FairPost — Privacy Policy
Last updated: 3 July 2026
Who we are
FairPost ("we", "us", "the extension") is a browser extension that analyses job-description text and provides feedback on inclusivity, EU legal compliance, search discoverability, and overall quality.
The data controller responsible for your personal data is:
Carver Studio, Lda
Rua Conde Santiago de Lobão n.º 59
Portugal
Contact:
privacy@carverstudio.co
If you have any questions about this policy or your data, contact us at privacy@carverstudio.co.
What this policy covers
This policy explains what data FairPost collects, how it is used, who it is shared with, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable national law.
The data we process
1. Job-description text you analyse. When you run an analysis, the job-description text you provide (by pasting it or selecting it on a page) is sent to our processing service and on to our AI provider to generate the analysis and any rewrite. The raw text you submit is processed transiently and is not stored after the request completes. If you use FairPost without an account, no job-ad text is retained at all. If you sign in, a redacted copy of each analysed ad (email addresses and phone numbers removed) is saved to your account together with its results — this powers your analysis history and, where you request one, your compliance audit. It is deleted after 24 months, or earlier on request.
2. Email address and optional information (only if you choose to unlock the rewrite feature). If you choose to unlock the AI-rewritten job ad, we ask for:
- Your email address (required to provide the feature);
- Your company name (required);
- Optionally, your role, team size, and the hiring tool you currently use.
The record we receive alongside this also includes the hiring country
you selected in the extension's settings, the overall score of the ad
you analysed, and — when the ad was detected from a web page — the
website host it was detected on (for example
linkedin.com; never the full page address). We use these
to understand and serve the request better.
You provide this once. We use it to deliver the rewrite feature and, where you have separately agreed, to contact you about FairPost and related products and services that may be of interest.
3. Local settings. The extension stores your
preferences and a record that you have unlocked the rewrite feature
locally in your browser (via chrome.storage). This stays on
your device and is not transmitted to us except as described above.
4. A random install identifier. The extension generates a random identifier (a UUID) when installed and sends it with each request so we can apply per-device rate limits and protect the service from abuse. It is not derived from you or your device, is not linked to your email or any other data, and is used for no other purpose.
5. Anonymous usage statistics. The extension reports which features are used (for example "an analysis succeeded" or "a rewrite was copied") as aggregate daily counts only. These counters contain no identifiers, no job-ad text, and no personal data, and cannot be linked back to you.
We do not collect: your browsing history, the pages you visit, candidate or applicant data, or any special-category personal data. The only page information we record is the website host (never the full address) of a page you explicitly run detection on, as described above.
Why we process it, and our lawful basis
We process your personal data on the basis of your consent (GDPR Article 6(1)(a)), which you give when you submit your email to unlock the rewrite feature and when you separately opt in to be contacted about related products. You can withdraw your consent at any time (see "Your rights" below). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
The free analysis feature requires no account and no personal data — you are never required to consent to anything to use it.
| Purpose | Lawful basis (GDPR Art. 6) |
|---|---|
| Analysing the job-description text you submit | Your consent (Art. 6(1)(a)) |
| Providing the rewrite feature using your email | Your consent (Art. 6(1)(a)) |
| Contacting you about FairPost and related products | Your consent (Art. 6(1)(a)), which you may withdraw at any time |
Who we share data with
We use the following third-party processors to operate FairPost:
- Anthropic — provides the AI model (Claude) that generates the analysis and rewrite. Job-description text you submit is processed by Anthropic to return a result. See Anthropic's privacy terms for how they handle data submitted via their API.
- Vercel — hosts the service that routes your request to the AI provider.
- Supabase (EU region, Frankfurt) — provides account sign-in (the one-time email codes) and stores your account data: profile details you choose to share and, for signed-in analyses, the redacted job-ad text and results described above.
- Upstash — provides rate-limiting and abuse-prevention infrastructure (this processes a short-lived, hashed form of your IP address; the raw address is not stored) and briefly holds lead submissions (for up to 30 days) to deduplicate repeat submissions and retry delivery to our lead store if it is temporarily unreachable.
- Make and Google Sheets — receive and store the email and optional information you submit when unlocking the rewrite feature.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
International transfers
Some of our processors may process data outside the European Economic Area (EEA). Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.
How long we keep data
- Job-description text: the raw text is never retained after your analysis is generated. Without an account nothing is kept; with an account, the redacted copy described above is kept for at most 24 months, or deleted earlier on request.
- Email and optional information: kept for at most 24 months from capture (then deleted), or earlier when you ask us to delete it, or until it is no longer needed for the purpose you gave it for. A temporary delivery buffer additionally holds your submission for up to 30 days (see Upstash above), after which it is removed automatically.
- Local settings: remain on your device until you clear them or uninstall the extension.
Your rights
Under the GDPR you have the right to: access your data; correct it; have it deleted; restrict or object to its processing; data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with your national data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).
To exercise any of these rights, contact privacy@carverstudio.co. You can withdraw consent to being contacted at any time using the unsubscribe link in our emails or by contacting us.
Children
FairPost is a professional tool intended for use by adults in a recruitment context. It is not directed at children and we do not knowingly collect data from them.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the latest version. Material changes will be communicated through the extension or our website.