Legal

Privacy Policy

Last updated: April 2026

The short version: ReTrack stores your job list and nothing else. We don't
      sell data, serve ads, or track your browsing. Your job list is private to
      you.

What we collect

ReTrack collects only what is necessary to provide the service:

Account information — your Google account email address, used to identify your account. Provided when you sign in with Google.
Job data you save — job title, company name, location, URL, salary (optional), status, and any notes you add. This is data you explicitly choose to save.
Authentication tokens — access and refresh tokens stored locally in your browser (via localStorage or the Chrome extension's storage) to keep you signed in.

What we do not collect

Browsing history or visited URLs outside of job listings you choose to save
Clicks, mouse movements, keystrokes, or any behavioral tracking
Location data (GPS, IP-based location, or region)
Health, financial, or payment information
Personal communications

Chrome extension

The ReTrack Chrome extension reads text from job listing pages only when you click the extension icon. It extracts the job title, company name, location, and salary to auto-fill the save form. It does not run in the background, does not monitor your browsing, and does not transmit page content anywhere except to save a job to your ReTrack account when you explicitly click "Save Job".

How we use your data

Your data is used solely to provide the ReTrack service — displaying your job list, syncing it across your devices, and letting you track your application status. We do not use your data for advertising, analytics sold to third parties, or any purpose unrelated to job tracking.

Data storage

Job data is stored in Supabase, a hosted PostgreSQL database. Each user's data is protected by row-level security — your job list is only accessible with your authenticated session. Supabase infrastructure is hosted on AWS.

Data sharing

We do not sell, rent, or share your personal data with third parties. Data is not transferred to any party except:

Supabase — our database and authentication provider, for storing and serving your job data.
Google — for OAuth authentication only. We receive your email address from Google when you sign in; we do not receive any other Google account data.

Data deletion

You can delete individual jobs from your dashboard at any time. To request full account deletion, email re@rematcha.dev and your data will be permanently deleted within 7 days.

Contact

Questions about this policy? Email re@rematcha.dev or visit re-write.rematcha.dev.