Privacy Policy

JobCompanion ("we", "us", or "our") operates an AI-assisted job search and application platform currently in controlled beta. This Privacy Policy describes how we collect, use, store, and protect information when you use our services at jobcompanion.app.

By using JobCompanion, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.

When you upload a resume, we store the file securely in our cloud storage (Supabase Storage). Your resume is used exclusively to:

• Extract skills, experience, education, and role history for AI analysis
• Generate job match scores against available job listings
• Pre-fill application drafts when you initiate an AI-assisted workflow
• Display your resume history within your account

Resume files are retained until you delete them or request account deletion. See the Deletion Requests section for details.

JobCompanion uses OpenAI's API to power resume analysis, job matching, cover letter generation, and career coaching features. When you trigger an AI feature:

• Relevant portions of your resume and job description are sent to OpenAI's API for processing
• OpenAI processes this data under their API data usage policies (not used for model training by default)
• AI outputs are returned to our servers and stored in your account
• No raw resume files are sent to OpenAI — only extracted text and structured data

See our full Cookie Policy for details.

We use the following third-party services to operate the platform:

• Supabase — database, authentication, and file storage (EU/US data centers)
• OpenAI — AI processing for resume analysis and content generation
• Google Analytics — anonymized usage analytics (optional)
• Adzuna / Jooble — job listing data (when API keys are configured)
• Vercel / hosting provider — application hosting and CDN

Each provider operates under their own privacy policy. We select providers that offer appropriate data protection standards. We do not sell your data to any third party.

• All data is stored in Supabase with row-level security (RLS) policies ensuring users can only access their own data
• Passwords are hashed using bcrypt — never stored in plain text
• Resume files are stored in private Supabase Storage buckets with access controls
• All data transmission uses HTTPS/TLS encryption
• API keys and secrets are stored as environment variables, never in source code
• We conduct periodic security reviews as part of our beta operations

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access — request a copy of the personal data we hold about you
• Right to Rectification — correct inaccurate or incomplete data
• Right to Erasure — request deletion of your account and associated data
• Right to Portability — receive your data in a machine-readable format
• Right to Restriction — limit how we process your data in certain circumstances
• Right to Object — object to processing based on legitimate interests
• Right to Withdraw Consent — where processing is based on consent

To exercise any of these rights, contact us at privacy@jobcompanion.app. We will respond within 30 days.

You can request deletion of your account and data at any time by:

• Emailing us at privacy@jobcompanion.app with subject "Account Deletion Request"
• Using the account deletion option in Settings (when available)

Upon a verified deletion request, we will:

• Delete your account credentials and profile data within 30 days
• Remove all uploaded resume files from storage
• Delete AI-generated content associated with your account
• Anonymize or delete activity logs and usage records
• Retain only data required by law or for fraud prevention (see Data Retention)

• Active account data is retained for the duration of your account
• Resume files are retained until deleted by you or upon account deletion
• Activity logs are retained for 12 months for security and debugging purposes
• Anonymized analytics data may be retained indefinitely
• Billing and transaction records (when applicable) are retained for 7 years per legal requirements
• Safety and audit logs related to automation may be retained for up to 24 months

See our full Data Retention Policy for details.

JobCompanion is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has created an account, please contact us at privacy@jobcompanion.app and we will promptly delete the account.

JobCompanion is operated from India. If you access our platform from outside this jurisdiction, your data may be transferred to and processed in countries with different data protection laws.

We rely on Supabase's data processing agreements and standard contractual clauses for international data transfers. By using JobCompanion, you consent to this transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice.

Continued use of JobCompanion after changes are posted constitutes your acceptance of the updated policy.

Questions about this policy? Contact us at privacy@jobcompanion.app.