Privacy Policy
Covers every app under flockara.com.
What Flockara is
Flockara is the umbrella for Soma Sundar's personal apps. Right now that's Tailorbird (AI resume tailoring, delivered by email) and Job Portal (job listing search). This page covers what each one collects, how it's used, and specifically what Tailorbird does with Google Drive access, since that's linked from Google's own sign-in screen for that app.
Tailorbird
Tailors a resume to a job description using Claude (Anthropic's AI model) and delivers the result by email.
- Account info: name, username, email, and a securely hashed password (the plaintext password is never stored, only a one-way scrypt hash).
- Resume content: whatever you upload or type in, contact details, work history, skills, education. Used only to produce your own tailored output.
- Job descriptions: whatever you paste or upload for tailoring.
- Your own Anthropic API key, if you choose to save one: encrypted at rest under a passphrase you choose. That passphrase is never stored anywhere, so it can't be used to recover the key without you re-entering it.
- Billing/usage records: which jobs you've submitted and their real cost, so the app can show you an accurate spend history.
Who else sees it: Anthropic (api.anthropic.com) processes your resume and job description text to produce the tailored output, see Anthropic's own privacy policy. Your email provider receives the tailored PDF(s) and a summary, since that's how results are delivered. Google Drive is an optional delivery method, covered below. Nobody else, your data is never sold, and never used for anything beyond producing and delivering your own tailored resume.
Google Drive specifically: when Drive delivery is available, Tailorbird uploads your
tailored PDFs, the job descriptions that produced them, and a short report to a folder it
creates in your own Drive, as an alternative to a plain email attachment. This uses Google's
drive.file scope, the narrowest Drive permission Google
offers, which means Tailorbird can only ever see or touch files it creates itself.
It cannot read, list, or modify anything else already in your Drive. Nothing from your Drive
is ever sent anywhere else; the access only flows one way, from Tailorbird's own output into
a folder it made.
How long it's kept: your account, resumes, and run history stay until you ask for them to be removed. Tailored PDFs sit on the server and (optionally) in your own Drive - deleting your account doesn't retroactively delete files already delivered to your inbox or your Drive, since those are already yours.
Job Portal
Searches job postings collected from public company career-site listings, and ranks them against a resume.
- Job postings: sourced only from public applicant-tracking-system endpoints (Ashby, Greenhouse, Lever, SmartRecruiters and similar), nothing private or scraped from behind a login. Descriptions are kept for a limited retention window and never republished elsewhere.
- Resume text for scoring: whatever you paste or upload to match against listings. This is used for that one search and is never written to disk or a database, it rides along with your request and is discarded once the page responds. There is no resume storage to delete, because nothing is stored.
- Account info: you sign in with your Flockara account (an administrator approves access) or an older Job Portal login, with the same securely hashed password scheme as Tailorbird's.
- Download and send activity: which listings you've marked as downloaded or sent to Tailorbird, so your own results show what you already did.
Who else sees it: nobody. Matching a resume against listings is computed locally on the server (a straightforward text-similarity calculation), it never leaves the server, and no third-party AI service is involved in that step at all.
Flockara Apply Assistant (browser extension)
An optional Chrome extension that fills job application forms with answers you prepared and reviewed in Flockara. It runs only when you press its toolbar button, and it never presses an employer's Submit button.
- What it reads: only the application page you are on when you press the button, to find the form's questions. It does not read other tabs, your browsing history, or pages you did not press it on.
- What it fills: your reviewed answers for that application (name, contact details, links, work authorization and the answers you approved) and your tailored resume. Sensitive answers (demographic, disability, veteran and similar) are never sent to the extension, and it never fills passwords, captchas, payment fields or consent boxes.
- What it sends back to Flockara: counts and which kinds of fields were filled (for example "email, high confidence"), never the values. If you press "Send this page's questions to Flockara", it sends the employer's question wording and field types (not your answers) so matching can be improved; email addresses and phone numbers in that text are removed.
- Where it keeps things: the short session for one application is held in the browser's memory and ends when you close the browser, end it in Flockara, or it expires. If you connect a browser for profile mode, that link is stored in the extension, lasts at most 30 days, and can be disconnected from Flockara at any time. Nothing is sold or shared with anyone else.
Deleting your data
Contact [email protected] to have your account and its data removed, for either app.
Questions
Built by Soma Sundar · [email protected] · somasundar.dev