← Back to Lamr
Privacy Policy
This describes what Lamr collects, why, and who else sees it. Lamr exists to help you apply to jobs, not to sell your data, and it doesn't.
1. What we collect
| Data | Why |
|---|---|
| Email & password | Account authentication |
| Master résumé, candidate profile | Source material for tailored documents |
| Job descriptions, application notes, tracked status | The application tracker itself |
| Generated résumés & cover letters (PDFs) | Stored so you can re-download or edit later |
| Usage & credit activity | Billing accuracy and abuse prevention |
| Payment details | Handled entirely by Stripe. Lamr never sees your card number |
| Anonymous marketing-site visits | Aggregate pageviews, referrers, campaign tags, approximate region, and device/browser type so we can understand which pages and channels work |
2. Who else processes it
We use a small number of infrastructure providers to run the Service. None of them use your data for their own purposes beyond providing the service we've contracted them for:
- Anthropic: processes the job description and résumé content you submit, to generate tailored drafts and prep questions.
- Supabase: hosts our database, authentication, and file storage (résumé/cover-letter PDFs, kept in a private bucket, never public).
- Stripe: processes payments for paid plans.
- Vercel: hosts the public frontend and provides anonymous, cookie-free analytics for the marketing pages.
- PostHog: product analytics. On the marketing pages it counts anonymous visits. In the app it records which screens you open and which actions you take (for example: saved an application, generated documents, changed a status), linked to your account's ID, email address and plan, so we can see how Lamr is used and fix what isn't working. It does not receive what you type, your résumé, your job descriptions or your documents, and we do not record your screen.
- Cloudflare: receives email you forward to your Lamr address, if you turn email updates on, and passes it to Lamr.
- FormSubmit: delivers the email address you voluntarily enter in the marketing-site waitlist form.
- Sentry (if enabled): receives error reports to help us fix bugs; configured to avoid capturing résumé content in error payloads where practical.
3. What we don't do
- We don't sell your data to anyone.
- We don't use your résumé or job-search data to train AI models.
- We don't share your data with employers, recruiters, or job boards.
- There are no third-party advertising trackers on the app.
4. AI agents you connect
You can connect Claude, ChatGPT or another agent to Lamr. When you do, it signs in as you through a consent screen, and can then read and change what is in your Lamr account: your profile, master résumé, portfolio and applications. Lamr sends the agent only what it asks for through that connection.
What the agent's provider does with what it reads is governed by that provider's own terms and privacy policy, not this one. Lamr keeps a note of which kind of agent is connected and when it was last used, so the app can show you. You can remove the connection at any time in the agent's settings.
5. Browser extension
The Lamr extension works on job application pages on Greenhouse, Lever and Ashby, and on platform.lamr.app to sign you in. When you open its side panel on an application, it sends the form's field labels and answer choices and the page's address to Lamr, and receives the values to fill from your saved profile, master résumé and tailored documents. It writes those values into the form in your browser.
On any other site it reads nothing until you ask. When you choose "Save this job to Lamr", it reads that one page's job title, company and description, and saves them to your account. It does not track your browsing and does not submit applications. Your sign-in is stored in the extension on your device and removed when you disconnect.
6. Email you forward
Email updates are off until you turn them on. When you do, Lamr gives you a private address, and mail you forward to it (or set your mail provider to forward) is read by software to work out which application it is about and whether it is a receipt, an interview invitation, an offer or a rejection. Lamr keeps the sender's name, the subject, a short excerpt of up to 280 characters and what it decided. It does not keep the rest of the message or any attachment, and the message is not sent to an AI model. Lamr never connects to your mailbox and cannot read mail you did not forward. Cloudflare receives the forwarded message on our behalf and passes it to Lamr. You can replace the address at any time, which stops mail to the old one, and deleting your account deletes what was kept.
7. Practising interview answers out loud
When you practise an answer out loud, your browser turns your speech into text. In Chrome and Edge that is done by the browser maker's speech service (Google or Microsoft), under their terms, the same as dictation anywhere else in the browser. Lamr never receives or stores audio. It receives the text of your answer and how long it took, keeps your latest attempt with the question so you can see it again, and, if you ask for feedback, sends that text with your résumé and the job description to Anthropic to write it. If you would prefer not to use the microphone, you can type your answer.
8. Cookies & local storage
Lamr uses browser local storage to keep you signed in and remember your preferences (theme, sort order, template choice). This is functional, not advertising tracking. The public marketing pages use Vercel Web Analytics for aggregate measurement; it does not set analytics cookies or track visitors across sites. The app uses PostHog for the product analytics described above; it keeps its identifier in local storage and sets no cookie. There is no ad pixel or cross-site tracking.
9. Data retention & deletion
We keep your data as long as your account is active. If you'd like your account and associated data deleted, email hello@lamr.app and we'll process the request.
10. Security
Data is encrypted in transit (HTTPS) and at rest. Résumé/cover-letter PDFs live in a private storage bucket accessible only through your authenticated session, never via a public link. Access to production data is limited to what's needed to operate the Service.
11. Children
Lamr isn't intended for anyone under 18.
12. Changes
If this policy changes materially, we'll update the date above.
13. Contact
Questions about this policy: hello@lamr.app.