Privacy Policy

1. Scope and purposes

Greenroom is a job-preparation product developed and operated by an individual. This policy covers personal information processed for accounts, workspaces, AI, payments, and related services. The operator's role differs from that of a payment provider in a transaction; see the Terms of Service.

We process necessary information to provide the features you use, fulfil transactions, protect accounts, handle support requests, and meet legal obligations. Where consent is required, processing depends on the corresponding notice and authorisation. Withdrawal does not affect lawful processing before withdrawal. An optional feature does not collect additional content for that feature when it is not enabled. Saving and syncing are part of the online service and do not depend on using AI.

2. Information processed

• Workspace content: Resume text and photos, opportunities, job descriptions, stories, notes, interview materials, conversations and text attachments, and generated results you save. Original conversation images are not written to conversation archives; photos saved in a resume are workspace content.
• Account and security information: Sign-in email, account identifiers, sign-in and verification information, IP address, and browser or device information. Google or GitHub sign-in provides account identifiers, email, and basic profile information. Sign-in credentials are protected by security measures.
• Local preferences: Language, theme, layout, and other interface settings.
• Student eligibility information: Account email, institution and region, enrollment and graduation months, eligibility category, review status and validity, and any CHSI code, school-email verification information, or evidence you provide. Evidence is accessible only to authorised personnel for verification and necessary review.
• Referral and reward records: Referral codes, associated accounts, referral relationships, qualifying tasks or purchases, and the issue or reversal of rewards.
• Payment and entitlement records: Products, amounts, currencies, orders and subscriptions, buyer email and region, payment and refund status, and associated entitlements and Credits. Greenroom does not receive or retain card numbers, payment passwords, or payment credentials.
• Usage and operation records: Account, feature used, operation time, completion status, duration, error category, and Credits consumption, balance, and settlement information. These support service delivery, troubleshooting, task recovery, and prevention of duplicate charges. Diagnostic and task-verification records exclude resume, conversation, and audio content.

• Feedback and support content: Explanations you submit, event times, and handling records. Do not provide passwords, verification or recovery codes, or full personal materials unrelated to the issue.

3. Storage and access

• Cloud storage: Cloud providers host account, workspace, and related service data to support online use and cross-device access. Access is restricted to authorised purposes necessary for service delivery, maintenance, or support. Providers are listed in section 9.

• Data on your device: While signed in, the browser keeps a working copy for editing and recovery. Account-content caches are cleared on sign-out. Exports are saved to the location you choose; other applications process them under their own rules.
• Cross-border processing: Cloud accounts, workspaces, and related business data are processed and stored outside mainland China, including Asia-Pacific and United States regions, rather than a single fixed country. Model providers may process data inside or outside China. Sections 4 and 9 identify the functions, information, providers, and privacy contact routes. You may also submit cross-border data requests to our contact address.

4. Transfers and optional features

• Workspace sync and AI: Saving and syncing upload relevant content. AI features send the materials needed for the operation to the relevant model provider. Inputs and results you save follow workspace retention rules. We do not sell job-search content, use it for advertising, or train Greenroom's own models with it. See section 9 for third-party processing information.
• Images and scans: When conversation images, resume images, or scanned PDFs need text recognition, the relevant images or page images are forwarded to a recognition provider. Extracted text may enter subsequent AI requests and saved materials. Original import files and conversation images are not archived as cloud files for these features; separately saved resume photos are an exception. Remove unrelated information and other people's information you have no right to provide before sending.
• Live audio capture: Greenroom uses your selected audio source only after you grant access. Sharing audio in a browser may also request screen access; Greenroom does not analyse, store, or upload shared screen content.
• Speech transcription: Audio is sent to a speech-recognition provider and may include a small set of role-related terms and necessary context to improve recognition. Browser-native recognition is handled by the browser provider. Transcripts used for AI suggestions are sent to the relevant model provider. Greenroom does not retain interview audio; saved questions and answers follow workspace retention rules.
• Resume sharing: Creating a link uploads a read-only snapshot that anyone holding the link can access without signing in. Links expire after seven days by default and may be revoked earlier. Editing a resume does not update an existing snapshot, and deleting a workspace does not automatically revoke independent share links.
• Browser extension: It reads selected inbox or application-status text, or application fields, options, and necessary page structure, and sends required content and personal materials for model processing. It can fill, select, scroll, click necessary intermediate steps, and upload a prepared resume. You handle passwords, verification challenges, acceptance of terms, sensitive fields, and final submission. Recognition may be wrong; review before submitting. Open-tab URLs and titles locate relevant pages locally; the tab list is not uploaded.
• Email drafts: Choosing a mail application or Gmail provides the recipient, subject, and body to that service. This does not authorise Greenroom to read your inbox, send messages automatically, or attach a resume automatically. Review the draft before sending.
• Payment providers: New purchases currently use Creem and are settled in USD. Available payment methods are shown at its checkout. Sensitive payment information goes directly to the provider, which returns order and transaction information for activation, subscription management, refunds, and reconciliation. See the Terms of Service for the relevant roles and refund conditions.
• Student verification: Institution names may be sent to ROR without account identifiers, email, or evidence. Resend delivers school-email codes. Overseas-institution applications are approved automatically after successful code verification when the school-email domain matches and the enrollment dates meet eligibility requirements. CHSI codes verify report validity, institution, dates, and enrollment or qualification status on official pages. Incomplete information, additional verification, or discrepancies lead to human review, not automatic rejection. Report pages are processed only for verification, are not archived, and are not sent to AI. Uploaded evidence is reviewed only by authorised administrators, not ROR, model providers, or payment providers.
• Service emails: Resend handles account verification, password resets, one-time sign-in, email changes, student codes and review notices, eligibility-renewal reminders, and payment-activation and entitlement notices. Necessary recipient details, verification links or codes, order, plan, and Credits information vary by email type. Full resumes, interview content, and payment passwords are not included.

5. Access, correction, deletion, and other requests

• Access and export: “Export workspace data” in Settings creates current-workspace JSON containing resumes, opportunities, stories, and related preparation materials. It excludes separately stored assistant conversations, account information, and payment records. Email us for other personal-information copies or an explanation of processing.
• Correction and withdrawal: Edit workspace information, revoke share links, stop optional features, and revoke corresponding browser or third-party account permissions. Email requests for corrections unavailable in the interface, withdrawal of consent, or restrictions on processing. A feature may become unavailable if processing necessary for it stops.
• Deletion and account closure: Self-service cloud deletion removes workspace data and content covered by that action, clears this device's content, and signs you out. It does not close the account, cancel subscriptions, or erase all separate business records. Export needed materials and revoke active share links first. Email for further deletion or account closure; we will explain information that must be retained by law or to fulfil a transaction and how it will be handled.
• Request handling: Contact privacy@ungetsu.net with your account email, scope, and requested action. We verify necessary account ownership and act, or explain why we cannot, within applicable legal deadlines. We do not request passwords, verification or recovery codes, or unrelated verification materials. You may follow up on a disputed response or complain to the appropriate authority as provided by law.

6. Retention

• Browser working copies remain until sign-out, cloud deletion, or browser-data clearing. Cloud workspace data remains until self-service deletion or an account request is processed; inactivity alone does not trigger deletion.
• Recovery copies are held under restricted access only for recovery and necessary dispute handling, for the shortest period needed for those purposes. Workspace deletion does not immediately erase every copy. Deletion requests include checking the scope of copies and whether continued retention is necessary.
• Payment, refund, entitlement, and Credits settlement records remain as necessary for settlement, disputes, and applicable tax, accounting, security, and anti-fraud obligations. Workspace deletion does not automatically erase them.
• Student eligibility and review records remain during eligibility and afterwards only as needed for disputes and abuse prevention. CHSI codes and evidence files are deleted seven days after review, or no later than 30 days after submission if review remains unfinished. Expired school-email codes are cleared promptly.
• Referral and reward records remain as needed for issue, settlement, and abuse prevention. Account and security records remain as needed for sign-in, account protection, and necessary disputes.
• Share links expire after seven days by default, when their snapshots are cleared. The record used to display an expiry notice is deleted after thirty days. Manual revocation clears the snapshot immediately.
• Feature-operation and task-status records remain for 90 days. Temporary records used only to verify task results are cleared within 24 hours. These records exclude original job-search content; transaction records required by law follow the transaction-retention rules above.
• Feedback remains until handled, for no more than one year. Support records needed by law or to resolve disputes follow the corresponding necessary retention period.

7. Age and information security

The service is intended for individual job seekers aged 18 or over. Do not submit children's personal information or sensitive information unrelated to job preparation. Contact us to investigate and address information collected in error.

We use account permissions, encrypted transport, restricted access, and redacted logs to protect information. No system guarantees absolute security. If an information-security incident occurs, we will take remedial action and provide notices and reports required by applicable law. Greenroom does not use advertising tracking, cross-site tracking, or third-party advertising analytics.

8. Changes

We update the effective date when this policy changes. Material changes to purposes, methods, information categories, or rights will be notified as required; renewed consent will be obtained where required. This revision clarifies individual operation, cloud and export boundaries, email drafts, image recognition, and service emails, and adds request procedures and third-party information.

9. Third parties and contact routes

The following providers currently process relevant information in the listed regions. Links lead to official policies or service pages containing entity and privacy contact information. The applicable provider depends on the transaction or feature used. Contact privacy@ungetsu.net directly for requests concerning Greenroom-initiated processing and cross-border data rights.

Scroll the table horizontally to view all columns.