Trakker Privacy Policy

Last updated: July 28, 2026

Trakker ("Trakker," "we," "us," or "our") is operated by Heimer. This Privacy Policy explains what information we collect when you use Trakker (the "Service"), how we use it, and the choices you have.

1. Information We Collect

Account information. When you sign up, we collect your name and email address, either directly or through a third-party sign-in provider (currently Google, via our authentication provider Clerk). If you sign in with Google, we receive your name, email address, and profile photo as made available by Google.

Profile and education information. During onboarding or in account settings, we collect information you provide to personalize job matching and notifications: your preferred name, school, major, education status, expected graduation year, whether you are a PhD candidate, target companies and role preferences, desired level (intern or new grad), location preference, phone number, and links to profiles you choose to share (for example GitHub, LinkedIn, or a personal website).

Resume content. Any resume content you create, paste, or import into Trakker, including work history, education, skills, and bullet-point descriptions, is stored so the editor can display and let you edit it. Two features send resume text to a third-party AI language model provider (currently one of OpenAI, Moonshot/Kimi, xAI, or DeepSeek, depending on our configuration): if you import an existing resume (a .docx or .pdf), the extracted text of that entire resume is sent to restructure it into an editable Trakker document; if you use the AI-assisted bullet rewriting feature afterward, only the specific bullet text (and any instructions you type) is sent for that request, not your full resume. Neither feature sends your account information (name, email, etc.) to the AI provider along with the resume text.

Application tracking data.The company names, job titles, locations, links, statuses, and dates you add — directly or by importing a spreadsheet — to your applications tracker. If you import a spreadsheet, a small structural sample of that file (a representative set of rows, not your whole file) is sent to a third-party AI provider solely to identify what each column represents (for example, which column is "Company") and to map any unrecognized status labels to Trakker's categories; that mapping is then applied in code to the rest of your file, and the rest of your rows are not sent to the AI provider. You review and confirm the imported rows before anything is saved.

Job search preferences. Companies you follow or favorite and your notification preferences (instant alerts vs. daily digest).

Usage and log data. Standard technical information such as IP address, browser type, device information, and pages visited, collected automatically for security and to understand how the Service is used.

Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We do not receive or store your full card number; Stripe handles that directly, and we only receive confirmation of payment and subscription status.

2. Cookies and Local Storage

We use a small number of functional cookies and browser storage mechanisms — not third-party advertising or cross-site tracking cookies. These include: a session cookie from Clerk that keeps you signed in; a short-lived cookie that remembers you've completed onboarding so we don't need to re-check on every page; and browser local storage / IndexedDB that saves your theme preference, sidebar layout, and a local draft of your resume on your own device (so edits load quickly and survive a refresh before they're synced to your account). We do not use these technologies for cross-context behavioral advertising.

3. How We Use Your Information

  • To provide and operate the Service (displaying your resume, matching and sending job alerts, tracking your applications, processing AI import/rewrite requests).
  • To send you transactional and notification emails (job alerts, digest emails, account-related messages), sent via Amazon Simple Email Service (SES).
  • To process payments and manage your subscription, via Stripe.
  • To improve the Service and diagnose problems.
  • To communicate with you about your account or changes to our terms or policies.

4. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with the following categories of service providers, each acting under their own privacy and security obligations:

  • Clerk: authentication and account management, including Google OAuth sign-in.
  • AI language model providers (OpenAI, Moonshot/Kimi, xAI, or DeepSeek, depending on configuration): receive resume text when you import a resume, bullet text (and any instructions you provide) when you use AI-assisted rewriting, and a small structural sample of an imported spreadsheet when you use application import — never your full account information.
  • Amazon Web Services (AWS): hosting, database storage, and email delivery (SES).
  • Stripe: payment processing for paid subscriptions.

We may also disclose information if required by law, or to protect the rights, property, or safety of Trakker, our users, or others.

5. Data Retention

We retain your account, resume, and application-tracking data for as long as your account is active. If you delete your account, we will delete your resume content, application-tracking data, and personal account information within a reasonable time, except where we're required to retain records (for example, payment records for tax or accounting purposes).

6. Your Choices and Rights

You can edit or delete your resume content and application-tracking data at any time within the Service. You can change your notification preferences (instant alerts, digest frequency, or opt out entirely) in account settings, or use the one-click unsubscribe link in any notification email. You can request deletion of your account and associated data by contacting us at the email below. Depending on your location, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA), other U.S. state privacy laws, or the EU/UK General Data Protection Regulation (GDPR), including the right to access, correct, or delete your personal information, and the right to opt out of the sale or sharing of personal information — which, as noted above, we do not do. Because we do not sell or share personal information for targeted advertising, a Global Privacy Control or similar opt-out signal has no additional data use to turn off, but we will still honor it as a valid opt-out preference where required by law. Contact us to exercise any of these rights.

7. Children's Privacy

Trakker is intended for users who are at least 16 years old. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

8. International Users

Trakker is operated from the United States, and the information we collect is processed and stored on servers located in the United States (via AWS). If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws that differ from those of your country.

9. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date, and for material changes, we will make reasonable efforts to notify you (such as by email or an in-app notice).

11. Contact Us

Questions about this Privacy Policy or your data can be sent to: admin@trakkerhq.com