Offboard

Overview

This Privacy Policy explains how Offboard, Inc. ("Offboard," "we," "our," or "us") collects, uses, stores, and discloses information when you use Offboard. It applies to our consumer job-search product, employer-sponsored access workflows, recruiter-facing products, community features, and related websites, applications, and services that link to this policy.

Because Offboard supports different kinds of users, some data practices depend on the role and feature you use. For example, job seekers, employer admins, sponsored employees, and recruiters may see different controls, billing flows, and visibility boundaries.

Information We Collect

Account and identity information

We collect account information such as your name, email address, authentication provider, login credentials for email-password accounts, and related account metadata. If you sign in with Google or Apple, we receive the basic profile data those providers share with us for authentication.

Profile, verification, and contact information

We collect profile information you provide or confirm, including professional details, contact information, career preferences, and other settings. Some features also collect phone-verification or other verification-related information where that workflow is offered.

Career and workspace content

We collect resumes, parsed resume data, cover letters, uploaded documents, notes, applications, interviews, plans, tasks, networking contacts, financial-runway entries, personal-brand materials, AI-generated headshots, layoff-checklist progress, reflection and journal content, AI therapy voice session content, AI-generated outputs, and other career-transition information you choose to create, upload, or store in Offboard.

Community, messaging, and social activity

If you use community or messaging features, we collect posts, replies, direct messages, connection requests, and related profile/display information. Anonymous posts may be shown without your public name, but we still associate that content with your account internally for safety, moderation, and product operation.

Employer-sponsored and recruiter data

If your access is sponsored by an employer, we collect information related to invitations, claims, sponsorship status, workspace membership, billing status, and employer analytics. If you use recruiter or talent-matching features, we may collect recruiter profile data, subscription and unlock history, candidate save activity, and information made available within recruiter workflows.

Integration and billing data

When you connect Google Calendar, Google Drive, or Gmail, we collect the OAuth tokens, connection metadata, and content metadata needed to support those integrations. The Gmail integration is read-only (gmail.readonly); we use it to detect job-search signals such as application confirmations, recruiter outreach, interview invitations, rejections, and follow-ups in your inbox and sent mail. Email bodies are parsed in memory and are not stored; only the structured signals and minimal metadata we derive from them are saved to your account. We do not send, modify, label, or delete any messages in your mailbox, and you can disconnect at any time to revoke access. If you purchase a subscription or your employer or recruiter organization pays for access, we receive billing and transaction metadata from Stripe, such as subscription status, invoice references, and customer identifiers.

Google user data and Limited Use

Offboard's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Gmail, Calendar, and Drive data to provide and improve user-facing features in Offboard. We do not transfer this data to third parties except as needed to provide these features, with your consent, or to comply with applicable law. We do not use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security or abuse investigations, or where required by law.

Technical, device, and usage data

We collect technical and usage data such as session identifiers, page paths, feature events, device type, browser, operating system, screen width, and other activity logs generated when you use the product. Our infrastructure and service providers may also receive standard network and request metadata.

How We Use Information

Authenticate users, manage accounts, and keep the product secure.
Operate consumer, employer-sponsored, recruiter, community, and messaging workflows.
Store, parse, analyze, and transform resumes, documents, and other career materials.
Generate AI-assisted outputs such as planning guidance, document analysis, resume support, voice features, research, and interview-prep content.
Process payments, subscriptions, employer seat purchases, recruiter subscriptions, and billing support.
Send emails, reminders, verification codes, and other service communications.
Support Google Calendar, Google Drive, and Gmail integrations when you enable them, including detecting job-application signals from connected mailboxes.
Provide analytics, product improvement, fraud prevention, abuse prevention, debugging, and support.
Comply with legal obligations and enforce our terms, policies, and security controls.

How We Share Information

With service providers and subprocessors that help us operate Offboard.
With integration partners like Google or Apple when you choose those sign-in or integration flows.
With employers in employer-sponsored programs only within the visibility boundaries described below.
With recruiters if you participate in recruiter or talent-matching features and the relevant workflow exposes your information.
With other users when you post, reply, connect, or message through community features.
When required by law, legal process, or a good-faith belief that disclosure is necessary to protect users, Offboard, or the public.
As part of a merger, acquisition, financing, or similar corporate transaction, subject to applicable confidentiality and legal requirements.

We do not sell personal information for money. We also do not use third-party advertising cookies to share your browsing behavior with advertisers.

Service Providers and Third Parties

Offboard uses third-party infrastructure, payment, communication, and AI providers to operate the service. The providers below reflect the product as implemented today:

Supabase: Database, file storage, sign-in and server functions.
Vercel: Hosts the web app and counts page views without cookies.
OpenAI: AI models for LUMO chat, voice, writing and analysis. Requests are sent with storage turned off.
Firecrawl: Reads uploaded documents and public web pages a member asks about.
ElevenLabs: Voice interview practice and voice input.
Gamma: Builds a one-page profile document when a member asks for one.
Apollo: Finds public contacts at a company a member chooses.
Stripe: Payments: member subscriptions and employer seat purchases.
Resend: Sends email: sign-in, invites, reminders and updates.

These services act only when you connect them to your own account:

Google: Sign-in with Google, and the Calendar, Drive and Gmail connections a member turns on. Data moves only after the member connects their account.
ChatGPT and Claude: AI assistants a member connects on Offboard's consent screen. With read only access they read the member's account. With full access they can also make the changes and use the plan counts the consent screen lists. They can never delete anything.

Our Trust page shows the data each service receives and where our data is stored.

AI Assistants: ChatGPT and Claude

You can use Offboard from ChatGPT and from Claude. What Offboard receives depends on whether you connect your Offboard account.

Without an Offboard account (ChatGPT)

Two Offboard tools in ChatGPT work without an account: layoff deadlines and the job posting check. ChatGPT sends Offboard only what the tool needs, such as your state, your last day of work, your health coverage end date, or a link to a job posting. Offboard uses these details to answer and does not save them to any account.

For each request we keep a usage record: the tool name, the time, the result, and a one-way hash of the anonymous user ID that ChatGPT sends. We use it to apply usage limits and to stop abuse. We cannot turn the hash back into the ID. A job posting check reads the public posting page. We store the result without any link to you and reuse it for 7 days for anyone who checks the same posting.

When you connect your Offboard account

When you connect ChatGPT or Claude, Offboard's consent screen asks you to choose read only or full access. With read only access, the assistant can read your account: your Layoff Plan, tracked jobs and packets, resume and files, paperwork reviews, interviews and notes, network, job preferences, and money picture. When you turn off money in AI answers, a paperwork review reaches the assistant without its amounts. With full access, it can also make the changes the consent screen lists, such as saving your state and layoff dates, and run ghost checks and application packets, which count toward your Offboard plan. It can never delete anything. When an assistant saves your layoff details, it fills only empty answers and never replaces an answer you saved in Offboard.

The assistant works only inside your own account and cannot see other members' data. We record each request with the tool name, the time and the result. You can change the access or disconnect the assistant in Settings at any time.

What the assistant keeps

What you type into ChatGPT or Claude, and the answers Offboard sends back to it, are also handled by the company that runs that assistant, under its own privacy policy. Offboard does not control that data.

Cookies, Browser Storage, and Similar Technologies

Offboard uses a mix of browser storage and lightweight cookies to keep the product working.

Authentication sessions are persisted in localStorage.
Some product preferences, onboarding drafts, walkthrough states, and UI settings are stored in localStorage.
Analytics session IDs and some temporary workflow state are stored in sessionStorage.
A small UI cookie is used to remember sidebar state.

Role-Specific Privacy Boundaries

Employer-sponsored users

If an employer sponsors your access, employer admins can see operational program information such as claim status, sponsorship status, aggregate engagement, and other limited program-level metrics. They do not get access to your private resumes, applications, direct messages, journal content, AI chat history, or other personal career materials through the employer dashboard.

Employers and employer admins

Employer workspace data is isolated by workspace membership. Invite acceptance and sponsorship-claim workflows are email-bound so a mismatched authenticated account cannot accept an invite or claim access for a different email address.

Recruiters and talent-matching workflows

Recruiter features may expose candidate data differently depending on whether a profile is still anonymized, has been unlocked, or is made available through talent-matching settings. Recruiters may see additional profile and contact information after an unlock or other authorized workflow.

Security and Retention

We use technical and organizational safeguards designed to protect the information we process, including authenticated access controls, database access rules, and role-based product boundaries. No system is perfectly secure, and we cannot guarantee absolute security.

We retain information for as long as reasonably necessary to operate the service, comply with law, resolve disputes, enforce agreements, protect users, and maintain legitimate business records. Actual retention can vary depending on the type of data and the product area involved.

Your Choices and Rights

Access and update much of your account, profile, and settings information directly in the product.
Delete your consumer account from settings. Some recruiter or business-account situations may still require support assistance.
Change email preferences from settings or one-click unsubscribe links when available.
Request access, correction, deletion, or portability help by emailing info@offboard.co.
If you are covered by privacy laws such as the CCPA/CPRA or GDPR, request the rights available to you under applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and take additional steps to notify users when appropriate.

Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy request, contact info@offboard.co.