Privacy Policy

JobFits.ai (“we”, “us”) provides AI-assisted tools for job seekers. This policy explains what we collect, why, and what you can do about it. The data controller is [legal entity name and registered address].

• Account details — your name, email address and password. If you sign in with Google or LinkedIn we receive your name and verified email from them instead of a password.
• Resumes you upload — the file itself and the text we extract from it, including your work history, education, skills and the contact details printed on it.
• Job search information — target roles, locations, salary expectations, job postings you save, and notes you add.
• Documents we generate for you — tailored resumes, cover letters, Job Fit analyses and interview preparation.
• Payment details — handled entirely by Stripe. We store a customer reference and your plan, never your card number.

We record anonymous usage events for the public onboarding flow so we can see where people get stuck. These carry a random per-visit identifier and the name of the screen reached. They contain no IP address, no device fingerprint, no cross-site identifier, and are never linked to your account — including after you sign up.

We also keep security and audit logs of events such as sign-ins and account changes, which do include your IP address.

We use Google Analytics, loaded through Google Tag Manager, to understand how the site is used overall. It sets cookies in your browser and sends Google the pages you visit, your browser and device type, your approximate location and a cookie identifier. It does not receive your resume or your documents.

These cookies are off until you accept them in the cookie banner. Until then, and if you reject them, Google Analytics sets no cookies; it still receives a cookieless signal for each page (with no identifier linking your visits) that Google uses to estimate overall traffic. You can change your choice at any time from Cookie settings at the foot of each page, or on your Account page. Turning them off also removes the Google Analytics cookies already set.

• To build your skills profile and generate documents you ask for.
• To score job listings against your profile.
• To operate your account, take payment, and provide support.
• To keep the service secure and detect abuse.

We do not sell your personal information. We do not use your resume or generated documents to train our own models.

Our legal bases, where required: performing our contract with you, our legitimate interest in operating and securing the service, and your consent where we ask for it. [confirm with counsel for your target markets]

We use the following processors to run the service:

• Anthropic — generates your documents and analyses. Your resume and the job description are sent to their API.
• Stripe — payments and subscriptions.
• Resend — transactional email such as verification and reminders.
• Adzuna and JSearch — job listing search. We send search criteria, not your resume.
• Vercel and Neon — application hosting, file storage and database.
• Sanity — content for our public marketing pages. No user data.
• Google (Analytics and Tag Manager) — measuring how the site is used, as described in section 3.

We may also disclose information where the law requires it, or to protect our rights and the safety of our users.

Our infrastructure runs in [region(s)]. Some processors above may handle data outside your country. Where that applies, transfers rely on [transfer mechanism, e.g. Standard Contractual Clauses].

We keep your information for as long as your account is open. If you delete your account we permanently remove your profile, uploaded resumes and generated documents — this is a hard delete, not an archive, and it cannot be undone.

Some records are kept longer where we are required to: [retention periods for billing and security logs].

You can access, correct, export or delete your information at any time from your Account page — including a full data export and permanent account deletion, without contacting us.

Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to a supervisory authority. [name the relevant authority for your jurisdiction]

Passwords are hashed, access is authenticated on every request, and sensitive endpoints are rate limited. No service can promise perfect security, but we treat resumes as sensitive: they contain your full employment history and contact details.

The service is not intended for anyone under [minimum age], and we do not knowingly collect their information.

If we make a material change we will update the date at the top of this page and, where appropriate, tell you directly. Questions about this policy go to [privacy contact email].