Privacy Policy

LoadstarLab (“we”, “us”, “our”) operates the Vector desktop application (“the App”). This Privacy Policy describes how we collect, use, and protect your information when you use Vector.

1. Data Collection and Storage

Local-first architecture.All user data — including resumes, job preferences, interview debriefs, memory entries, offer details, and application history — is stored locally on your device in a SQLite database within the App’s data directory. We do not operate servers that receive, process, or store your personal data.

What is stored locally:

• Resume content and generated resume variants
• Job listings, scores, and application status
• Context profile entries (stated preferences, inferred patterns, behavioral signals)
• Interview debriefs and prep notes
• Email thread metadata for tracked opportunities
• Draft messages pending your review
• OAuth tokens for connected integrations
• Offer details and pipeline history

What is NOT stored by LoadstarLab:

• We do not collect, transmit, or store any of the above data on our servers.
• We do not have access to your local database.
• We do not operate analytics, telemetry, or tracking services.

2. Email Integration

Scope. When you connect a Gmail account, Vector requests the following permissions:

• gmail.readonly— Read email threads linked to tracked job applications
• gmail.send— Send messages you explicitly approve
• gmail.modify— Apply labels and mark threads
• userinfo.email— Retrieve your email address for display in the App

Boundaries. Vector only accesses email threads that match tracked opportunities by company name, role title, or recruiter email address. It does not access, read, or process unrelated email. This boundary is enforced in application code.

No auto-send. Vector never sends emails automatically. Every outbound message is drafted, presented for your review, and sent only upon your explicit approval.

Revocation.You may disconnect email integration at any time from the App’s Settings page. Disconnecting immediately stops all email access. Stored OAuth tokens are deleted locally.

3. Calendar Integration

Scope. When you connect Google Calendar, Vector requests read-only access (calendar.readonly). It uses this to detect scheduling conflicts with confirmed interviews and identify blocked time periods.

Read-only. Vector never writes to, modifies, or creates events on your calendar.

No storage. Calendar events are queried in real time and are not persisted in the local database.

4. AI Provider Communication

External API calls. Vector sends prompts to the AI provider you configure (e.g., Anthropic, Google, OpenAI) for job scoring, resume tailoring, interview prep, and response drafting. These prompts may include excerpts from your resume, job descriptions, context profile entries, and interview debrief notes.

Your provider, your terms.The AI provider processes these prompts according to their own privacy policy and terms of service. We encourage you to review your provider’s data handling practices.

No intermediary. API calls go directly from your machine to the provider. LoadstarLab does not proxy, log, or intercept these calls.

5. LinkedIn Integration

Vector uses browser automation to search LinkedIn for job listings and submit Easy Apply applications you approve. It stores a session cookie locally to maintain your LinkedIn login. It does not store your LinkedIn password.

6. Security

• All data is stored locally with standard operating system file permissions.
• OAuth tokens are stored in the App’s local data directory.
• No data is transmitted to LoadstarLab servers.
• The App does not include analytics SDKs, tracking pixels, or telemetry.

7. Your Rights

You have full control over your data at all times:

• Access: Your data is stored in a local SQLite database you can open with any database viewer.
• Export: You may copy or export the database file at any time.
• Deletion: Uninstalling the App or deleting its data directory removes all stored data permanently.
• Revocation: You may disconnect email and calendar integrations at any time from Settings.

8. Cookies

Vector is a desktop application and does not use browser cookies for tracking. The only cookies stored are LinkedIn session cookies and Google OAuth tokens, both stored locally and used solely for their stated integration purposes.

9. Children’s Privacy

Vector is not intended for use by individuals under the age of 16. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated through the App’s release notes. Your continued use of Vector after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact us at:

Email: privacy@loadstarlab.com
Website: loadstarlab.com