Privacy Policy

When you sign in with Google we receive your email, display name, and profile photo. When you upload a resume we extract the text and store it — the original file is not kept. Job application data you enter (company, title, notes, status) and AI-generated outputs (fit scores, tailored resume, cover letter, interview prep) are stored in your account. Stripe handles billing; we store subscription status but never see your card number. If you connect Google Drive or Notion, we store those OAuth tokens to perform exports you initiate.

Resumes, job notes, and interview-preparation materials may contain personal information and, in some cases, sensitive personal information. Please don't upload information that isn't necessary for your job search. We process this information only to provide the service, generate the AI outputs you request, maintain your account, enforce plan limits, provide support, protect security, and comply with legal obligations.

The landing-page ATS demo runs your resume through our AI in memory and returns the result — nothing is written to our database.

We use privacy-friendly, cookieless product analytics (PostHog) to understand how the app is used in aggregate — which features are used and where people get stuck. It stores a first-party identifier in your browser's local storage (not a cookie), is not used for advertising, and is not shared with or sold to third parties. We also use error monitoring (Sentry) to detect and diagnose crashes. Supabase Auth sets a strictly necessary session cookie to keep you signed in. If Google Analytics is enabled, it sets a first-party analytics cookie (e.g. _ga) to measure aggregate site traffic; Google-signals and ad-personalization tracking are turned off for this cookie, so it is not used to build an advertising profile of you. We set no other advertising or cross-site tracking cookies.

To provide the service, run AI features on your behalf, enforce plan limits, process billing, and respond to support requests. We do not sell your data or use it for advertising. We process your data primarily to fulfill our contract with you and based on our legitimate interest in maintaining platform security.

All AI features are processed by a third-party AI provider (Anthropic). Your resume, job descriptions, and related inputs are sent to this provider to generate the output you request, which is returned to you. Under the provider's commercial terms, your content is not used to train its models, and we make no independent training use of your content. The provider may retain content for a limited period for security, abuse detection, and legal-compliance purposes, consistent with its applicable terms.

Signing in with Google gives us your email, display name, and profile photo. If you connect Google Drive, we request only the narrow drive.file scope — access is limited to files you create or open with Job Search Hub, never your existing Drive contents — and we store an OAuth token solely to perform the exports you initiate. We do not sell Google user data, use it for advertising, or use it to train any AI or machine-learning models. You can revoke access anytime from your Google Account permissions or by disconnecting the integration in Job Search Hub.

Calendar export produces a standard calendar file (.ics) or link that you download — it does not connect to Google Calendar or send any data to Google.

When you use features to research interviewers or companies, you are strictly responsible for ensuring you have a legitimate right to process any third-party personal data you input. The name you enter is sent to our AI provider which searches publicly available web content; we do not independently harvest or store third-party profile data beyond the prep notes you choose to save.

We use trusted third-party service providers to operate the platform. We do not sell your data to anyone.

Your data is kept while your account is active. When you delete your account from Settings, we remove your personal data from active systems within 30 days, except limited information we must keep for billing, fraud prevention, security, dispute resolution, or legal compliance. Encrypted backups may retain deleted data for up to 90 days before being overwritten. Rate-limit counters expire within 24 hours. Deleting your account also cancels any active subscription. Billing records may be retained as required by law.

Bright Leap Solutions, LLC is based in the United States. If you access the Service from outside the United States, your information may be processed in the United States and in other countries where we and our service providers operate.

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

You can access, correct, export, or delete your data by emailing support@jobsearchhub.app. We respond within 30 days. EU/UK residents may lodge a complaint with their local data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising.

Material changes will be emailed to registered users at least 14 days in advance.