# Privacy Policy

Passionfruit AI LLC (“Passionfruit,” “we,” “us,” or “our”) provides software and services designed to help individuals manage their job search and career activities (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Passionfruit websites, applications, browser extensions, mobile applications, APIs, integrations, and other Services.

This Privacy Policy describes our information practices. It is a privacy notice and does not itself create a contract between you and Passionfruit. Your use of the Services is governed by the Terms of Service.

## 1. Information We Collect

The information we collect depends on the Services you use and the features you choose to enable.

### Information You Provide

We may collect information you provide directly to Passionfruit, including:

- name, email address, phone number, and other contact information;
- account credentials and authentication information;
- employment history, education, skills, qualifications, certifications, and professional experience;
- resumes, CVs, cover letters, portfolios, and other career documents;
- job-search preferences, desired roles, locations, compensation preferences, and other career preferences;
- job applications, application status, interview information, employer communications, and related records;
- answers you save or provide for employment applications;
- information you provide through customer support, surveys, feedback, or communications with us;
- payment and subscription-related information; and
- information submitted through the Services.

### Sensitive Information

Certain employment workflows may involve information that is considered sensitive under applicable law, including information concerning:

- disability status;
- veteran or military status;
- race or ethnicity;
- gender or gender identity;
- sexual orientation;
- work authorization or immigration-related employment eligibility;
- sponsorship requirements;
- demographic or equal-employment-opportunity information; and
- other legally protected or sensitive characteristics.

Passionfruit processes this information only when you provide it, direct us to process it, or when otherwise permitted by applicable law.

Passionfruit is designed not to infer sensitive application answers where a user has not supplied the necessary information. Sensitive information is not used for advertising.

Passionfruit also does not automatically accept employer terms of service, privacy policies, electronic-signature acknowledgements, certifications, or similar legally consequential declarations on your behalf.

### Information About Job Searches and Applications

When you use job-search and application-management features, we may process information such as:

- jobs viewed, saved, evaluated, or tracked;
- employers and positions;
- job descriptions and application URLs;
- application status and history;
- job-match or evaluation scores;
- interview and follow-up information;
- application form fields and user-directed responses; and
- information necessary to assist with supported application workflows.

### Browser Extension Information

When you use a Passionfruit browser extension, the extension may access information displayed on supported webpages when necessary to provide requested features, such as identifying application fields and assisting you in completing an employment application.

Passionfruit does not use the browser extension to sell your browsing history or build advertising profiles.

The permissions required by a browser extension may be broader than the information actually processed during a particular workflow because browsers require extensions to declare technical permissions in advance.

### Information From Connected Services

If you choose to connect a third-party service, we may receive or process information from that service according to the permissions you grant.

Connected services may include email providers, productivity services, job boards, applicant tracking systems, authentication providers, artificial-intelligence providers, and other integrations.

You control whether to establish supported third-party connections. Your use of a third-party service remains subject to that provider's own terms and privacy practices.

### Device and Technical Information

We may automatically collect limited technical information necessary to operate, secure, troubleshoot, and improve the Services, such as:

- device and browser type;
- operating system;
- application version;
- IP address;
- authentication and session information;
- diagnostic information;
- error and performance data; and
- security and abuse-prevention information.

### Usage and Analytics Information

We may collect information about how the Services are used, including feature usage, workflow completion, system performance, application-processing success or failure, and similar operational information.

We may aggregate or de-identify this information for analytics, product development, research, benchmarking, and service improvement.

Passionfruit does not currently use a third-party analytics vendor for the landing page or application. Operational diagnostics and usage information may be processed through Passionfruit’s own systems and infrastructure providers.

### California Privacy Disclosure

This section supplements the rest of this Privacy Policy for California residents. It describes the categories of personal information Passionfruit has collected, the sources of that information, the business or commercial purposes for which we use it, and the categories of third parties to whom we may disclose it during the preceding 12 months.

| California category | Examples | Sources | Purposes | Categories of recipients |
|---|---|---|---|---|
| Identifiers and California customer-record information | Name, email address, phone number, account identifiers, authentication information | You; connected services | Account creation, authentication, communications, support, security, and service delivery | Cloud infrastructure and storage providers, authentication and communications providers, customer-support providers, and legal or safety recipients |
| Professional or employment-related information | Employment history, education, skills, qualifications, certifications, resumes, applications, interview information, job preferences, and employer communications | You; connected services; supported job-search or application workflows | Job discovery, evaluation, resume and profile tools, application assistance, interview preparation, recommendations, analytics, and user-directed workflows | AI-processing providers, cloud and storage providers, user-directed employers or job platforms, and service providers supporting the Services |
| Commercial information, if paid Services are enabled | Subscription, payment, and transaction information | You; payment providers | Payments, subscriptions, accounting, fraud prevention, and customer support | Payment processors, cloud and storage providers, security providers, and legal or safety recipients |
| Internet, electronic-network, device, and usage information | IP address, browser and device information, session data, jobs viewed or saved, feature usage, workflow completion, diagnostics, and performance data | Your device or browser; your use of the Services; service providers | Operating and securing the Services, troubleshooting, abuse prevention, service measurement, and product improvement | Cloud infrastructure, security and monitoring providers, and other service providers supporting the Services |
| Inferences | Job-match or evaluation scores, recommendations, and similar conclusions derived from information you provide or from your use of the Services | Passionfruit’s analysis of information collected through the Services | Personalization, recommendations, job-search assistance, analytics, and service improvement | Passionfruit and service providers supporting the requested feature |
| Sensitive personal information | Information concerning disability, veteran or military status, race or ethnicity, gender or gender identity, sexual orientation, work authorization, sponsorship requirements, demographic information, or other legally protected characteristics | You; connected services | User-directed employment workflows, application assistance, support, security, and compliance with law | Service providers, AI-processing providers when needed for the requested feature, and user-directed employers or job platforms |

We do not sell personal information or share personal information for cross-context behavioral advertising. We have not sold or shared personal information for cross-context behavioral advertising during the preceding 12 months. We do not use sensitive personal information to infer characteristics or for advertising.

At present, the Passionfruit landing page does not use advertising pixels or third-party behavioral analytics SDKs. Its launch-notification form collects an email address, consent timestamp, and source in Cloudflare D1. Optional or future features, including paid Services, may involve additional categories and recipients described elsewhere in this Privacy Policy and will be reflected in future updates to this disclosure.

California residents may request to know or access personal information, request correction or deletion, request portability of certain information, opt out of sale or sharing where applicable, limit certain uses of sensitive personal information, and appeal a privacy-request decision where required by law. We may verify a request as permitted by law. Passionfruit currently operates exclusively online and has a direct relationship with users of the Services, so **info@passionfruit.buzz** is our designated method for submitting requests to know, delete, or correct personal information. We do not discriminate against California residents for exercising applicable privacy rights.

## 2. How We Use Information

We may use information to:

- provide, operate, maintain, and improve the Services;
- create and manage accounts;
- authenticate users and protect account security;
- provide job discovery, evaluation, tracking, resume, profile, application-assistance, interview, analytics, and related functionality;
- personalize features and recommendations;
- process user-directed workflows;
- synchronize information across supported devices;
- provide notifications and communications;
- process payments and subscriptions;
- provide customer support;
- diagnose technical problems;
- detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
- develop and evaluate new features;
- generate aggregated or de-identified analytics and insights;
- comply with legal obligations and enforce our agreements; and
- carry out other purposes disclosed to you when information is collected.

## 3. Artificial Intelligence

Some Passionfruit features use artificial intelligence, machine learning, or large language models.

Depending on the feature, information necessary to perform a request may be processed by Passionfruit or transmitted to a third-party AI provider. This information may include job descriptions, professional profile information, resume content, application-related information, or other information relevant to the requested function.

Third-party AI providers process information according to their applicable agreements, terms, and privacy policies. Their data-handling practices may differ from ours.

AI-generated evaluations, recommendations, summaries, suggested responses, and other outputs may be incomplete, inaccurate, or inappropriate. Users should review AI-assisted outputs before relying on them.

### Model Training and Development

Passionfruit does not currently use identifiable private user content to train or improve a general-purpose Passionfruit AI model. When a feature sends information to a third-party AI provider, the provider may process that information under its own terms and privacy documentation, including provider-specific retention, abuse-monitoring, and data-sharing settings. Passionfruit intends to use provider API or business offerings, including Codex and Antigravity integrations where available, rather than consumer offerings. We will not intentionally enable a provider data-sharing or model-training program for identifiable private user content without separate affirmative opt-in consent. Users should review the current documentation of the applicable provider.

We may use aggregated or de-identified information to evaluate and improve our systems.

In the future, Passionfruit may propose an optional program that uses identifiable private user content for model training or improvement. We will describe the program, its scope, participating providers, and applicable retention practices in a separate notice and will obtain your separate affirmative opt-in consent before using your identifiable private user content for that purpose. We will not treat general use of the Services as consent to such a program.

## 4. How We Disclose Information

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

We may disclose information in the following circumstances.

### Service Providers

We may provide information to vendors that perform services for us, such as:

- cloud infrastructure and hosting;
- database hosting, including PlanetScale;
- databases and data storage;
- authentication;
- email and communications;
- mobile notifications;
- payment processing;
- analytics and monitoring;
- security;
- customer support; and
- artificial-intelligence processing.

These providers may process information only as necessary to perform their services, subject to their applicable contractual obligations and policies.

### User-Directed Third Parties

When you direct Passionfruit to interact with an employer, job board, applicant tracking system, integration, or other third party, information necessary to perform that request may be transmitted to that third party.

Once information is submitted to an employer or third-party service, that party's privacy practices govern its subsequent processing.

### Legal and Safety Reasons

We may disclose information when reasonably necessary to:

- comply with applicable law, regulation, legal process, or governmental request;
- enforce our agreements;
- protect the rights, property, or safety of Passionfruit, our users, or others;
- detect or prevent fraud, abuse, or security incidents; or
- establish, exercise, or defend legal claims.

### Business Transactions

If Passionfruit is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

## 5. Aggregated and De-Identified Information

We may create aggregated or de-identified information from information collected through the Services.

We may use and disclose aggregated or de-identified information for research, analytics, benchmarking, product development, machine-learning evaluation, business planning, and other lawful purposes.

Where required by law, we will maintain information represented as de-identified in de-identified form and will not attempt to re-identify it except as permitted for validating our de-identification processes or as otherwise allowed by law.

## 6. Job Applications and User Control

Passionfruit provides tools to assist users with job searches and applications. Passionfruit does not act as the applicant and does not make employment applications on a user's behalf.

Users are expected to review application information and submit applications themselves.

Passionfruit does not automatically provide consent to employer terms, privacy notices, certifications, electronic signatures, or other legally consequential declarations on a user's behalf.

Users remain responsible for determining what information they choose to provide to employers and other third parties.

## 7. Cookies, Local Storage, and Similar Technologies

Passionfruit may use cookies, browser storage, device storage, authentication tokens, and similar technologies to:

- maintain sessions;
- remember preferences;
- authenticate users;
- provide application functionality;
- protect security; and
- understand and improve Service performance.

We do not use these technologies to sell personal information or for cross-context behavioral advertising.

You can manage or clear browser and device storage through your browser or device settings. Clearing that storage may sign you out or affect Service functionality.

If our use of these technologies materially changes, we will update this Privacy Policy and provide additional controls where required.

## 8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Privacy Policy.

Retention periods may depend on the type of information, the user's account status, operational requirements, contractual requirements, security considerations, and legal obligations.

Passionfruit currently processes account-deletion and privacy requests manually. When we complete a deletion request, we will delete or de-identify associated personal information from active Passionfruit systems, including databases hosted through PlanetScale, within a reasonable period, except where retention is reasonably necessary to:

- comply with law;
- maintain transaction or accounting records;
- prevent fraud or abuse;
- resolve disputes;
- enforce agreements; or
- protect legal rights.

Information may remain temporarily in backups until those backups are overwritten or expire through our normal retention processes.

We may retain aggregated or de-identified information after account deletion.

Information sent to third-party AI providers or other connected services may also be subject to those providers’ own retention, security, abuse-monitoring, and deletion practices. Passionfruit will use available provider controls and procedures to support deletion requests, but cannot control retention that a provider is legally or operationally required to maintain.

## 9. Your Privacy Choices and Rights

Passionfruit provides users with baseline privacy controls regardless of whether a particular state privacy law applies to Passionfruit.

Subject to appropriate identity verification and applicable exceptions, you may request to:

- access personal information we maintain about you;
- correct inaccurate personal information;
- delete your account and personal information;
- obtain a portable copy of certain information;
- withdraw optional consent; and
- ask questions about our processing of your information.

Depending on where you reside, applicable law may provide additional rights, including rights relating to sensitive personal information, profiling, targeted advertising, sale or sharing of personal information, and appeals of privacy-request decisions.

Passionfruit does not discriminate against users for exercising applicable privacy rights.

To submit a privacy request, contact **info@passionfruit.buzz**.

We may need to verify your identity before completing certain requests.

## 10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, destruction, loss, alteration, or disclosure.

No system, network, transmission method, or storage technology is completely secure. We therefore cannot guarantee absolute security.

You are responsible for protecting your account credentials and for notifying us if you believe your account has been compromised.

## 11. Third-Party Services

The Services may contain links to, integrate with, or interact with third-party websites, applications, job boards, applicant tracking systems, AI providers, and other services.

Passionfruit does not control the privacy practices of independent third parties. You should review their privacy policies before providing information to them.

## 12. United States Service

Passionfruit currently intends the Services for users in the United States and does not currently market the Services as available outside the United States.

Information may be processed and stored in the United States or in other locations where our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in jurisdictions whose data-protection laws differ from those in your location.

## 13. Children

The Services are intended only for individuals who are at least 18 years old.

We do not knowingly provide the Services to or collect personal information through the Services from individuals under 18.

If you believe an individual under 18 has provided personal information to Passionfruit, contact us at **info@passionfruit.buzz**.

## 14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update this Privacy Policy. If a change materially alters how we use personal information, we will provide additional notice as appropriate, such as through the Services or by email.

Where required by law, or where a change materially expands a use that requires consent, we will obtain appropriate consent before applying that use.

## 15. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or Passionfruit's privacy practices may be sent to:

**Passionfruit AI LLC**  
**Email: info@passionfruit.buzz**