Privacy Policy

We collect three categories of information:

• Account data — email address, password hash (never the plain password), and basic profile information you provide during onboarding (role preferences, target locations, optional resume).
• Job-search data — the roles we surface for you, the fitment assessments we generate, your pipeline state, outreach drafts, and notes you add. Stored to make the product useful across sessions.
• Usage data — basic logs (which routes you visit, errors we hit) used to keep the service running and debug issues. No third-party ad trackers.

• To qualify roles against your career and surface fitment.
• To send you the Daily Digest and product-related notifications you've opted into.
• To improve the product — patterns across many users (never individual personal information) inform what we build next.
• To meet legal and tax obligations associated with running a paid subscription business.

We do not sell your personal information. We do not share it with advertisers.

PurpleChipMonk is a small business; we use a handful of well-known infrastructure vendors to run the service:

• Supabase — database and authentication (US-hosted).
• Vercel — application hosting and edge networking.
• Anthropic — Claude, the LLM that powers fitment, outreach drafts, and weekly reads. Inputs and outputs are routed through Anthropic's API; per Anthropic's terms, those interactions are not used to train Anthropic's models.
• Stripe — payments and subscription billing. We never see or store your card number.

Each vendor processes data only to the extent needed to provide its piece of the service.

Our primary data store is hosted in the United States. If you use the product from outside the US, your data is transferred here. We rely on standard contractual safeguards for cross-border transfers where applicable.

Account and job-search data are kept for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required for legal, tax, or audit reasons.

• Access or export — email us and we'll send a copy of your data.
• Correct or update — most fields can be edited inside the product; email us for anything you can't reach.
• Delete — email us and we'll permanently remove your account and associated personal data within 30 days.
• Unsubscribe — every product email has an unsubscribe link.

We encrypt data in transit (HTTPS everywhere) and at rest, use row-level security on the database so your records aren't readable by other users, and rotate credentials regularly. No system is perfectly secure; we'll notify affected users promptly if we ever discover a breach involving personal data.

PurpleChipMonk is built for working professionals. We don't knowingly collect data from anyone under 16. If you believe a minor has an account, email us and we'll delete it.

When we change this policy in a meaningful way, we'll update the date at the top and notify active subscribers by email. Minor editorial changes are made silently.

Questions? Reach us at justin@purplechipmonk.com.