Privacy Policy for Mara AI

Effective Date: June 11, 2025

1. Introduction

Mara AI ("we," "us," or "our") provides an AI-powered recruiting assistant that helps match job candidates with employers ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service, including when you sign in via Google OAuth.

2. Information We Collect

2.1 Information You Provide Directly

  • Google account profile information (name, email address, profile picture) when you sign in via Google OAuth
  • Resume, CV, cover letter, skills, work history, education, and other job-seeker data you upload or type into our platform
  • Employer information, job descriptions, hiring criteria, and feedback you supply
  • Communications, messages, notes, and ratings you enter into our system

2.2 Information Collected Automatically

  • Usage data (pages visited, features used, timestamps)
  • Device and log information (IP address, browser type, operating system)
  • Cookies and similar tracking technologies to personalize your experience and analyze usage

2.3 Google OAuth Scopes

When you authenticate via Google OAuth, we request only the following scopes:

  • email (to identify and contact you)
  • profile (to personalize your experience)

We do not access, store, or use additional Google Drive, Calendar, or Contacts data.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Service
  • Match candidates to job openings based on skills and preferences
  • Send you transactional and promotional communications (with opt-out)
  • Monitor, troubleshoot, and enhance security and performance
  • Comply with legal obligations

4. Disclosure of Information

We may share your personal information with:

  • Employers and recruiters you choose to apply to or communicate with
  • Service providers who perform services on our behalf (e.g., hosting, analytics) under confidentiality agreements
  • Legal and regulatory authorities if required by law or to protect our rights

We do not sell or rent your personal information to third parties.

5. Data Security

We implement administrative, technical, and physical safeguards to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account at any time (see Section 11).

7. Third-Party Services

Our Service may integrate with or contain links to third-party services (e.g., LinkedIn, GitHub). Those services have their own privacy policies and practices, for which we are not responsible.

8. Google API Services Compliance

We adhere to Google's API Services User Data Policy, including the Limited Use requirements. Your Google profile and email are used solely for authentication and service personalization; we do not share them outside the uses described above.

9. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from minors. If we learn we have collected data from a child under 16, we will delete it.

10. International Data Transfers

Your information may be processed and stored in any country where we or our service providers operate. We take steps to ensure that transfers comply with applicable data protection laws.

11. Your Rights and Choices

  • Access and Correction: You can view and edit your profile at any time.
  • Deletion: You may delete your account by contacting us (see Section 13); we will remove your data unless legal obligations require retention.
  • Opt-Out: You may opt out of promotional emails by following the unsubscribe link.
  • Revoke Google Access: Visit your Google Account settings to revoke Mara AI's access.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the new effective date at the top and, where appropriate, via email.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us: privacy@getmara.ai.