Last updated: November 2, 2026
When you sign up or sign in, we collect your email address to send you a magic link. We store it alongside a timestamp and a hashed IP address at signup.
When you build your profile, we store the resume and career information you enter: work history, education, skills, and cover letter preferences. This is the data Clasp uses to tailor your applications.
When you submit a job, we store the job description you provide and the AI-generated resume and cover letter we produce from it.
We log every AI API call (model used, token counts, cost, and latency) for billing and transparency. These logs are not linked to your name, only to an internal user ID.
If you use the browser extension, it reads only the job listing page you click the button on. It never reads your history, other tabs, LinkedIn, or any page you have not explicitly activated it on.
When you click the Clasp button on a job listing, the extension reads the role, company and job description from that one page. You can edit them before you submit. On LinkedIn and Indeed it reads nothing: you paste the listing yourself.
When you click Tailor, it sends the company, role, job description and the listing's web address to Clasp, so we can tailor your resume and save the job to your tracker. Nothing is sent until you click.
In your browser, the extension stores a sign-in token that connects it to your Clasp account, plus your unsent draft so it isn't lost if you close the panel. Click Disconnect in the panel, or remove the extension, to clear them.
The extension does not use analytics, does not track the pages you visit, and does not run any code downloaded from the internet. We use the data only to provide Clasp's features, and we don't sell it or use it for advertising or credit decisions.
We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.
We never read LinkedIn pages. We never auto-fill forms or take screenshots on your behalf. We never add experience, employers, or skills to your resume that you did not give us.
Your resume and job descriptions are sent to Anthropic (the company behind Claude) to generate tailored output. Anthropic's API does not use API data to train its models by default and deletes it within 30 days, except where legally required. You can read Anthropic's privacy policy at anthropic.com/legal/privacy.
We send you a sign-in link when you request one, and anything you ask us to email you, like a letter from one of our free tools. Once you have an account we also send reminder emails: tips for getting started, applications you tailored but haven't sent, and a follow-up after an interview. You get at most one a day and three a week. Every reminder has an unsubscribe link, and you can turn them off in Settings. Sign-in links still arrive after you unsubscribe. We don't sell or share your email. Resend, the service that delivers our email, is the only other company that sees it.
Clasp runs on Fly.io (infrastructure) with a Postgres database hosted on Neon. Data is stored in the US. Fly.io's privacy policy is at fly.io/legal/privacy-policy.
We use a session cookie to keep you signed in. On our website we use Google Analytics, through Google Tag Manager, to count visits and see which pages people use. It sets its own cookies. We don't use advertising cookies. The browser extension uses no analytics at all.
You can delete your account and all associated data at any time from your account settings. Deletion is permanent and takes effect immediately.
Clasp is open source. You can inspect exactly what data is collected and how it is used in the source code at any time.
Questions? Email john@useclasp.co.