Your personal data is never sold — not to advertisers, not to recruiters, not to that company that ghosted you. Aggregated, anonymized data may be published in reports and trend content. You can export or delete your data at any time. That's it. That's the policy.
Brilliant Jobs ("we," "us," "our") operates the website at brilliantjobs.app, the Brilliant Jobs Chrome extension, and related services (the "Service"). We're a small team that got tired of the job market being a black box, so we built a flashlight.
This Privacy Policy explains what data we collect, how we use it, and your rights. For questions, contact us at [email protected].
| Data | Purpose | Stored Where |
|---|---|---|
| Email address and password | Account authentication | Encrypted auth service |
| Professional profile URL | Account verification and network features | Database |
| Resumes | Application submission and keyword matching | Encrypted storage |
| Application tracking data | Pipeline management | Database |
| Employer reviews and survey responses | Community accountability data and product improvement | Database |
| Feedback and bug reports | Product improvement | Database + encrypted storage |
| Data | Purpose | How |
|---|---|---|
| Professional connection names and profile URLs | Network mapping | Reading publicly visible data on pages you visit |
| Connection employer names and job titles | Company discovery and network intelligence | Extracted from public profile data during scanning |
| Company names and URLs | Employer database enrichment | Extracted from connection profiles |
What we don't collect: We never access your passwords, private messages, search history, browsing activity outside professional platforms, or any data not already visible to you. The extension cannot read your email, files, or data from unrelated websites. We're nosy about hiring data, not your personal life.
| Data | Purpose |
|---|---|
| Dashboard usage patterns (pages visited, features used, filter configurations) | Product analytics and improvement |
| Extension version and browser type | Compatibility and debugging |
| IP address | Security, rate limiting, and fraud prevention |
Here's the deal — we use your data to make the product work and to hold employers accountable. That's it. No dark patterns, no hidden agendas.
We never sell your personal data. Not to advertisers. Not to data brokers. Not to recruiters. Not even if they ask nicely. Your email, name, resume, and individual activity stay between us.
We use a handful of reputable third-party services to keep the lights on. Here's who they are and what they see:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | User data stored with row-level security — each user can only access their own records |
| Vercel | Website hosting | IP address and browser information (standard web server logs) |
| Stripe | Payment processing | Payment method and billing information (we never see or store your full card number) |
| Google OAuth (future) | Email integration for application tracking | Email metadata only — we never read message body content |
Each of these services has its own privacy policy and maintains industry-standard security practices. We chose them because they're good at what they do, not because they were cheap.
We aggregate user-contributed data — application outcomes, employer response rates, salary information, survey responses — to produce community statistics, trend reports, and public content. Think of it as a collective bargaining agreement, but for information.
This aggregated data is always anonymized before publication. It is not possible to identify individual users from our published reports. Nobody will know it was you who reported that MegaCorp took 93 days to send a rejection email. Aggregated data may appear in:
We retain your data for as long as your account is active. If you delete your account, here's exactly what happens — no mysteries:
We take security seriously. Not "we take security seriously" in the way a company says it right after a breach — we mean it proactively.
No system is 100% secure — anyone who tells you otherwise is selling something. If we become aware of a data breach affecting your personal information, we will notify you via email within 72 hours of discovery. No 6-month delays, no "we recently became aware" doublespeak.
Regardless of where you live, you have actual, real rights over your data. Not theoretical rights buried in a 47-page document — real ones you can exercise today:
To exercise any of these rights, contact [email protected]. We will respond within 30 days. Usually faster.
If you're in California, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. To be clear: we do not sell personal information. Not even a little.
If you're in the EEA, our legal basis for processing your data is your consent (provided at account creation and extension installation) and our legitimate interest in operating and improving the Service. You have the right to lodge a complaint with your local data protection authority. We'd prefer you talk to us first, but you do you.
The Brilliant Jobs dashboard uses browser localStorage to persist your filter configurations, collapse states, and UI preferences. That's it. We do not use third-party tracking cookies, advertising pixels, or any of the surveillance infrastructure that makes the modern internet feel like it's watching you. Because it is. But not us.
Our auth provider stores a session token in localStorage to maintain your login state. This token is automatically refreshed and does not contain personal information beyond your user ID.
Brilliant Jobs is not intended for use by anyone under 18. The job market is stressful enough for adults — we wouldn't wish it on a kid. If we learn that a user is under 18, we will delete their account and data promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. We won't pull the classic move of changing everything and hoping nobody notices. The "Effective" date at the top always reflects the most recent revision.
Privacy questions? Data requests? Just want to tell us you actually read this whole thing? (W