Privacy and trust
Your data stays yours.
Your Teleport account holds only your email and sign-in details. Your resume isn't sent anywhere unless you choose to send it, and everything else that leaves your device does so because you turned it on.
Local-first by default
Your profile, resume text, saved jobs, notes, fit scores, resume revisions, chats and company insights are stored in your browser's local extension storage. Job detection and the built-in fit engine run on your device.
- Your free account stores your email and sign-in details only. Passwords are stored as strong one-way hashes; with Google sign-in Teleport never sees your Google password.
- Nothing is sent to Teleport or to recruiters unless you opt in.
- At install, Teleport asks Chrome only for storage and for the identity permission that powers Google sign-in.
What leaves your device, and when
| When you | What is sent | Where |
|---|---|---|
| Create your account or sign in | Your email, plus a password hash or a Google account ID | Teleport cloud |
| Turn on the AI engine with your own key | The job description and your resume or profile text | Directly to the AI provider you chose. Teleport never sees it or your key. |
| Load company insights | The company name | Wikidata, Wikipedia, Google News, and the Greenhouse, Lever and Ashby public job board APIs, after you allow each once |
| Share a job | Only what you choose to include | The channel you pick: a link, email, LinkedIn or X |
| Turn on back up and sync | Your profile, saved jobs, notes, statuses and fit results | Teleport cloud, in your account |
| Also join talent pools | A pseudonymous summary derived on the server | Visible to recruiter customers as described below |
Opt-in back up and sync
Back up and sync is off until you switch it on in Privacy & data. When sync is on, Teleport uploads your profile and saved jobs a few seconds after they change. Turn it off and nothing more is uploaded. Use Delete my account and cloud data to erase what was stored.
Opt-in talent pools
Talent pools are a second, separate opt-in that needs sync. If you join, the server derives a coarse, pseudonymous summary and groups you with similar candidates by role family, seniority band and work mode.
Recruiters can see
Role family, level, years band, top skills and skill levels, coarse region (state or country), work-mode preference, degree level, the kinds of roles you save, and the date you were last active. If you answered them: a work authorization bucket, clearance, availability, salary band, languages, industries, company stages and relocation preference.
Recruiters never see
Your name, email, phone, resume text, employers, exact salary, free-text answers, or individual saved jobs. The one exception is the third opt-in below.
- Minimum pool size. Pools smaller than the privacy threshold are hidden, and searches that match too few people return nothing. The threshold is 3 today.
- Per-recruiter pseudonyms. Each recruiter organization sees a different ID for you, so IDs can't be matched across organizations.
- Contact only with permission. Your name and email are shared with a recruiter only if you turn on "Let recruiters request to contact me", only for pools you are in, and only while it is on.
- Withdraw any time. Turning pools off removes you from future recruiter queries immediately.
- Every recruiter access is logged, and the log is included in your cloud data export.
Export and delete
In Privacy & data you can export your local data as JSON (your AI key is redacted), download your cloud data, delete your account and cloud data, and delete everything Teleport stored in this browser. Under the draft policy, deleted cloud data is erased from active systems immediately and from backups within 30 days.
Security
- Data in transit to Teleport cloud uses HTTPS.
- Passwords are hashed with scrypt, a slow, memory-hard function, and are never stored or logged in plain text. Sign-in attempts are rate-limited, and error messages don't reveal whether an email has an account.
- Google sign-ins are verified on the server against Google's signing keys.
- Sign-in credentials are random, stored on the server only as hashes, and the access tokens issued from them expire after an hour. Signing out or deleting your account revokes them immediately.
- Recruiter API keys are stored hashed, can be revoked, and every use is logged.
- Requests are rate-limited and validated, and the API refuses to serve if its secrets are missing.
Your AI key
The AI engine is optional. Your key is stored only in this browser, is never synced, and is redacted from exports. Requests go straight from your browser to the provider, whose own terms and privacy policy apply.
The privacy policy and terms of use are drafts pending legal review. Questions about the help articles? Start with back up and sync, talent pools and export and delete.