Privacy Policy

1. Who we are

OyaPilot is an AI-powered job-search copilot (a web application and a browser extension) operated by Oyatco LLC ("OyaPilot", "we", "us"). This Privacy Policy explains what personal information we collect, why, how we use and share it, and the choices and rights you have.

If you have questions, contact us at privacy@oyapilot.ai.

2. Scope

This policy applies to the OyaPilot website (oyapilot.ai), the web application, the browser extension, and related services (together, the "Service"). It does not cover third-party websites, employer career pages, or applicant-tracking systems you reach through the Service, which have their own privacy practices.

3. Information we collect

Information you give us

• Account details: your email address and authentication credentials (handled by our authentication provider; we never store your password in plain text).
• Résumé and profile information: the content of résumés and cover letters you upload or create, and the details in your Application Profile, which may include your name, contact information, work history, education, skills, work eligibility, and information you choose to provide for voluntary self-identification (for example, demographic fields some employers request). Some of this is sensitive personal information; you choose what to provide.
• Job and application activity: roles you save, applications you prepare or send, agent configurations, interview events, and notes.
• Interview Prep content: your typed answers and, for the voice mode, the audio of your spoken answers, the resulting transcripts, and the AI feedback and scores generated from them.
• Communications: messages you send us and, if you connect a mail relay, the application-related email we process on your behalf.

Information we collect automatically

• Usage and device data: pages viewed, features used, approximate location derived from IP, browser and device type, and similar analytics, used to operate and improve the Service.
• Cookies and local storage: see our Cookie Policy.

Information from third parties

• Payment information: when you subscribe, our payment processor (Stripe) collects your payment details directly. We receive limited billing data (such as your plan, status, and the last four digits of a card), never your full card number.
• Verified job sources: job postings shown to you come from approved, verified sources (such as ATS job boards and approved APIs). We do not scrape large job boards.

4. How we use your information

We use personal information to:

• provide the Service: discover and score jobs, tailor résumés and cover letters truthfully, prepare applications, run optional background agents, and power Interview Prep;
• process your spoken and typed interview answers to give you scored, structured feedback;
• operate billing, subscriptions, and the Interview Guarantee;
• communicate with you (service messages, optional digests, support);
• secure the Service, prevent abuse, and meet legal obligations;
• understand and improve the product in aggregate.

Truthfulness and control. Our tailoring never adds a skill, credential, employer, date, or fact you do not have, and you review changes before they are used. Applications are submitted only through your own browser session (copilot) or, where you opt in, to guest-submittable career-page forms (Autopilot); we do not store your passwords or session cookies for third-party sites.

Legal bases (EEA/UK users)

Where the GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure, operate, and improve the Service); consent (for optional features such as voluntary self-identification fields, certain cookies, or marketing, which you may withdraw at any time); and legal obligation.

5. How AI processes your information

OyaPilot uses third-party AI providers to score jobs, tailor materials, and run Interview Prep, including the voice interview. Your content (for example, a résumé and a job description, or a spoken answer) is sent to these providers solely to generate the result you requested. We do not sell your information, and we do not use your personal content to train our own models. Our AI subprocessors process data under their API terms and, to our knowledge, do not train their foundation models on data submitted through their business APIs.

6. How we share your information

We do not sell your personal information. We share it only with:

We also may disclose information to comply with law, enforce our Terms, or protect rights and safety, and in connection with a merger or acquisition (with notice where required).

7. Cookies and tracking

We use a small set of cookies and local storage for sign-in, security, rate limiting, your theme preference, and basic analytics. We do not use third-party advertising cookies. See the Cookie Policy for the full list and your controls.

8. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, accounting, and security obligations. As a default, we delete account data within 30 days of account closure and purge it from backups within 90 days thereafter. You can delete most of your data at any time from your account, and you can request full deletion as described below.

9. Security

We protect your information with encryption in transit and at rest, per-account data isolation (row-level security), and the principle of least privilege. We never store your third-party platform passwords. See our Security overview. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, export (portability), and restrict or object to certain processing, and to withdraw consent. You can export or delete your résumé and profile data from your account, or contact privacy@oyapilot.ai and we will respond within the time the law requires.

EEA/UK: you may lodge a complaint with your local data protection authority. If we are required to appoint an EU or UK representative or a data protection officer, we will identify them here.

California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined. You may exercise these rights without discrimination.

We will verify requests reasonably and may ask you to confirm your identity.

11. International transfers

We are based in the United States and use US-based providers. If you access the Service from outside the US, your information may be transferred to and processed in the US and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the Service and the law evolve. We will post the new version here with a revised "Last updated" date and, for material changes, give additional notice.

14. Contact us

Questions or requests: privacy@oyapilot.ai.