HuntBoard is an indie product built to make job searching less chaotic. This policy explains what data we collect, why we collect it, and what we never do with it. We've tried to write it plainly — no legalese, no tricks.
Questions? Email us at hello@huntboard.co.
Contents
1. What we collect
We only collect what we need to run the product.
Account information (via OAuth)
When you sign up with LinkedIn, Google, or GitHub, we receive your name, email address, profile avatar, and an OAuth access token. We use this to create your account and authenticate future sessions. We don't request any OAuth scopes beyond what's necessary to identify you.
Job application data
Everything you enter into HuntBoard: companies, roles, application stages, interview notes, compensation details, contacts, documents you upload, and any communications you log. This data is yours — it exists to help you manage your job search.
Waitlist
If you joined the waitlist before launch, we have your email address. We use it only to notify you when HuntBoard is ready. You can ask us to remove it anytime.
Push notification subscription
If you opt in to browser push notifications, we store the subscription endpoint your browser provides. We use it only to send you HuntBoard alerts (e.g., ghosted detection, interview reminders). You can revoke this in your browser settings at any time.
Payment information
Payments are handled entirely by Stripe. We never see your card number, CVV, or full payment details. We store only what Stripe gives back: a customer ID, subscription status, and plan tier — enough to know whether your account is active.
2. Email access (Pro tier)
Email integration is entirely opt-in and only available on the Pro plan. You can use HuntBoard without connecting your email.
HuntBoard can connect to your email to automatically detect application status changes — rejections, interview invites, offers. Here's exactly what that means:
Gmail
We request read access to your Gmail inbox via Google OAuth. We scan incoming messages to look for job-related emails. We also request send access so we can deliver a weekly digest from your HuntBoard account. We do not read emails unrelated to job applications, and we do not store full email content — only structured data we extract (e.g., company name, status keyword, date).
iCloud / IMAP
If you use iCloud Mail, you provide an app-specific password (not your Apple ID password). We connect via IMAP to monitor your inbox for job-related emails on the same basis as Gmail above. The app-specific password is encrypted at rest and is only used to fetch mail — never for anything else.
AI classification
To classify whether an email is job-related and what status it signals, we send short snippets (subject line and a portion of the body) to the Anthropic Claude API. These snippets are processed and discarded — Anthropic does not train on API data by default, and we do not send personally identifiable details beyond what's needed to classify the email. See Anthropic's privacy policy for their data handling.
3. Browser extension
The HuntBoard browser extension lets you save job postings with one click. When you click the extension button on a job listing page, it captures the page title, URL, and job description text — and sends it to your HuntBoard account.
The extension does not run in the background, does not track your browsing history, and does not capture data from pages you don't explicitly ask it to capture. It only activates when you click the button.
4. How we use your data
We use your data to:
- Provide and operate the HuntBoard service
- Automatically detect and update application statuses from your email (if enabled)
- Alert you to ghosting, interview reminders, and follow-up windows
- Send a weekly job search digest (if enabled)
- Process payments and manage your subscription via Stripe
- Send transactional emails (e.g., account confirmation, password reset)
- Respond to support requests you send us
We do not use your data for any other purpose without asking you first.
5. Third-party services
HuntBoard uses a small set of third-party services. Here's what each one gets and why:
Cloudflare
All HuntBoard infrastructure runs on Cloudflare — Workers (backend API), Pages (frontend and landing), D1 (database), and R2 (file storage). Your data is hosted on Cloudflare's platform. Cloudflare may process traffic metadata (IP addresses, request logs) as part of operating the network. See Cloudflare's privacy policy.
Stripe
Stripe handles all payment processing. When you subscribe, you interact directly with Stripe's payment UI. We share only your email address with Stripe so they can create a customer record. Stripe has its own privacy policy.
LinkedIn, Google, GitHub
These are OAuth providers. When you sign in with one of them, they authenticate you and share basic profile data (name, email, avatar) with us. We don't share any of your HuntBoard data back to them.
Anthropic (Claude API)
For Pro-tier email classification, we send short email snippets to the Anthropic Claude API. Anthropic does not train on API usage data by default, and snippets are not stored by them. See Anthropic's privacy policy.
6. What we don't do
We will never:
- Sell your data to third parties
- Share your data with advertisers or ad networks
- Use your data to train AI models
- Background-scrape job boards or websites on your behalf without your instruction
- Store your payment card details (Stripe handles that entirely)
- Read emails you haven't explicitly connected for job tracking
7. Storage and security
All data is stored on Cloudflare's infrastructure (D1 for structured data, R2 for files). Data is encrypted in transit via TLS. OAuth tokens and email passwords are encrypted at rest — they're not stored in plain text.
No security is perfect. If we ever discover a breach that affects your data, we'll notify you promptly.
8. Retention and deletion
We keep your data for as long as your account is active. If you delete your account from Settings, we permanently delete everything: your profile, all job application data, uploaded documents (from R2 storage), email tokens, and notification subscriptions. There's no recovery after deletion.
Stripe's records of your payment history are governed by Stripe's own retention policies and legal obligations.
You can also request deletion of specific data (e.g., a connected email account) without deleting your whole account.
9. Cookies and local storage
HuntBoard doesn't use tracking cookies or third-party analytics cookies.
Your session is managed via a JWT stored in localStorage in
your browser — not a cookie. This token is used to authenticate your
requests to the API and is cleared when you sign out.
We don't use any advertising pixels, fingerprinting scripts, or behavioral tracking tools.
10. Children's privacy
HuntBoard is a professional tool for people in the workforce. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, please contact us at hello@huntboard.co and we'll delete it promptly.
11. Changes to this policy
If we make material changes to this policy, we'll notify you by email (if you have an account) and update the effective date at the top of this page. Minor clarifications may be made without notice.
We won't expand how we use your data without telling you first.
12. Contact
HuntBoard is operated by BPS Enterprises LLC, United States.
For any privacy questions, data requests, or concerns: hello@huntboard.co