Privacy Policy
JobeFlow holds the most sensitive material in a job search: your work history, the resumes you send, what you said in interviews, and which companies rejected you. This policy explains what we do with it in plain terms, and what we will never do with it.
1. What we collect
Information you give us
- Account details — your email address, your name, and a password that we store only as a bcrypt hash (we cannot read it).
- Career Profile — the education, work experience, skills, certifications and projects you enter, or that we extract from a resume file you upload for review.
- Job application content — job descriptions you paste, upload or import; the analysis and match results generated from them; resumes and cover letters generated or edited; application details such as recruiter name, contact and salary information if you choose to record them; your notes and follow-ups.
- Interview practice data — generated questions, your written and spoken answers as transcribed text, coaching tips and feedback.
- Preferences — notification settings, job-discovery schedules and the company job boards you choose to follow.
Information created automatically
- Authentication data — a signed session token (JWT) that expires, issued when you log in.
- Operational logs — standard server logs needed to run and secure the service, including IP address and timestamps.
- Connection tokens — if you connect Google Calendar, the OAuth tokens needed to create and update your interview events.
What we do not collect
We do not store interview audio. Spoken answers are transcribed to text so you can read and correct them, and the recording itself is not retained. We do not currently store payment card details; when billing launches, a third-party payment processor will handle card data and we will update this policy before that happens.
2. How we use it
We use your information only to operate the service you asked for:
- To generate the analysis, resumes, cover letters, interview questions and coaching you request.
- To keep your application pipeline, history and analytics.
- To send the notifications you switched on — follow-up reminders, interview reminders and new-match digests.
- To create the shareable read-only links you generate, with the scope you choose.
- To secure the service, prevent abuse, and fix faults.
- To contact you about your account or material changes to the service.
If you are in a jurisdiction that requires a lawful basis, ours is the performance of our contract with you for operating the service, our legitimate interests in securing and improving it, and your consent where you have given it (for example, optional notifications or connecting a calendar).
3. AI processing
JobeFlow uses third-party AI models to generate text, transcribe speech, synthesise speech and create the embeddings that power semantic search. To do that, the relevant content — for example your profile, a job description, a resume version, or an interview transcript — is transmitted to our AI provider so it can produce the output you asked for.
We send only what the specific feature needs, and only when you trigger it. We do not permit our AI provider to use your content to train their models. Features that do not call AI — your profile, the pipeline board, notes, follow-ups, keyword search — work without any content leaving our systems for that purpose.
4. Who else processes it
We do not sell your information, and we do not share it for advertising. We share it with the service providers below, only to the extent they need it to perform their function for us:
| Provider | Purpose | What it receives |
|---|---|---|
| OpenAI | Text generation, embeddings, speech-to-text, text-to-speech | The content needed for the feature you triggered — profile, job description, resume, or interview transcript |
| Calendar sync, if you connect it | Interview event details (title, time, location or link) | |
| Adzuna | Job search, if enabled | Search keywords and location — not your profile or resumes |
| Greenhouse, Lever | Importing public job postings | The public board identifier you chose — no personal data |
| Email provider | Sending notifications and digests | Your email address and the contents of the message |
| Hosting provider | Running the application and database | Stored data, as infrastructure |
We may also disclose information if we are legally required to, or to protect the rights and safety of our users or the service. If Genexsus Technology LLC is ever acquired or merged, your information may transfer as part of that transaction, and we will tell you before it becomes subject to a different privacy policy.
5. What we never do
- We do not sell your data. Not to recruiters, not to advertisers, not to data brokers.
- We do not use your job search to train AI models, ours or anyone else's.
- We do not share your applications with employers. Nothing leaves your account unless you send it or create a share link yourself.
- We do not apply to jobs on your behalf. The product cannot do it.
6. How long we keep it
We keep your account data for as long as your account exists, because the product's value is the history — which resume you sent, what you were asked, how a search went. Delete your account and we delete the associated data from our live systems within 30 days, except where we must retain something to meet a legal obligation. Backups are overwritten on a rolling cycle.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, delete or restrict the processing of your personal data, and to object to it or complain to a supervisory authority. We extend the core of these rights to everyone regardless of location.
Most of your data is directly editable in the app. For a full export or deletion, email [email protected] from your account address and we will action it within 30 days. Self-serve export and deletion are on our roadmap; until they ship, a person handles each request. We will not charge you for a reasonable request, and we will not require a reason.
8. Security
Passwords are stored as bcrypt hashes and never in readable form. Sessions use signed, expiring tokens. Traffic is encrypted in transit. Access to production data is limited to those who need it to operate the service.
No service can promise perfect security, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and any regulator required, without undue delay.
9. International transfers
We operate from the United States, and our service providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.
10. Children
JobeFlow is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes
We will update this policy as the product changes — adding billing and self-serve deletion will both require it. When a change is material, we will email account holders rather than quietly changing the date at the top.
12. Contact us
Genexsus Technology LLC
[REGISTERED BUSINESS ADDRESS]
[email protected]
Questions about this policy, or a request about your data, both go to the same address and reach a person.