Polysparks Privacy Policy

Effective Date: 2026-09-21
Last Updated: 2026-10-01

This Privacy Policy describes how Polysparks ("Polysparks," "we," "us," or "our"), located at polysparks.com, collects, uses, discloses, and protects personal information when you use our website and related services (collectively, the "Services"). Capitalized terms not defined here have the meanings given in our Terms of Service.

This Policy does not apply to the practices of employers, job boards, applicant tracking systems, or other third parties ("Third-Party Platforms"). When you follow a link from the Services to apply for a job, you apply on the employer's own site, and their privacy policies govern what you give them.

At a Glance

• We collect your account details, the resume you upload, and the work preferences you set.
• We use AI to read your resume and to assess live job postings against it and your preferences, producing a report of which postings to apply to and why. If you turn on tracking, this happens on a schedule, about once a day, until you stop it or your subscription ends.
• Polysparks does not apply to jobs for you. You apply yourself, on the employer's own site; we do not send your information to employers.
• We disclose your information only to the named service providers in Section 4, and where the law requires.
• We do not sell your personal information, we do not share it for advertising, and we run no analytics, tracking, or advertising technology of any kind.
• You can edit or delete your information at any time, and you can delete your account or download a copy of your data from the account menu. See Section 5.

1. Information We Collect

1.1 Information you provide to us

• Account and contact information. Name, email address, password, and, if you give it at sign-up, your current job title. If you sign in with Google, we receive your name and email address from Google instead of a password.
• Resume. Your resume or CV. We keep the file and the text extracted from it, and the details read from it — education, work history, projects, skills, and certifications — which you can review and edit.
• Work preferences. The country, regions, and cities you are searching in, and, for tracking, one country and up to two regions of it; up to three fields of work, which AI chooses from your resume unless you choose them yourself; whether you want an internship or a permanent role; a pay floor; and companies to include or exclude.
• Reports and saved postings. The reports produced for you, including the assessment (Apply or Skip, and the reasons) reached for each posting read against your resume while tracking is on, and the job postings you save to your shortlist.
• Payment information. Subscriptions are processed by Stripe. We do not receive or store card numbers. We store only a record that links your account to its Stripe customer and subscription, the subscription status, and the current period end date.
• Communications. Messages you send to support, and feedback you give us.

A resume can contain information you may not want to share, such as your date of birth, a photograph, health information, or your ethnicity or religion. We do not ask for any of this and do not need it; please leave it out of the resume you upload. Anything you do include is processed along with the rest of your resume as described in this Policy.

1.2 Information collected automatically

• Server logs. Our servers log ordinary request information, including IP address, in the course of operating and securing the Services, and log diagnostic detail when an error occurs.
• Browser storage. We store your sign-in session in your browser so you stay signed in, and we store a small amount of interface state such as your current filters. See Section 7.
• We run no analytics or tracking. Polysparks contains no analytics product, no telemetry, no error-reporting service, no session recording or replay, no advertising technology, and no third-party tracking scripts. We do not build behavioural profiles of you, and we do not take screenshots or recordings of your screen.

1.3 Information from other sources

• Job listing data from employers' public career sites and applicant tracking systems. This is information about jobs, not about you.
• Sign-in information from Google, if you choose to sign in that way — your name and email address, per your settings with Google.

2. How We Use Personal Information

We use personal information to:

1. Provide the Services, including creating and maintaining your account; reading your resume; filtering live job postings against your preferences; using AI to assess how well the remaining postings fit your resume and producing your report; and letting you save postings.
2. Communicate with you, including service and security messages and support replies.
3. Process payments and manage subscriptions.
4. Maintain safety and security, including authenticating you, preventing fraud and abuse, enforcing our Terms, and debugging.
5. Improve the Services, including fixing errors and measuring whether our job classification and matching are accurate. We do this using job data and aggregate measurements, not by reading your personal information.
6. Comply with law, respond to lawful requests, and protect rights, safety, and property.
7. With your consent, for any other purpose described when we ask.

We do not use your personal information to train AI models, and our AI provider is contractually prohibited from using data we send it to train theirs.

3. AI and Automated Processing

We use AI models operated by OpenAI for three things:

• Reading your resume. When you upload a resume, the file is sent to the model to extract its text and the details listed in Section 1.1.
• Choosing the fields of work to track. When you turn on tracking, your resume text is sent to the model so it can suggest the two or three fields of work it fits best. You can replace its choice with your own at any time.
• Screening and ranking postings for you. Your resume text and your stated preferences are sent to the model, together with the postings that pass our filters, so it can assess fit and explain, in the report, why a posting suits you or what is missing.

Tracking runs on a schedule. Once you turn tracking on, we repeat the screening about once a day without you asking each time: postings that are new in the place you chose are sent to the model with your resume text, and the result is added to your report. A posting already assessed is not sent again unless you change your resume or the preferences the assessment depends on, in which case the postings in your place are assessed again. This continues until you stop tracking in the tracking settings, your subscription ends, or you delete your account. Stopping tracking deletes the assessments it stored.

Two things follow. First, you make the decisions: a report says Apply or Skip, and whether and where you apply is up to you. Recommendations are suggestions, not decisions with legal effect made about you. Second, AI is imperfect: matching may miss good postings or surface poor ones, and the details read from your resume may be wrong, so check them.

Where applicable law grants you rights regarding automated decision-making or profiling, you may exercise them as described in Section 9. Employers may run their own automated screening on applications they receive; that is outside our control.

4. How We Disclose Personal Information

• Service providers. We use the following, each under contractual confidentiality and use restrictions:

• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as a business asset subject to this Policy or successor commitments.
• Legal and protective disclosures. To comply with law or legal process, to enforce our Terms, or to protect the rights, property, or safety of Polysparks, our users, or others.
• With your consent or at your direction, in other cases.

We do not send your information to employers. When you apply for a job, you do so on the employer's own site, and what you give them is governed by their privacy practices.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

5. Choices You Have

• Profile, resume, and preferences. View, edit, or delete any of them at any time in the product.
• Saved postings. Remove a saved posting from your shortlist at any time.
• Tracking. Change what is tracked, or stop it, at any time in the tracking settings. Stopping deletes the assessments tracking stored; your resume, preferences, and saved postings stay.
• Marketing. We currently send no marketing email. If we start, every message will carry an unsubscribe link, and service messages will continue while you have an account.
• Account deletion and a copy of your data. Both are in the account menu. "Download my data" gives you one file holding your account, profile and preferences, resume, saved postings, tracking settings, the assessments tracking has stored, and reports. "Delete account" permanently deletes your account and everything listed in this Policy as stored for it (except the record, described in Section 8, that the address has used its free analysis), after you type your account email to confirm; if you have an active subscription, cancel it first. You can also email contact@polysparks.com and we will do either for you within the period the law of your residence requires.

6. Security

We use TLS in transit throughout. Access to production data is restricted to the people who need it to run the Services, and administrative actions on accounts are recorded in an audit log. Our operator console deliberately exposes only account emails, names, sign-up dates, and counts — never resume contents.

No system is completely secure and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant regulators as required by law. Please use a strong, unique password for your Polysparks account.

7. Cookies and Similar Technologies

We do not use advertising cookies, analytics cookies, or third-party tracking technologies of any kind, and we have no advertising or analytics partners.

We store your sign-in session in your browser's local storage so that you remain signed in, and we store small amounts of interface state such as your current filters and whether a panel is open. This is strictly necessary to operate the Services and is never shared with anyone.

Because we set nothing that is not strictly necessary, there is no cookie consent banner and nothing for you to opt out of.

8. Data Retention

We keep personal information for as long as you have an account, and delete it when you or we delete the account. Deletion today is triggered by an event rather than by a timer, and this section says plainly what each event does.

We do not currently operate automated time-based deletion of account data, so we make no promises about fixed retention windows we could not keep. We may keep information longer where the law requires it, or to enforce our agreements.

9. Your Privacy Rights

9.1 All users

You can view and edit most of your information directly in the product at any time. To delete your account, or to receive a copy of your information, use "Delete account" or "Download my data" in the account menu, or email contact@polysparks.com. We will verify the request against your account email address and respond within the time the applicable law allows.

9.2 United States state privacy rights

Depending on your state of residence, including California, Colorado, Connecticut, Texas, Virginia, and other states with comprehensive privacy laws, you may have the right to: know or access the personal information we process about you; correct inaccuracies; delete your personal information; obtain a portable copy; opt out of sale, of sharing for targeted advertising, and of certain profiling used for decisions with legal or similarly significant effects; limit the use of sensitive personal information (California); and not be treated differently for exercising your rights.

As stated in Section 4, we do not sell personal information and do not process it for targeted advertising, so there is nothing to opt out of on those grounds. We do not ask for sensitive personal information; if your resume contains any, we use it only to provide the Services you asked for.

To exercise any right, email contact@polysparks.com. We verify requests using your account email address and, where necessary, additional information. Authorized agents may submit requests with proof of authorization as permitted by law. If we decline a request, you may appeal by replying to our decision; residents of some states may also contact their state attorney general.

California notice at collection. In the preceding 12 months we have collected the following categories, for the purposes in Section 2, from the sources in Section 1, and disclosed them for business purposes to the recipients in Section 4.

We do not collect precise geolocation, and we do not sell or share any category above, including the personal information of consumers under 16. Retention is described in Section 8.

9.3 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, Polysparks is the data controller of your personal information. Our legal bases are: performance of a contract for providing the Services, including reading your resume and producing your reports; legitimate interests in securing the Services, preventing fraud, and sending service messages, balanced against your rights; consent where we ask for it, withdrawable at any time; and legal obligation. We do not ask for special categories of data. If your resume contains any, please remove it before uploading; anything you choose to include is processed only to provide the Services, on the basis of your explicit consent in uploading it, which you can withdraw by deleting or replacing the resume.

You have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent without affecting processing already carried out, rights concerning automated decision-making under Article 22 GDPR, and the right to complain to your supervisory authority or the UK Information Commissioner's Office. Email contact@polysparks.com to exercise them.

9.4 Other jurisdictions

If you live under another data protection law — for example Canada's PIPEDA, Brazil's LGPD, or Australia's Privacy Act 1988 — you may have similar rights to access, correct, delete, or port your information, to withdraw consent, and to complain to your local authority. We honour the rights your local law grants. Email contact@polysparks.com.

10. International Data Transfers

We are based in the United States and our servers and service providers process information in the United States, which may have data protection laws different from those where you live. Where required, we rely on appropriate transfer safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum. You may request details at contact@polysparks.com.

11. Children's Privacy

The Services are intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18, and we do not ask for your date of birth. If we learn that we hold information from someone under 18, we will delete it. If you believe a minor has given us personal information, contact contact@polysparks.com.

12. Third-Party Sites and Employers

The Services link to employer sites and applicant tracking systems. Their collection and use of your information, including everything in an application you submit to them, is governed by their own privacy policies, which we encourage you to read. We are not responsible for the privacy practices of third parties.

13. Do Not Track and Opt-Out Preference Signals

Some browsers send "Do Not Track" or Global Privacy Control signals. Because we run no analytics, no advertising, and no cross-site tracking, and because we neither sell nor share personal information, there is nothing for such a signal to switch off. We therefore do not act on them, and your data is handled the same way whether you send one or not.

14. Changes to This Policy

We may update this Policy. We will post the updated version with a revised "Last Updated" date, and for material changes we will give additional notice, such as by email or in the product, before they take effect. Where the law requires it, we will ask for your consent. Continuing to use the Services after the effective date means you acknowledge the updated Policy.

15. Contact Us

Privacy questions, requests, and complaints:

Polysparks
471 Santa Clara Ave, Redwood City, CA 94061
Email: contact@polysparks.com