Privacy Policy
What Data We Collect
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Account | Email, name, password hash | Authentication | Until account deletion |
| Profile | Skills, experience, education, preferences | Resume generation, job matching | Until account deletion |
| Resumes | Resume text, PDF files | Resume building, AI review | Until user deletes |
| Applications | Job titles, companies, status, notes | Application tracking | Until user deletes |
| Saved Jobs | Job bookmarks, folder assignments | Organization | Until user removes |
| AI Interactions | Prompts sent, responses received, token counts | Audit trail, cost tracking | 90 days, then anonymized |
| Analytics | Page views, search queries, click events | Product improvement | 30 days, aggregated |
| API Keys | Encrypted provider credentials | LLM API access | Until user deletes |
What We Do NOT Collect
- Browser fingerprints
- Location tracking
- Contact lists
- Social media data
- Third-party cookies
- Advertising data
Data Processing
Local Mode (Ollama)
When using Ollama as LLM provider:
- Zero data leaves your machine
- All AI processing happens locally
- No external API calls for AI features
- This is the default and recommended mode
Cloud LLM Mode
When using OpenAI/Anthropic/etc:
- Resume text, job descriptions, and user queries are sent to the selected provider
- Data is processed per the provider's privacy policy
- We do not store prompts longer than 90 days
- Users explicitly choose to enable cloud providers
Scraping
- We only scrape publicly accessible job listings
- We respect robots.txt
- We do not scrape personal profiles or private data
- Scraped data is job postings only (title, description, requirements)
User Rights
Data Export
GET /api/v1/export/profile/json — Download all your data as JSON
Data Deletion
DELETE /api/v1/export/account — Permanently delete your account and ALL data
What Gets Deleted
- User record
- Profile and preferences
- All resumes and cover letters
- All applications and tracking data
- All saved jobs and bookmarks
- All AI artifacts and history
- All API keys
- All notifications and alerts
Deletion is immediate and irreversible.
Third-Party Services
| Service | Data Shared | Purpose |
|---|---|---|
| Ollama (local) | Nothing | Local LLM inference |
| OpenAI (optional) | Prompts | AI features |
| Anthropic (optional) | Prompts | AI features |
| Google Gemini (optional) | Prompts | AI features |
| Cloudflare R2 (optional) | Files | Resume/document storage |
| PostgreSQL (self-hosted) | All app data | Primary database |
| Redis (self-hosted) | Cache/queue data | Task queue, caching |
Self-Hosting
This is an open-source, self-hostable application. When self-hosted:
- You control all data
- No data is sent to us
- No telemetry or analytics to external services
- You are the data controller
- Applicable privacy laws depend on your jurisdiction
Contact
For privacy questions: privacy@jobportal.dev For data deletion requests: Use the in-app account deletion feature or email above.