Privacy Policy

Last updated: July 28, 2026

1. Overview

UnitPulse (“UnitPulse,” “we,” “us”) helps job seekers judge how authentic a job posting is before they apply. This policy explains what we collect, how we use it, who we share it with, and — just as importantly — what we never do. It covers both our website (the web app) and our browser extension for LinkedIn, Upwork, and Indeed.

2. Information we collect

• Account information. Your email address and a password. Your password is never stored in plain text — it is hashed and salted before it is saved.
• Jobs you choose to analyze. When you run an analysis — by pasting a job on the website, or by clicking “Verify” on a job page in the extension — we process and store the posting’s public details (such as title, company name, description, poster name and role, and any contact details shown in the posting) together with the score and evidence we generate, so you can revisit your report history.
• Feedback you give. If you label a report (for example “scam,” “no response,” “interviewed,” or “hired”), we store that label with the report to help improve accuracy over time.
• Account and usage data. A session token to keep you signed in, timestamps, your monthly usage count, and your preferences.
• Waitlist. If you join a waitlist, we store the email address you provide.

3. What we do NOT collect

We do not collect your browsing history, your private messages or DMs, your contacts or connections, your social profiles, or any web page other than the specific job posting you choose to analyze. The extension does not run in the background across the web — it works only on the job page you are actively viewing on LinkedIn, Upwork, or Indeed.

4. The browser extension

• It activates only on LinkedIn, Upwork, and Indeed, and reads only the job posting you are currently viewing, in order to parse its fields and show a score on that page.
• It stores your session token and your preferences locally in your browser (via chrome.storage). This is what keeps you signed in and remembers your settings.
• When you request a full analysis, it sends the parsed job details to our own server over HTTPS to run the verification checks and returns your report.
• It performs no scraping, no automation, and no background crawling of any site.

5. How we use your information

• To provide the service: compute scores, show reports, keep your history, sign you in, and enforce free usage limits.
• To improve accuracy of our checks over time, using the feedback you choose to give.
• To respond to your support requests.

We do not use your information for advertising, and we do not build advertising or marketing profiles about you.

6. Third-party services we contact to verify a job

To check whether a company or poster is real, our server queries public-information sources. Depending on the job, these may include domain registration records (RDAP), DNS records, certificate-transparency logs (crt.sh), the Internet Archive / Wayback Machine, public company databases (such as Wikidata and Clearbit’s public company lookup), a web-search provider (Brave Search or DuckDuckGo), and the company’s own public website or careers page.

To run these checks we may send those services only the query terms needed — such as the company name, its website domain, the job title, or the poster’s name as shown in the posting. We never send them your email address, your password, or your account identity. These are lookups for public information, not sharing of your personal data.

7. What we never do

• We never sell your personal data to anyone.
• We never rent, trade, or share your data for advertising, and we do not allow third parties to use it for their own purposes.
• We never use the service, or your data, for any unlawful purpose, and we do not support using UnitPulse to harass, discriminate against, or defame any person or company. Our reports present evidence and likelihood — not accusations or verdicts.
• We never scrape logged-in platforms or automate activity on your accounts.
• We do not train advertising models or third-party AI on your data. Our scoring is deterministic and uses no AI at all.

8. Data retention

• Your reports and feedback stay in your account so you can revisit them, until you delete your account.
• Session tokens expire automatically after 14 days.
• When you delete your account, we permanently remove your reports, feedback, sessions, and account record from our database.

9. Your choices and rights

• You can view your history, change your password, and delete your account at any time from the web app (Profile → Delete account). Deleting your account erases your associated data as described above.
• You can turn the extension off per-site, or remove it from your browser, at any time.
• You can contact us with any question or request about your data (see below).

10. Security

Passwords are hashed and salted (scrypt) and are never stored or transmitted in plain text. Traffic between the app or extension and our server is encrypted in transit over HTTPS. Access to a report requires your own session token — you can only see your own reports. No online service can be guaranteed 100% secure, but we work to protect your information using reasonable safeguards.

11. Children

UnitPulse is not directed to, and is not intended for, anyone under the age of 16.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be reflected here.

13. Contact

Questions about this policy or your data? Email us at support@unitpulse.app.