Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to JobCompanion ("we," "our," or "the Platform"), a SaaS job matching and application management platform operated at jobcompanion.app. It governs the collection, processing, storage, and sharing of personal data for all users accessing the Platform from any jurisdiction, including but not limited to the United States, India, and the broader Asia-Pacific (APAC) region.

By creating an account or using any feature of JobCompanion, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. If you do not agree with any part of this policy, you must discontinue use of the Platform immediately.

2. Data We Collect

We collect the following categories of personal data:

2.1 Account and Identity Data

• Full name and email address (collected at registration via email/password or OAuth)
• Authentication credentials (managed securely via Supabase Auth)
• Account creation timestamp and last login metadata

2.2 Resume and Professional Data

• Uploaded resume files (PDF, DOCX, or plain text formats)
• Extracted resume content: work history, education, certifications, and contact details
• Skills, competencies, and professional keywords parsed from your resume
• Job titles, industries, and seniority levels inferred from your profile

2.3 Job Preferences and Application Data

• Preferred job roles, locations, salary expectations, and work arrangements (remote/hybrid/on-site)
• Application history: jobs queued, reviewed, applied to, or dismissed
• Application status tracking data (submitted, interviewing, rejected, offer received)
• User-generated notes and annotations on job listings

2.4 Usage and Analytics Data

• Feature interaction logs (which tools you use, frequency of use)
• Session metadata (browser type, device type, operating system)
• IP address (used for security and fraud prevention, not for profiling)
• Error logs and diagnostic data for platform stability

3. How We Use Your Data

Your data is used exclusively for the following purposes:

• Job Matching: We analyze your resume and preferences to surface relevant job listings from our integrated job data providers. Matching is performed algorithmically using your skills, experience level, and stated preferences.
• AI-Powered Resume Analysis: Your resume content is processed using AI models (including OpenAI APIs) to extract structured data, identify skill gaps, and generate match scores against job descriptions.
• Application Management: We store your application history and status to help you track progress across multiple job opportunities in one place.
• Platform Improvement: Aggregated, anonymized usage data is used to improve matching accuracy, feature relevance, and overall platform performance.
• Security and Fraud Prevention: Session data and IP information are used to detect unauthorized access and protect your account.
• Communications: We may send transactional emails (account confirmation, password reset, application status updates). We do not send unsolicited marketing emails without your explicit consent.

4. Data Storage and Security

4.1 Storage Infrastructure

All user data is stored on Supabase, a PostgreSQL-based cloud database platform with enterprise-grade security controls. Supabase infrastructure is hosted on AWS and complies with SOC 2 Type II standards.

4.2 Encryption

• In Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
• At Rest: Database storage is encrypted at rest using AES-256 encryption managed by Supabase and the underlying cloud provider.
• Resume Files: Uploaded resume files are stored in encrypted object storage with access restricted to authenticated sessions.

4.3 Access Controls

Access to your data is governed by Row-Level Security (RLS) policies enforced at the database level. Only authenticated users can access their own data. Internal team access to production data is restricted and logged.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is limited strictly to the following:

• Supabase: Database and authentication infrastructure provider. Data is processed under Supabase's Data Processing Agreement.
• OpenAI: Resume content and job descriptions may be sent to OpenAI APIs for AI-powered analysis. OpenAI processes this data under their API data usage policies, which prohibit training on API-submitted data by default.
• Job Data Providers: We integrate with public job listing APIs (e.g., RemoteOK, Arbeitnow) to source job data. We do not share your personal data with these providers.
• Legal Compliance: We may disclose data if required by applicable law, court order, or governmental authority, and only to the extent legally required.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information in your profile at any time via the Profile & Preferences section.
• Deletion: Request deletion of your account and all associated data. Upon verified request, we will delete your data within 30 days, subject to legal retention obligations.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for analytics or improvement purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@jobcompanion.app. We will respond within 30 days of receiving a verified request.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records, legal disputes). Resume files are retained only for the duration of your active account unless you explicitly delete them earlier.

8. International Data Transfers

JobCompanion serves users globally, including in the United States, India, and the Asia-Pacific region. Your data may be processed and stored on servers located in the United States. By using the Platform, you consent to the transfer of your data to the United States, which may have different data protection laws than your country of residence. We implement appropriate safeguards (including contractual protections) to ensure your data remains protected in accordance with this policy.

9. Children's Privacy

JobCompanion is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without parental consent, we will delete such data promptly. If you believe a minor has registered on our Platform, please contact us at support@jobcompanion.app.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact and Grievance Redressal

For privacy-related inquiries, data requests, or complaints, please contact our support team:

For users in India, in accordance with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you may also raise grievances with our designated Grievance Officer via the email above.