Privacy Policy
Last updated: April 8, 2026
1. Overview
Bamboo (“we”, “our”, or “us”) operates the website at jobbamboo.com and the Bamboo Job Tracker Chrome extension (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using the Service you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2a. Account information
When you create a Bamboo account we collect your email address and a hashed password. We do not collect your name, phone number, or payment information — Bamboo is free.
2b. User preferences
To send you relevant job alerts we store the preferences you configure in Settings: target job title keywords, target companies, preferred locations, job type (full-time / internship), and notification frequency.
2c. Application tracking data
When you log a job application — either manually on the website or via the Chrome extension — we store the job title, company name, job posting URL, application status, and the date the entry was created.
2d. Chrome extension
The Bamboo Job Tracker extension operates only on pages that appear to be job postings (career-related URLs and known applicant-tracking-system domains). On those pages it:
- Reads the page URL, page title / heading text, and structured data (JSON-LD) to extract the job title and employer name.
- Stores your Bamboo authentication token in
chrome.storage.localso you stay logged in between browser sessions. This data lives only on your device and is never transmitted to any server other than Bamboo’s own API. - When you click “Mark as Applied”, sends the job title, company name, and URL to Bamboo’s API to create an application record in your account.
The extension does not read the full content of web pages, collect browsing history, track pages that are not job postings, or share any data with third parties.
2e. Usage data
We use Vercel Analytics to collect aggregate, anonymised page-view data (pages visited, referrer, country). This data contains no personally identifiable information and is used solely to understand product usage.
3. How We Use Your Information
- To create and manage your account and authenticate you.
- To scan job boards matching your preferences and send you email notifications via Resend.
- To display your tracked applications and networking contacts on your dashboard.
- To improve the Service based on anonymised usage patterns.
- To respond to support requests you initiate.
We do not sell your personal data, use it for advertising, or share it with third parties except as described in Section 4.
4. Third-Party Services
We share data with the following sub-processors only to the extent necessary to operate the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database & authentication | Email, hashed password, all stored application data |
| Resend | Transactional email | Email address, job alert content |
| Vercel | Hosting & analytics | Anonymised page-view data, server request logs |
5. Data Retention
We retain your account data for as long as your account is active. You may delete your account at any time by contacting us at the address in Section 9, after which your personal data will be deleted within 30 days except where retention is required by law.
6. Security
All data in transit is encrypted with TLS. Authentication tokens are stored using Supabase’s secure authentication infrastructure. Row-level security policies ensure each user can only access their own data. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your information.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Object to or restrict certain processing.
- Withdraw consent at any time (e.g. unsubscribe from email alerts in Settings).
To exercise any of these rights, contact us at the address below.
8. Children
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy at this URL with a revised “last updated” date. For material changes we will notify you by email.
10. Contact
Questions or requests regarding this Privacy Policy can be sent to: privacy@jobbamboo.com