The short version
Your resume, your conversations, and your application history are yours. We use them to coach you, never to train AI models and never to sell to recruiters or advertisers.
Contents
Who we are
QuickCruit is an AI career coaching product for students and early-career job seekers. This policy covers the marketing site at quickcruit.ai and the product at app.quickcruit.ai. When we say "QuickCruit," "we," or "us," we mean the company that operates both. QuickCruit is the controller of the personal data described in this policy.
Information we collect
Account information
Your name, email address, and the authentication identifiers needed to keep your account secure and signed in.
Profile and resume content
- Resumes you upload and profile details you add.
- Documents the product generates for you: tailored resumes, cover letters, coaching responses.
- Application history and tracker notes.
- Coach memory: facts you share with the coach (for example, your target roles or graduation date) that it stores to give you better answers over time. You can view, correct, and delete individual memory entries in the app.
Payment information
Payments are handled by a payment processor that meets industry security standards. We receive your subscription status and billing history; we never see or store your card number.
Usage information
Page views and feature usage, so we can see what helps and what doesn't. This data is used in aggregate to improve the product.
Approximate location
Like most websites, we can infer a rough, city-level location from your IP address when you use the product. We use it in the moment to localize your experience. We never ask for your device's precise location, we don't store your location history, and we don't share it in a way that identifies you.
How we use your information
- To run the product: match you to roles, tailor documents, coach interviews, and keep your tracker current.
- To send email you opt into, like weekly summaries. Unsubscribe anytime from any email footer or at /unsubscribe.
- To bill you for paid plans.
- To improve the product, using aggregated, anonymized usage analytics.
- To keep the service secure and to prevent fraud and abuse.
- To comply with our legal obligations.
We do not sell your personal information. We do not share it with recruiters or advertisers.
How we share your information
We share personal data only in the limited circumstances below, and never for anyone else's marketing.
- Service providers. Vetted companies that help us run QuickCruit: authentication, payment processing, cloud hosting and infrastructure, content delivery, database hosting, email delivery, analytics, and AI model inference. Each is bound by contract to process your data only to provide their service to us, and our AI providers are contractually barred from training models on your data.
- At your direction. When you take an action that shares data, for example downloading a document to submit with an application or publishing a portfolio page.
- Legal reasons. If required by law, subpoena, or other legal process, or to protect the rights, safety, and security of QuickCruit, our users, or the public. Where lawful, we will tell you before we disclose.
- Business transfers. If QuickCruit is involved in a merger, acquisition, or sale of assets, your data may transfer as part of that transaction; this policy would continue to apply, and we would notify you of any change in ownership.
How AI processing works
QuickCruit's coaching features are powered by leading AI model providers. To generate tailoring, cover letters, and coaching responses, we send only the content relevant to the task, such as your resume text, profile details, and the job posting you're working on.
We do not use your documents or conversations to train AI models, and our agreements with model providers exclude your data from training their models.
The browser extension
QuickCruit Autofill is a Chrome extension that fills in job application forms on employer career sites. It fills the form; you review what it wrote and submit the application yourself. It never submits an application for you, and it never solves CAPTCHAs.
What it stores
The details you ask it to fill in, which are your name, contact information, links, work authorization, and the demographic answers employers ask for, along with the resume file you choose. These are stored in your own browser using Chrome's extension storage. If you sign in to a QuickCruit account, these details sync with that account so you do not have to type them twice.
What it does on a page
The extension only runs when you open it and click Autofill. It reads the fields of the application form in front of you so it can match them to your saved details, writes your values into those fields, and reads them back to confirm they took. It has standing access to the major applicant-tracking systems' domains, because application wizards move between pages mid-fill; on any other site it can only see the tab you open it on, and only after you click Autofill. It does not read the pages you visit when you are not filling a form, and it does not record your browsing history.
What it sends to us
- When a form has fields it cannot match on its own, it sends the field labels (never your answers) to QuickCruit so our AI can map them.
- Form structure. After a fill it can send us the shape of the form, meaning which fields appeared and how they were labeled, so the next person on the same site gets a faster fill. This never includes what you typed. You can turn it off in the extension's settings.
- Fill outcomes. A short summary of each run: which site, how many fields it filled, how many it left for you, and how long it took. Counts and labels only, never values. Also switchable off in the extension's settings, and included in your data export.
What it never does
- It does not sell your data, to anyone, ever.
- It does not share your answers with other users. Your saved answers are yours alone.
- It does not invent an answer. When a question cannot be answered from your own saved details, it flags the question and leaves it for you.
You can remove everything the extension has stored by uninstalling it, which clears its local storage, or by clearing your saved details from the extension's profile editor.
Cookies and analytics
We set no advertising cookies and do no cross-site tracking. What we do set: the cookies that keep you signed in and let checkout work, two small preference cookies (whether you have a session, and how you left the sidebar), and one first-party analytics cookie scoped to quickcruit.ai and its subdomains, so we can see which features help and that a visit here and a later visit to the product came from the same person. In the product we also record how the interface is used, with anything you type masked before it leaves your browser; those recordings help us find where people get stuck.
Every cookie is listed by name, with what it does and how long it lasts, in our Cookie Policy. That page also has a switch that turns analytics and session recording off across quickcruit.ai and the product; only the sign-in and preference cookies remain. We do not show a cookie banner because nothing here is used for advertising, and the control lives on that page instead.
We honor Global Privacy Control and Do Not Track. If your browser sends either signal, our analytics start off for you, exactly as if you had flipped the switch on the Cookie Policy page yourself; you can still turn them on there if you choose. We never track anyone across other sites regardless.
Data retention and deletion
- We keep your data while your account is active, so your tracker, documents, and coach memory are there when you come back.
- You can delete individual items anytime: documents, tracker entries, and coach memory entries, from inside the app.
- You can delete your account anytime from account settings. We remove your personal data within 30 days, except where the law requires us to keep certain records (for example, billing records) for longer.
- You can download a copy of your data anytime from account settings (Account, then "Download your data"). You get one JSON file holding what you have given us: your profile, resumes, tailored documents and cover letters, tracker, your coach conversation, and your activity such as searches. What the coach has inferred and organized from that (your coach memory) is yours to view, correct, and delete on the Memory page in the app; it is not part of the file. Secrets, payment-processor identifiers and internal machine-learning vectors are left out too.
Your rights
Wherever you live, you can access, correct, download, and delete your data from account settings, or by emailing us. Two regions have specific laws worth spelling out.
If you're in the EEA or UK (GDPR)
You have the right to access, correct, delete, and receive a portable copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. We process your data to perform our contract with you (running the service), with your consent (optional emails), and for our legitimate interests (security and product improvement). You also have the right to lodge a complaint with your local supervisory authority.
If you're in California (CCPA/CPRA)
You have the right to know what personal information we collect, to access it, to correct it, to delete it, and to receive it in a portable format. We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We will never treat you differently for exercising these rights.
To exercise any of these rights, use your account settings or email contact@quickcruit.ai. We respond to verified requests within the timelines the law sets, and you may use an authorized agent where the law allows.
Children
QuickCruit is not directed to children under 13, and we do not knowingly collect personal information from them. Our terms require users to be 16 or older. If you believe a child has created an account, email us and we will delete it.
International transfers
We are based in the United States, and our service providers may process data in the US and other countries. Where data moves across borders from the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses with our providers.
Security
We protect your data with industry-standard measures: encryption in transit and at rest, access controls that limit who at QuickCruit can see your data, and vetted providers for authentication, payments, and hosting. No system is perfectly secure, so if we ever learn of a breach affecting your personal data, we will notify you as the law requires. The security page goes into detail: what is encrypted, where your data lives, who can see it, how to report a vulnerability, and our incident and testing record.
Changes to this policy
When we change this policy, we update the date at the top, add a plain-English note of what changed above the text, and keep every version in the version history below. If a change meaningfully affects how we handle your data, we will tell you by email or in the app before it takes effect.
Privacy, data, and legal enquiries
One address for all of it: questions about this document, requests to access, correct, export, or delete your data, and anything a lawyer would want to send us. Email contact@quickcruit.ai. We answer verified requests within the timelines the law sets, and usually a good deal sooner.
Version history
Every change to this document, newest first. The date at the top of the page is the newest entry here.
The Security section now points to the new security page at /security, which says plainly what is encrypted and where, who can see your data, how to report a vulnerability, and that we hold no certifications and have had no incidents to date. No change to how we handle your data.
Cookies now have their own policy at /cookies, and the cookies section here was corrected: the product sets an analytics cookie and records product sessions with typed text masked, plus two small preference cookies; you can turn analytics off, and browsers sending a Global Privacy Control or Do Not Track signal start with it off. Described what the browser extension shares with us beyond your saved details (optional form-structure maps and per-fill outcome counts, both switchable off). Described the data export precisely: it exists, it is a JSON file of what you gave us (profile, documents, tracker, conversation, activity), it lives in account settings, and coach memory stays viewable and editable in the app rather than in the file. Added a legal contact section and this version history.
Added "The browser extension": what QuickCruit Autofill stores, what it does on a page, and what it never does.
Corrected the analytics sentence. We had said measurement was cookieless; this site sets one first-party analytics cookie scoped to quickcruit.ai and its subdomains.
Rewrote for clarity. Added how we share data (service providers by category, at your direction, legal reasons, business transfers), Do Not Track, and international transfers.
First full policy with a table of contents, your rights (GDPR and CCPA), retention, and children.
First published.