1. Data controller and scope

The organization operating JobScoutify is responsible for personal information processed through the Services, in accordance with the laws of its place of establishment. Where applicable law requires identification of a controller, you may contact us as described in Section 15.

This Policy applies to information processed online through the Services (including authenticated areas such as your dashboard, profile, and resume tools). It does not govern offline activities unrelated to the Services unless we say otherwise.

2. Categories of information we collect

Depending on how you use the Services, we may collect or receive:

Account and identity data

If you register or sign in, we may process identifiers such as your name, email address, password (stored in hashed form), account role (for example, user or administrator), and similar account details you provide.

Resume, profile, and career content

Files or text you upload or enter (for example, résumés, CVs, LinkedIn exports, bios, project descriptions, links to GitHub or coding profiles), plus derived structured fields produced by our systems (such as parsed skills, summaries, titles, or suggested job-search queries).

Job search and browsing inputs

Keywords, locations, countries, experience filters, employment types, job descriptions you paste, and similar inputs used to retrieve, filter, or rank job listings and to personalize results.

AI-generated outputs

Outputs returned to your session, such as structured resume fields, cover letters, CV sections, readiness scores, mock interview questions and explanations, LinkedIn optimization suggestions, blog drafts (where applicable), and related text.

Support and communications

Information you submit through contact forms, help/support requests, or email correspondence (for example, name, email, subject, message content).

Technical, usage, and security data

IP address, device and browser type, general location inferred from IP, timestamps, pages or API routes accessed, referring URLs, diagnostic logs, error reports, and similar telemetry needed to operate and secure the Services.

Cookies, local storage, and similar technologies

We use cookies for authentication and core functionality. We may use browser local storage to record cookie / marketing consent choices (for example, whether you accept optional analytics, advertising, or chat-related scripts). Optional third-party scripts (such as advertising or on-site chat) load only in line with those choices where implemented.

Rate limiting and abuse prevention

We may process IP address or a derivative (for example, via Redis / Upstash) to enforce request limits, reduce abuse, and protect infrastructure.

Visit analytics (where enabled)

If we log visits server-side, we may process path, IP, coarse location fields, user agent, and time of access for operational or security purposes.

Please do not submit special categories of personal data (such as government identifiers, health information, or data revealing racial or ethnic origin, political opinions, or trade-union membership) unless strictly necessary and lawful. If you choose to include such information in free-text fields, you understand it may be processed only to provide the feature you invoked and transmitted to our subprocessors as needed for that feature.

3. Sources of information

Information comes from:

• You — when you register, sign in, upload files, complete forms, or otherwise submit content.
• Our systems — when we parse, transform, cache, or generate structured data or documents from your inputs.
• Automatic technologies — cookies, local storage, and similar technologies as described in this Policy.
• Third-party job data providers — when you request job listings, we retrieve data from independent APIs (for example, aggregated employment listings). That data primarily concerns employers and roles; it is not a dossier about you unless you combine it with your own inputs.

4. Purposes and legal bases

We process personal information for:

Providing the Services

Including account creation and login, storing resume profiles and related content, retrieving and displaying job listings, generating AI-assisted documents and scores, delivering mock practice sessions, operating CMS-built pages, and returning results to your browser or app session.

Security, fraud prevention, and integrity

Including monitoring for abuse, enforcing rate limits, investigating suspicious activity, and protecting users and infrastructure.

Product improvement

Including debugging, quality assurance, and understanding feature usage in aggregated or de-identified form where feasible.

Communications

Responding to support requests and sending service-related notices where permitted.

Compliance

Meeting legal obligations and responding to lawful requests.

Where the GDPR or UK GDPR applies, we may rely on performance of a contract, legitimate interests (where balanced against your rights and freedoms), and, where required, consent (for example, for non-essential cookies or certain marketing technologies if we offer them).

5. Artificial intelligence (AI) processing

Certain features send user-provided text, structured fields, or file-derived content to an enterprise AI provider (for example, Anthropic) to produce summaries, scores, questions, explanations, or document drafts. That provider processes data under its agreement with us and, where applicable, as a processor or sub-processor.

You should assume that prompts, uploads, and contextual fields you supply may be processed on provider systems in accordance with their documentation and our contractual safeguards. Do not include passwords, API secrets, financial account credentials, or highly sensitive personal data in prompts or uploads unless you accept the associated risk.

6. Third-party services and recipients

We use vendors and integrations that process information on our behalf or alongside our Services, including:

• Hosting and application platform (for example, Vercel) for running the site and serverless/edge functions.
• Database (for example, PostgreSQL via providers such as Neon) for storing accounts, content, and configuration.
• Cache and rate limiting (for example, Upstash Redis) for performance and abuse prevention.
• Job listing APIs (for example, JSearch via RapidAPI) when you search or browse jobs.
• AI inference (for example, Anthropic) as described in Section 5.
• Object storage (for example, Cloudflare R2 or compatible S3-compatible storage) when you upload files we store for features that require it.
• Email delivery (for example, SMTP / transactional email providers) when we send messages you request or operational emails.
• Security / bot mitigation (for example, Cloudflare Turnstile or similar) on certain forms, where configured.
• Optional advertising (for example, Google AdSense) when you accept marketing cookies and where we enable ad units.
• Optional on-site tools (for example, third-party chat or assistant widgets) when you accept functional cookies, where configured.

Those parties access information only as needed to provide their services and are subject to their own terms and privacy policies. We select vendors with appropriate safeguards, but we do not control their independent practices.

Employers and job boards: Listings come from third parties; we do not control how employers handle applications or personal data. Review each employer's privacy notice before you apply or share personal information.

7. Cookies, local storage, and advertising choices

We use cookies for essential functions such as signed-in sessions (for example, authentication cookies).

We may use local storage to remember cookie consent (for example, your choices about optional analytics, advertising, or chat scripts). You can clear this data through your browser; clearing it may cause consent banners or choices to reset.

For optional advertising, we may load third-party scripts (for example, Google AdSense) only where you have accepted the relevant category in our cookie controls (where implemented) and where the feature is enabled for your environment.

You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent sign-in or core features from working.

8. Retention

We retain information only as long as needed for the purposes described in this Policy, including:

• Account data for the life of your account and a reasonable period thereafter if we must resolve disputes, enforce terms, or comply with law.
• Uploaded content and profiles until you delete them or close your account, subject to backups and legal holds.
• Caches (for example, Redis) for short periods defined by our configuration to improve performance or rate limiting.
• Support tickets and communications for the period needed to respond and maintain records consistent with law.
• Aggregated or de-identified data may be retained without a fixed end date.

Exact retention can depend on product configuration and legal requirements. You may request deletion where applicable; see Section 11.

9. Security

We implement administrative, technical, and organizational measures appropriate to the risk, including encryption in transit where supported, access controls for administrative functions, and vendor review. No method of transmission or storage is 100% secure. You use the Services at your own risk beyond reasonable safeguards.

10. Automated decision-making

We do not use personal information for solely automated decisions that produce legal or similarly significant effects about you within the meaning of the GDPR. AI outputs are assistive; you remain responsible for decisions you make in your job search or career.

11. Your privacy rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or object to certain processing, or to data portability.

Residents of the EEA, UK, or Switzerland may lodge a complaint with a supervisory authority.

California residents (summary). The CCPA (as amended) may grant rights to know, delete, and opt out of certain "sales" or "sharing" of personal information. We do not sell personal information for monetary consideration. We may allow advertising or analytics partners to collect information through cookies or similar technologies in ways that could constitute "sharing" for cross-context behavioral advertising under California law, where those technologies are enabled and you have consented as required. We will not discriminate against you for exercising CCPA rights.

To exercise rights, contact us at the email in Section 15. We may need to verify your identity before responding.

12. International transfers

We may process and store information in the United States and other countries where we or our vendors operate. Where required, we use appropriate safeguards for transfers from the EEA, UK, or Switzerland (such as Standard Contractual Clauses or equivalent mechanisms).

13. Children

The Services are not directed to children under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

14. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date reflects the latest revision. Material changes may be communicated through the Services or by email where appropriate. Continued use after posting constitutes acceptance of the revised Policy where permitted by law.

15. Contact

Privacy and data protection inquiries: privacy@jobscoutify.com

For general information about JobScoutify, see our About page and other legal notices linked in the site footer.