Privacy Policy

1. Introduction

JobSentry ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our career platform at jobsentry.co ("Service").

By using JobSentry, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you register and use JobSentry, you provide:

• Account Information: Name, email address, password (encrypted)
• Resume Data: Contact information, work experience, education, skills, certifications, professional summary
• Cover Letter Content: Personalized application materials you create
• Job Application Data: Job descriptions, company names, application status, notes
• Payment Information: Processed securely through Stripe (we do not store full credit card details)
• Profile Settings: Preferences, template selections, subscription tier

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: Browser type, operating system, device type, screen resolution
• Log Data: IP address, access times, referring URLs, error logs
• Session Data: Authentication tokens, session duration
• Cookies: Session cookies, authentication cookies, analytics cookies

2.3 Information from Third Parties

We may receive information from:

• Stripe: Payment confirmation, subscription status, billing information
• Google Gemini: AI model responses for content generation (we do not share your personal data)
• Authentication Providers: If you use social login features in the future

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Generate resumes and cover letters
• Process AI-powered content optimization
• Provide job description analysis and keyword extraction
• Generate interview preparation materials
• Track your job applications
• Export documents to PDF format

3.2 Billing and Payments

• Process subscription payments
• Manage billing cycles and renewals
• Handle refund requests
• Send payment receipts and invoices

3.3 Communication

• Send account verification emails
• Provide customer support
• Send service updates and notifications
• Notify you of subscription changes
• Respond to your inquiries

3.4 Service Improvement

• Analyze usage patterns to improve features
• Monitor and improve AI model performance
• Fix bugs and technical issues
• Develop new features
• Conduct quality assurance testing

3.5 Security and Fraud Prevention

• Detect and prevent fraudulent activities
• Enforce our Terms of Service
• Protect against security threats
• Verify user identity

3.6 Legal Compliance

• Comply with legal obligations
• Respond to lawful requests from authorities
• Enforce our rights and protect our property
• Resolve disputes

4. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who help us operate:

• Stripe: Payment processing (PCI-DSS compliant)
• Google Gemini: AI content generation (job descriptions, keywords sent for analysis)
• Render: Database hosting (PostgreSQL)
• Vercel: Application hosting and infrastructure

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose information if required by law or in response to:

• Court orders or legal process
• Government or regulatory requests
• Protection of our rights and property
• Investigation of fraud or security issues
• Protection of user safety

4.3 Business Transfers

If JobSentry is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and subject to a different privacy policy.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. AI and Data Processing

5.1 AI Content Generation

When you use AI features (cover letter generation, resume optimization, interview prep), we send relevant content to Google Gemini's API:

• Job descriptions you provide
• Resume content you want to optimize
• Keywords and phrases for analysis

Google Gemini processes this data to generate content but does not retain it for training purposes per our agreement.

5.2 Data Minimization

We send only the minimum necessary data to AI providers and do not share personally identifiable information unless required for the specific feature.

6. Data Storage and Security

6.1 Security Measures

We implement industry-standard security measures:

• Encryption: TLS/SSL encryption for data in transit
• Password Security: Bcrypt hashing for stored passwords
• Database Security: Encrypted database connections, access controls
• Authentication: Secure session management with HTTP-only cookies
• Monitoring: Automated security scanning and logging
• Access Control: Role-based permissions, principle of least privilege

6.2 Data Retention

We retain your data for as long as necessary to provide the Service and comply with legal obligations:

• Active Accounts: Data retained while account is active
• Deleted Accounts: Data deleted within 30 days of account closure
• Backup Copies: May remain in backups for up to 90 days
• Legal Requirements: Some data retained longer if required by law
• Anonymized Data: Aggregated analytics retained indefinitely

6.3 Data Location

Your data is primarily stored on servers in the United States (Render - Oregon region). By using the Service, you consent to the transfer and processing of data in the United States and other countries where our service providers operate.

7. Your Privacy Rights

7.1 General Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain data processing activities
• Restriction: Request limitation of data processing

7.2 GDPR Rights (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time
• Right not to be subject to automated decision-making
• Legal basis for processing: Consent, Contract Performance, Legitimate Interests

7.3 California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7.4 Exercising Your Rights

To exercise these rights:

• Email: privacy@jobsentry.co
• Account Settings: Update information directly in your profile
• Delete Account: Use the account deletion option in settings

We will respond to requests within 30 days. Identity verification may be required for security.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality (session management)
• Analytics Cookies: Help us understand how users interact with the Service (opt-out available)
• Preference Cookies: Remember your settings and choices

8.2 Managing Cookies

You can control cookies through browser settings. Note that disabling essential cookies may affect Service functionality.

8.3 Do Not Track

We do not currently respond to "Do Not Track" signals as there is no industry standard.

9. Children's Privacy

JobSentry is not intended for users under 16 years of age. We do not knowingly collect information from children under 16.

If we discover we have collected information from a child under 16, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us at privacy@jobsentry.co.

10. International Data Transfers

JobSentry operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States.

For EEA/UK/Swiss users, we ensure appropriate safeguards:

• Standard Contractual Clauses with service providers
• Adequacy decisions by the European Commission
• Equivalent data protection standards

11. Third-Party Links

The Service may contain links to third-party websites or services not controlled by us. We are not responsible for their privacy practices.

We encourage you to review privacy policies of any third-party sites you visit.

12. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovery
• Report the breach to relevant authorities as required
• Provide information about the breach and remediation steps
• Offer assistance such as credit monitoring if appropriate

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be communicated through:

• Email notification for material changes
• Notice on the Service
• Updated "Last Updated" date at the top

Your continued use after changes indicates acceptance. We encourage you to review this policy periodically.

14. Contact Us

For questions, concerns, or to exercise your privacy rights:

15. Consent

By using JobSentry, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the Service.