Privacy Policy

• Google account info — Your email address and display name, obtained via Google OAuth when you sign in. Used solely to identify your account for rate limiting and license validation.
• LinkedIn profile content — Publicly visible text from the LinkedIn profile page you choose to analyze (name, headline, about section, experience, education, skills, posts, comments). This is sent to our backend for AI processing and is not stored after the analysis is returned.
• License key — If you have a paid license, the key is stored locally in your browser via chrome.storage and sent to our backend to verify access.
• Job description / resume — If you optionally paste a job description or upload a resume, this content is sent to our backend only to enrich the analysis and is not stored.
• Culture values — If you paste company or team culture values, this is sent with the analysis request and is not stored on our servers (it is saved locally in your browser only).
• Usage counts — We store your Google email and a daily request counter in our database to enforce free-tier rate limits. Counts reset daily.

• We do not store LinkedIn profile text, posts, comments, or any scraped content in our database.
• We do not store uploaded resumes or job descriptions.
• We do not collect browsing history or track which profiles you visit beyond the analysis request itself.
• We do not sell, rent, or share personal data with advertisers or data brokers.
• We do not use profile data to train AI models.

• To authenticate you via Google and enforce daily usage limits.
• To perform AI-powered analysis of the LinkedIn profile you explicitly choose to analyze.
• To validate paid licenses and manage team seat access.
• To improve service reliability and debug errors (anonymised server logs only).

VibeCheck only accesses data that is publicly visible on LinkedIn — the same information any logged-in LinkedIn user can see when browsing a profile. The extension does not access private messages, connection data, or any information behind LinkedIn's authentication wall.

Users of VibeCheck are responsible for ensuring their use of the tool complies with LinkedIn's Terms of Service and applicable laws in their jurisdiction. VibeCheck is an AI analysis assistant — the recruiter initiates each analysis manually on a profile they are already viewing.

Under the hiQ Labs v. LinkedIn ruling, scraping publicly accessible data is generally permitted under the Computer Fraud and Abuse Act (CFAA). However, LinkedIn's Terms of Service independently prohibit scraping. By using VibeCheck, you acknowledge this and accept responsibility for your own compliance.

If you are located in the European Economic Area (EEA) or the United Kingdom, the following applies:

• Legal basis for processing: We process your Google account data on the basis of contract performance (to provide the service you signed up for). Profile data is processed transiently on the basis of legitimate interests of the recruiter user.
• Data transfers: Your data may be processed in the United States (Railway hosting, DeepSeek API). We rely on Standard Contractual Clauses where applicable.
• Your rights: You have the right to access, rectify, erase, restrict, or object to processing of your personal data. To exercise these rights, contact us at the address below.
• Data controller: The recruiter using VibeCheck acts as the data controller for any third-party profile data they analyze. Rukai Systems acts as the data processor.

We do not sell personal information. California residents have the right to know what personal information we collect, request deletion, and opt out of sale (not applicable as we do not sell data). To make a request, contact us at the address below.

• LinkedIn profile text and uploaded documents are processed in memory and never written to our database.
• Your Google email and daily usage count are stored in our database. Usage counts reset daily. Account records are retained while your account is active.
• License keys and sign-in state are stored locally in your browser via chrome.storage and never leave your device except for license validation requests.
• To request deletion of your account data, email us at the address below. We will process deletion requests within 30 days.

• DeepSeek API — Profile text is sent to DeepSeek's API for AI analysis. DeepSeek's data processing terms apply to this data. See DeepSeek's Privacy Policy.
• Google OAuth — Sign-in is handled by Google Identity Services. See Google's Privacy Policy.
• Railway — Our backend API is hosted on Railway. See Railway's Privacy Policy.
• Polar — Payment processing for Pro and Team plans. See Polar's Privacy Policy.

All data transmitted between the extension and our backend is encrypted in transit via HTTPS. We do not log or store the content of profile analyses. License keys are transmitted over encrypted connections and are not stored in plaintext.

VibeCheck is intended for professional use by adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of VibeCheck after changes constitutes acceptance of the updated policy.

For privacy-related questions, data deletion requests, or GDPR inquiries, contact us at:
support@rukai-vibecheck.com

Rukai Systems · VibeCheck