Privacy Policy

Job Tools operates the website www.jobtools.io and provides AI-assisted career tools including resume building, ATS analysis, cover letter generation, interview preparation, and job search. This Privacy Policy explains what personal data we collect when you use the Service, how we use it, who we share it with, and what rights you have.

For privacy enquiries, contact us at support@jobtools.io.

Account data — collected when you register:

• Email address (required)
• First name and last name (optional)
• Hashed password — we never store your password in plain text
• If you sign in via Google or GitHub OAuth, we receive only the name and email address that your provider shares with us; we do not receive your Google or GitHub password

Professional and resume data — created or uploaded by you:

• Resume files you upload (stored via Cloudinary)
• Resume content you enter or edit: work experience, education history, skills, certifications, projects, awards, volunteer work, contact details (phone, LinkedIn, GitHub, portfolio URLs)
• Cover letters you generate or write
• Job applications you record in the tracker (company name, role, status, notes)
• Job descriptions you paste in for ATS analysis or tailoring

Usage data — collected automatically:

• AI credits used per feature and per session
• Features accessed and frequency of use (anonymised for analytics)
• Server log data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps

Billing data — when you subscribe to Pro:

• Subscription plan and status
• Stripe Customer ID (a reference token, not your card details)
• We do not store your card number, expiry date, or CVV — these are handled entirely by Stripe

We do not sell your personal data. We do not use your resume content or personal data to train AI models. We do not send marketing emails unless you have explicitly opted in.

We share data with the following service providers only to the extent necessary to operate the Service. Each is contractually bound to process data only on our instructions and to maintain appropriate technical and organisational security measures.

• Active accounts: we retain your account data and resume content for as long as your account exists.
• Deleted accounts: when you delete your account, your personal data and resume files are permanently deleted within 30 days. Anonymised usage data (e.g. aggregate feature counts) may be retained indefinitely.
• Billing records: may be retained for up to 7 years to satisfy financial and tax regulations.
• Server logs: retained for up to 90 days for security and debugging purposes.

We use a small number of cookies and browser local storage items strictly for authentication and analytics. See our Cookie Policy for full details including specific names, purposes, and durations.

Depending on where you are located, you may have some or all of the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete data — most account data can be updated directly in Settings.
• Deletion: delete your account and all associated personal data via Settings → Account, or by emailing us.
• Data portability: export your resume content in a standard format.
• Objection: object to processing based on legitimate interest (e.g. analytics).
• Restriction: request that we restrict processing of your data in certain circumstances.
• Withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any right, email support@jobtools.io with “Privacy Request” in the subject line. We will respond within 30 days. We will not discriminate against you for exercising any privacy right.

We protect your data using industry-standard measures:

• All data in transit is encrypted using TLS (HTTPS).
• Passwords are hashed using bcrypt with a cost factor of 12 — they are never stored in plain text.
• Authentication tokens are signed JWTs stored in browser local storage, not accessible to other websites.
• Access to production systems is restricted to authorised personnel only.
• We use Sentry for real-time error monitoring to detect and respond to issues promptly.

No method of internet transmission is 100% secure. If you discover a security vulnerability, please report it responsibly to support@jobtools.io.

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

Job Tools uses service providers based in the United States (OpenAI, Stripe, Cloudinary, SendGrid, Google, GitHub, Sentry). By using the Service, you acknowledge that your data may be transferred to and processed in the United States and other countries whose data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.

We will notify you of material changes to this Privacy Policy by email to your registered address and/or by a notice within the Service at least 14 days before the changes take effect. The effective date at the top of this page reflects the date of the most recent revision.

For any privacy question or to exercise your rights, email support@jobtools.io with “Privacy Request” in the subject line. We aim to respond within 30 days.