Privacy Policy
Privacy Policy
Effective date: [to be set on publish date] · Last updated: 2026-09-11 (draft)
Draft — under legal review.
This policy is a working draft and has not been reviewed by counsel. Items marked “Pending verification” must be confirmed before this page is treated as final, especially given users in 16 countries. This draft is not legal advice.
1. Who we are
AI Job Search is a job-search SaaS product at https://aijobsearch.io.
Pending verification
2. Data we collect
Account data. When you create an account we collect your email address and a password. Authentication is handled by Supabase (GoTrue); passwords are stored as irreversible hashes by the auth provider, never in plain text.
Profile and job-search data. To provide matching, resume tools, and application tracking, we store what you give us: your resume/CV content, work history, target roles and preferences, saved jobs, and application-tracking entries you create.
Pending verification
profiles table and resume storage are not yet confirmed — including whether resumes are stored as files, parsed text, or both.Payment data. Paid plans (Core $29.99/month, Pro $59.99/month) are processed by Stripe. We do not see or store your full card number — card details go directly to Stripe. We store your subscription tier and billing status so the product can enforce entitlements.
Pending verification
Usage and technical data. Our hosting provider (Vercel) generates standard server logs (IP address, pages visited, timestamps, user agent) for security and reliability. Signed-in sessions use cookies/local storage to keep you logged in.
Communications. If you contact us or receive product emails (e.g., new-match alerts), we process your email address and message content to respond.
Pending verification
Analytics. We do not currently claim any product analytics. Analytics tooling (PostHog/GA4) is planned but not confirmed live.
Pending verification
SMS alerts. SMS sending is not confirmed as implemented. The site no longer advertises SMS alerts.
3. How we use your data
- Create and secure your account (authentication, email confirmation).
- Provide the service: job matching, resume tools, application tracking, interview prep.
- Process payments and manage your subscription tier.
- Send service communications (security notices, receipts, match alerts you opted into).
- Keep the service safe and working (fraud prevention, debugging, logs).
- Improve the product in aggregate (only once analytics, if any, is confirmed).
We do not sell your personal data. We do not share your resume or profile with employers or third parties except as described in section 4.
4. Who we share data with
We share data only with the service providers needed to run the product:
- Supabase — database and authentication (account, profile, job-search data).
- Stripe — payment processing (billing details you enter at checkout).
- Vercel — website hosting (technical logs).
Pending verification
We will also disclose data if required by law or to protect the security of the service.
5. International users
The service is offered in 16 countries. Your data is processed on the infrastructure described above, which may be located outside your country.
Pending verification
6. Your rights and choices
You may at any time:
- Access — request a copy of the personal data we hold about you.
- Correct — update your profile information in the product.
- Delete — request deletion of your account and associated personal data, subject to legal retention duties (e.g., tax/invoicing records).
- Object / restrict — ask us to limit certain processing.
- Portability — request your data in a portable format.
Pending verification
7. Data retention
We keep your account and job-search data while your account is active. If you delete your account, we delete or anonymize your personal data, except where we must retain records for legal, tax, or security reasons. Server logs are retained per our hosting provider's defaults.
Pending verification
8. Security
We use industry-standard measures: encrypted connections (HTTPS), hashed passwords via our auth provider, and role-based access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Children
Pending verification
10. Cookies
We use strictly necessary cookies/storage for sign-in sessions and security (e.g., Supabase auth session).
Pending verification
11. Changes to this policy
We will post updates on this page with a revised “Last updated” date.
Pending verification
12. Contact
Pending verification