| # Privacy Policy |
|
|
| ## What Data We Collect |
|
|
| | Category | Data | Purpose | Retention | |
| |----------|------|---------|-----------| |
| | Account | Email, name, password hash | Authentication | Until account deletion | |
| | Profile | Skills, experience, education, preferences | Resume generation, job matching | Until account deletion | |
| | Resumes | Resume text, PDF files | Resume building, AI review | Until user deletes | |
| | Applications | Job titles, companies, status, notes | Application tracking | Until user deletes | |
| | Saved Jobs | Job bookmarks, folder assignments | Organization | Until user removes | |
| | AI Interactions | Prompts sent, responses received, token counts | Audit trail, cost tracking | 90 days, then anonymized | |
| | Analytics | Page views, search queries, click events | Product improvement | 30 days, aggregated | |
| | API Keys | Encrypted provider credentials | LLM API access | Until user deletes | |
|
|
| ## What We Do NOT Collect |
|
|
| - Browser fingerprints |
| - Location tracking |
| - Contact lists |
| - Social media data |
| - Third-party cookies |
| - Advertising data |
|
|
| ## Data Processing |
|
|
| ### Local Mode (Ollama) |
| When using Ollama as LLM provider: |
| - **Zero data leaves your machine** |
| - All AI processing happens locally |
| - No external API calls for AI features |
| - This is the default and recommended mode |
|
|
| ### Cloud LLM Mode |
| When using OpenAI/Anthropic/etc: |
| - Resume text, job descriptions, and user queries are sent to the selected provider |
| - Data is processed per the provider's privacy policy |
| - We do not store prompts longer than 90 days |
| - Users explicitly choose to enable cloud providers |
|
|
| ### Scraping |
| - We only scrape publicly accessible job listings |
| - We respect robots.txt |
| - We do not scrape personal profiles or private data |
| - Scraped data is job postings only (title, description, requirements) |
|
|
| ## User Rights |
|
|
| ### Data Export |
| `GET /api/v1/export/profile/json` — Download all your data as JSON |
|
|
| ### Data Deletion |
| `DELETE /api/v1/export/account` — Permanently delete your account and ALL data |
|
|
| ### What Gets Deleted |
| - User record |
| - Profile and preferences |
| - All resumes and cover letters |
| - All applications and tracking data |
| - All saved jobs and bookmarks |
| - All AI artifacts and history |
| - All API keys |
| - All notifications and alerts |
|
|
| Deletion is immediate and irreversible. |
|
|
| ## Third-Party Services |
|
|
| | Service | Data Shared | Purpose | |
| |---------|-------------|---------| |
| | Ollama (local) | Nothing | Local LLM inference | |
| | OpenAI (optional) | Prompts | AI features | |
| | Anthropic (optional) | Prompts | AI features | |
| | Google Gemini (optional) | Prompts | AI features | |
| | Cloudflare R2 (optional) | Files | Resume/document storage | |
| | PostgreSQL (self-hosted) | All app data | Primary database | |
| | Redis (self-hosted) | Cache/queue data | Task queue, caching | |
|
|
| ## Self-Hosting |
|
|
| This is an open-source, self-hostable application. When self-hosted: |
| - You control all data |
| - No data is sent to us |
| - No telemetry or analytics to external services |
| - You are the data controller |
| - Applicable privacy laws depend on your jurisdiction |
|
|
| ## Contact |
|
|
| For privacy questions: privacy@jobportal.dev |
| For data deletion requests: Use the in-app account deletion feature or email above. |
|
|
