Privacy Policy
Covra ("we", "our", or "us") operates the Covra Chrome extension and the covra.tools website. This Privacy Policy explains what information we collect, how we use it, and what rights you have.
1. Information We Collect
We collect only what is necessary to provide the service:
- Google account email address — collected when you sign in with Google, used for authentication only.
- Resume content — when you upload your resume, we parse it to extract your professional background (name, contact info, work history, skills, education). This is stored locally on your device and transmitted to Anthropic's API solely for cover letter generation.
- Generated cover letters — temporarily stored per session to allow download. Not retained after the session ends.
- Subscription status — whether you have an active paid subscription, stored in our database to manage access.
2. How We Use Your Information
- To authenticate you and manage your account
- To generate cover letters tailored to your resume and the job you're applying for
- To manage your subscription and trial period
- To respond to support requests sent to covra.admin@gmail.com
3. How We Share Your Information
We do not sell your data. We share data only with the following service providers, solely to operate the product:
- Anthropic — your resume content and job description are sent to Anthropic's Claude API to generate cover letters. Anthropic's privacy policy applies to this transmission.
- Supabase — we use Supabase to store your account information and subscription status securely.
- Stripe — we use Stripe to process subscription payments. Stripe's privacy policy applies to payment data.
- Google — we use Google OAuth for authentication.
4. Data Storage and Security
Your resume is stored locally in your Chrome browser's local storage and is never uploaded to our servers. Account data (email, subscription status) is stored securely in Supabase with row-level security enabled. We do not store cover letter content after your session ends.
5. Your Rights
You may request deletion of your account and associated data at any time by emailing covra.admin@gmail.com. You may also clear your locally stored resume data at any time through the Covra extension settings.
6. Browsing Activity
Covra only activates on supported job application and job posting pages. Supported platforms include LinkedIn, Indeed, Workday, Greenhouse, Glassdoor, Lever, iCIMS, Ashby, BambooHR, SmartRecruiters, ZipRecruiter, Paylocity, and hundreds of other job boards and career sites. We do not track, collect, or transmit any data from any other websites you visit.
7. Children's Privacy
Covra is not directed at children under the age of 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page.
9. Contact
Questions about this Privacy Policy? Email us at covra.admin@gmail.com.