Legal
Privacy Policy
Last updated: January 15, 2025
Owtra is built on a simple principle: your job search data is yours. This policy explains exactly what we collect, why, and how you stay in control.
Contents
Information We Collect
Account Information
When you create an account, we collect your name, email address, and password. If you sign up via a third-party provider (Google, GitHub), we receive the information that provider shares with us.
Job Application Data
All job applications, notes, company research, and related content you add to Owtra is stored securely and is only accessible by you.
Usage Data
We collect basic analytics about how you use Owtra — pages visited, features used, and session duration. This helps us improve the product. We do not sell this data.
Payment Information
Payment details are processed by our payment provider (Dodo Payments). We store only a subscription reference ID — we never have access to your full card details.
How We Use Your Information
To provide the service
Your data powers the core Owtra experience: tracking applications, generating AI insights, and storing your research.
To communicate with you
We send transactional emails (password reset, billing receipts) and, if you opt in, product updates and tips. You can unsubscribe from marketing emails at any time.
To improve the product
Aggregated, anonymized usage data helps us understand which features are most valuable and where to invest our time.
Data Sharing
We do not sell your data
We will never sell, rent, or trade your personal information to third parties for their marketing purposes.
Service providers
We work with a small number of trusted providers (Supabase for database, Resend for email, Dodo Payments for billing). Each is bound by strict data processing agreements.
Legal requirements
We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Owtra, our users, or the public.
Data Retention & Deletion
Your data, your control
Premium users can delete their data at any time, instantly. Free users retain data for 30 days after account closure, after which it is permanently deleted.
Export your data
You can export all your application data in CSV format at any time from your account settings.
Security
How we protect your data
We use industry-standard encryption in transit (TLS 1.3) and at rest. Access to production systems is restricted to authorized personnel only. We conduct regular security reviews.
Cookies
What we use
We use essential session cookies to keep you logged in and preference cookies to remember your settings (e.g. dark mode). We do not use advertising cookies or third-party tracking.
Your Rights
Access, correction & deletion
You have the right to access the personal data we hold about you, correct any inaccuracies, and request deletion. Submit requests via our contact page and we will respond within 30 days.
GDPR & CCPA
If you are in the EU or California, you have additional rights under GDPR and CCPA respectively, including data portability and the right to opt out of any data processing. Contact us to exercise these rights.
Changes to This Policy
How we notify you
If we make material changes to this policy, we will notify you by email and post a notice on the app at least 14 days before changes take effect. Continued use after that date constitutes acceptance.
Questions about this policy? Contact us and we'll respond within 2 business days.