# Privacy Policy

## What Data We Collect

| Category | Data | Purpose | Retention |
|----------|------|---------|-----------|
| Account | Email, name, password hash | Authentication | Until account deletion |
| Profile | Skills, experience, education, preferences | Resume generation, job matching | Until account deletion |
| Resumes | Resume text, PDF files | Resume building, AI review | Until user deletes |
| Applications | Job titles, companies, status, notes | Application tracking | Until user deletes |
| Saved Jobs | Job bookmarks, folder assignments | Organization | Until user removes |
| AI Interactions | Prompts sent, responses received, token counts | Audit trail, cost tracking | 90 days, then anonymized |
| Analytics | Page views, search queries, click events | Product improvement | 30 days, aggregated |
| API Keys | Encrypted provider credentials | LLM API access | Until user deletes |

## What We Do NOT Collect

- Browser fingerprints
- Location tracking
- Contact lists
- Social media data
- Third-party cookies
- Advertising data

## Data Processing

### Local Mode (Ollama)
When using Ollama as LLM provider:
- **Zero data leaves your machine**
- All AI processing happens locally
- No external API calls for AI features
- This is the default and recommended mode

### Cloud LLM Mode
When using OpenAI/Anthropic/etc:
- Resume text, job descriptions, and user queries are sent to the selected provider
- Data is processed per the provider's privacy policy
- We do not store prompts longer than 90 days
- Users explicitly choose to enable cloud providers

### Scraping
- We only scrape publicly accessible job listings
- We respect robots.txt
- We do not scrape personal profiles or private data
- Scraped data is job postings only (title, description, requirements)

## User Rights

### Data Export
`GET /api/v1/export/profile/json` — Download all your data as JSON

### Data Deletion
`DELETE /api/v1/export/account` — Permanently delete your account and ALL data

### What Gets Deleted
- User record
- Profile and preferences
- All resumes and cover letters
- All applications and tracking data
- All saved jobs and bookmarks
- All AI artifacts and history
- All API keys
- All notifications and alerts

Deletion is immediate and irreversible.

## Third-Party Services

| Service | Data Shared | Purpose |
|---------|-------------|---------|
| Ollama (local) | Nothing | Local LLM inference |
| OpenAI (optional) | Prompts | AI features |
| Anthropic (optional) | Prompts | AI features |
| Google Gemini (optional) | Prompts | AI features |
| Cloudflare R2 (optional) | Files | Resume/document storage |
| PostgreSQL (self-hosted) | All app data | Primary database |
| Redis (self-hosted) | Cache/queue data | Task queue, caching |

## Self-Hosting

This is an open-source, self-hostable application. When self-hosted:
- You control all data
- No data is sent to us
- No telemetry or analytics to external services
- You are the data controller
- Applicable privacy laws depend on your jurisdiction

## Contact

For privacy questions: privacy@jobportal.dev
For data deletion requests: Use the in-app account deletion feature or email above.