Privacy Policy
Last updated: August 5, 2026
This Privacy Policy explains how NoSweatKing (“NoSweatKing,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website at nosweatking.com, our browser extension, and related services (together, the “Services”). By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
1. Personal information we collect
We collect the following categories of information.
Information you provide to us
- Account information. When you create an account we collect your email address and authentication credentials or session tokens. We use Supabase to manage authentication; if you sign in through a third party (for example, a Google login), we receive basic profile information from that provider.
- Persona and resume content.To generate answers in your own voice, you provide a “persona” — this may include your resume, work history, projects, skills, education, native language, LinkedIn URL, notes, a voice transcript, and other professional details you choose to share. If you upload a resume file, we extract text from it and store the extracted text, not the original file. This can be sensitive personal information, and we use it only to operate the Services for you.
- Profile photo. If you upload an avatar or profile photo, it is stored with our database/storage provider and may be publicly accessible through the profile-photo URL.
- Payment information. When you add credit, payments are processed by Stripe. We do not store your full card number. We receive limited billing details from Stripe such as the last four digits, card brand, expiration, billing country, and transaction status.
- Communications and support. If you contact us or submit a support request, we collect the contents of your message and any information you include.
Information we collect from your use of the Services
- Interview inputs.When you use the extension, we process question text that you deliberately capture from the active tab by selecting, boxing, or pasting it. If you explicitly enable tab-audio capture, the extension receives audio from that active browser tab so spoken questions can be detected and transcribed. Tab-audio capture may include another person’s voice and other sounds playing in the tab. The extension does not use tab capture to collect video.
- Transcripts and generated content. We process the text produced from tab audio and the answers returned by the AI model. You control whether question-and-answer transcripts are saved to your account. When transcript saving is off, we keep usage metadata but do not add the question or generated answer to your saved account activity.
- Usage and activity data. Account activity such as credit balance and top-ups, number and timing of requests, latency metrics, referrals, and feature usage.
- Device and log data. IP address, browser type, operating system, extension version, timestamps, and diagnostic or error logs generated when you use the Services. We also record limited visit and login analytics, such as event type and time, to understand product usage.
- Cookies and similar technologies. We and our providers use cookies and local storage to keep you signed in, remember preferences, and understand usage. See Cookies below.
Browser extension and phone companion data
- Local extension data. The extension uses Chrome local and session storage for sign-in state, preferences, widget position, optional job or reference context, cached account status, active interview-feed state, pending deliveries, and phone-companion state. Active interview state can temporarily include captured questions, transcripts, and generated answers so the extension can keep an ordered feed and recover from a suspended extension service worker.
- Phone companion data. When you pair another browser or device, we process a pairing code or token, session identifiers, connection status, capture controls, and the questions and answers displayed in the companion feed. Pairing codes normally expire after 30 minutes, companion sessions normally expire after two hours, and the feed is cleared when the interview ends or after the session expires.
- Extension permissions. The extension uses Chrome permissions only for its user-facing interview features: storage for the state described above; activeTab and scripting to open the packaged widget on a tab you choose; tabCapture and offscreen to process user-initiated tab audio; and alarms to maintain and safely end interview and companion sessions. It does not download or execute remote JavaScript or WebAssembly.
Information from other sources
- Referrals. If someone refers you, we may receive your email or a referral code to connect your account to the referral.
- Service providers. We receive information from our payment processor, email provider, authentication provider, support notification tools, and hosting/analytics providers as needed to operate the Services.
2. How we use your information
We use personal information to:
- Provide, maintain, and operate the Services, including generating answers from your inputs and persona;
- Transcribe user-initiated tab audio and keep captured questions in an ordered interview feed;
- Pair and synchronize a temporary phone companion session at your direction;
- Create and manage your account and authenticate you;
- Process payments, manage credit balances and auto-refill, and prevent fraud;
- Provide customer support and respond to your requests;
- Monitor performance, debug, and improve the reliability and speed of the Services;
- Administer referrals and promotions;
- Detect, prevent, and address abuse, security incidents, and violations of our Terms; and
- Comply with legal obligations and enforce our agreements.
We do not sell your personal information, and we do not use your persona, interview inputs, or generated answers to train our own AI models.
3. AI model providers and how your content is processed
To generate answers, we send the captured or transcribed question, your optional instructions and job context, and relevant persona content to third-party AI model providers over their APIs — by default, OpenAI, and, depending on configuration, other providers such as Anthropic. For tab-audio transcription, audio may be sent to the configured transcription provider through our server or through a provider-hosted real-time connection. These providers process the content to return the requested transcription or response and for related security, reliability, and abuse-monitoring purposes.
NoSweatKing does not persist raw tab-audio files after transcription. A raw segment may remain briefly in extension memory while it is being processed or retried. The resulting transcript is handled as described in this Policy. We use AI providers through their commercial or API offerings, under which submitted content is not used to train their general models by default unless we explicitly opt in or configure otherwise. Providers may retain inputs, outputs, and safety or abuse logs for limited periods under their terms, settings, and legal obligations. We encourage you to submit only information you are authorized and comfortable sharing for this purpose.
As of the date of this Policy, OpenAI states that standard API abuse-monitoring logs may be retained for up to 30 days, and Anthropic states that standard API inputs and outputs are deleted from its backend within 30 days, in each case subject to provider settings and exceptions for safety, abuse prevention, or law. See the providers’ OpenAI data controls and Anthropic retention information. Provider practices may change, and their current terms and settings control their processing.
4. How we share your information
We share personal information in the following circumstances:
- Service providers (subprocessors). With vendors who process data on our behalf, including AI model providers (OpenAI, Anthropic), payment processing (Stripe), authentication and database (Supabase), hosting and infrastructure (Vercel), conversion measurement (OpenAI Ads), email delivery (Resend), and support notifications (Telegram).
- Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of NoSweatKing, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
- With your consent or at your direction.
We do not sell or “share” personal information for cross-context behavioral advertising.
Chrome Web Store Limited Use
NoSweatKing’s use and transfer of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use data obtained through extension permissions only to provide or improve NoSweatKing’s disclosed interview-assistance features, maintain their security and reliability, comply with law, and prevent abuse.
We do not use or transfer extension user data for personalized advertising, creditworthiness, lending, or unrelated purposes. We do not permit humans to read interview content except with your explicit consent for support, when necessary for security or abuse prevention, when required by law, or when data is aggregated and de-identified for permitted internal operations.
5. Data retention
We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Resume text, persona fields, a persona voice transcript you choose to provide, and profile photos remain in your account until you update or delete them. Raw tab-audio files are not stored by NoSweatKing after transcription. Question-and-answer transcripts are added to account activity only when transcript saving is enabled; you can delete saved activity at any time. We retain non-content usage records such as request time, credits, capture mode, and performance metadata even when transcript saving is off. Temporary phone-companion feeds expire within the companion session window and are cleared when the interview ends. Local extension preferences may remain in Chrome until you clear them, sign out where applicable, or remove the extension. Billing, security, support, and diagnostic records may be retained longer where needed for legal, accounting, fraud-prevention, security, or support purposes. Our processors may retain data under their own terms and configured retention periods. When information is no longer needed, we delete or de-identify it.
6. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and authenticated APIs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. International data transfers
NoSweatKing is based in the United States, and our providers may process information in the United States and other countries. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
8. Your privacy rights
Everyone
You can access and update your account information, manage or delete saved activity, and close your account at any time from your account settings or by contacting us. You can also opt out of non-essential communications.
EEA, UK, and Switzerland (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Where we rely on consent, you may withdraw it at any time. Our legal bases for processing are performance of our contract with you, our legitimate interests in operating and improving the Services, your consent (where applicable), and compliance with legal obligations. You may also lodge a complaint with your local supervisory authority.
United States (California, Texas, and other states)
Depending on where you live, you may have the right to know the personal information we collect, access or delete it, correct inaccuracies, and obtain a portable copy, and the right not to be discriminated against for exercising these rights. We do not sell your personal information or share it for cross-context behavioral advertising. Residents of California (CCPA/CPRA), Texas (TDPSA), and other states may exercise these rights as provided by applicable law.
To exercise any of these rights, contact us at privacy@nosweatking.com. We will verify your request and respond as required by law. You may use an authorized agent where permitted.
9. Children
The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.
12. Contact us
If you have questions or requests regarding this Policy or your personal information, contact us at:
- Email: privacy@nosweatking.com
- NoSweatKing, 5511 Caprock Summit Dr, Austin, TX 78738, USA