Nymbus

Privacy Policy

What we collect

When you create an account, we collect your name, email address, and a hashed password. As you use Nymbus, we store the job application data you enter, including company names, roles, statuses, notes, tags, dates, and any base resume text you save. If you subscribe to Nymbus Arc, Stripe processes your payment information -- we store only your Stripe customer ID, not your card details. If you use AI features, your resume text and job descriptions are sent to Anthropic's API for processing and are not stored by Anthropic. If you sign up with a referral code, we store the code and which user referred you. We do not collect any data beyond what you explicitly provide.

Gmail integration

If you choose to connect your Gmail account, Nymbus uses the Google OAuth 2.0 protocol to request read-only access to your Gmail inbox (scope: https://www.googleapis.com/auth/gmail.readonly). This access is entirely optional and can be revoked at any time from your account settings or from your Google Account permissions page.

When Gmail is connected, Nymbus scans your inbox for emails related to job applications, such as application confirmations, interview invitations, and rejection notices. We read email subjects, sender addresses, and email bodies solely to identify job-related signals and match them to your existing Nymbus job cards. Email content is processed in memory and is never stored on our servers. We store only the resulting metadata: the detected status change (e.g., Applied, Interview, Rejected), the date of the email, the sender name and address, and which job card was updated. This information is displayed to you in your activity log.

Nymbus does not use your Gmail data to train AI models, does not share it with any third party, does not read emails unrelated to job applications, and never sends, modifies, or deletes any emails on your behalf. Your OAuth refresh token is encrypted using AES-256-GCM before being stored in our database and is deleted immediately upon disconnecting Gmail.

Nymbus's use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Chrome extension

The Nymbus browser extension reads your nymbus.pro session cookie solely to verify that you are logged in. It does not read cookies from any other domain, does not track your browsing history, and does not transmit any data except the job details you explicitly choose to save. Job data extracted from job listing pages (title, company, URL) is sent directly to Nymbus servers under your account.

How we use it

Your data is used solely to provide the Nymbus service: displaying your applications, computing your stats, powering AI features, sending onboarding and digest emails, and enabling the features you use. We do not sell, share, or use your data for advertising or any purpose outside of running the app. A public stats page may display aggregated, anonymized metrics (e.g., total applications tracked across all users) -- no personally identifiable information is ever shown publicly.

Emails we send

We send transactional emails required to use the service (email verification, password reset). If you create an account, you may receive a short onboarding sequence over your first week with tips on using Nymbus. If you are an Arc subscriber, you may receive a weekly activity digest. You can opt out of non-transactional emails by contacting us at [email protected].

Payment processing

Payments for Nymbus Arc are processed by Stripe, a PCI-compliant payment processor. We never see or store your full credit card number. Stripe's privacy policy governs how your payment data is handled. You can manage your subscription and payment method through the Stripe billing portal accessible from your account settings.

Analytics and cookies

Nymbus uses Google Analytics (GA4) to understand how visitors use the site, including which pages are visited and how long sessions last. This data is aggregated and not linked to your personal identity. We also use the Meta Conversions API on the server side to measure the effectiveness of any advertising campaigns. No Meta pixel runs in your browser.

When you first visit Nymbus, you will be shown a cookie consent banner. If you accept, Google Analytics is enabled. If you decline, analytics is disabled and no tracking cookies are set. You can change your preference at any time by clearing your browser storage for nymbus.pro.

We use session cookies to keep you logged in. These are strictly necessary and are not subject to the consent banner. No third-party advertising cookies are used.

AI-generated content

Features including resume tailoring, cover letter generation, and job autopsy use Claude by Anthropic to process your input and generate output. AI-generated content may be inaccurate, incomplete, or unsuitable for your specific situation. Always review AI output before submitting it to employers. Nymbus is not responsible for any outcomes resulting from the use of AI-generated content.

Data storage and retention

All data is stored in a PostgreSQL database hosted on Railway. Data is encrypted in transit (TLS) and at rest. Your data is retained as long as your account exists. When you delete your account, your personal data, applications, and AI reports are permanently removed within 30 days. Community posts you authored may remain in anonymized form unless you specifically request removal. Gmail OAuth tokens are deleted immediately upon disconnection.

Age requirement

Nymbus is intended for users who are 18 years of age or older. By creating an account, you confirm that you are at least 18 years old. If we become aware that a user is under 18, we will delete their account and associated data promptly.

Your rights

You have the right to access, correct, or delete your data at any time. To delete your account and all data, use the "Delete my account" option in account settings on the dashboard. For data export requests or any other questions, contact us at [email protected].

Contact

If you have questions or concerns about this policy, email us at [email protected].

← Back to home