01Overview
This Privacy Policy explains what Jobzo ("Jobzo", "we", "us") collects when you use our website, applications, and browser extension, why we collect it, who we share it with, and what control you have over it.
The short version: your resume is the product. We process it — including with AI — to build your resumes, portfolios, and case studies, and we use it to make those results better over time. We do not sell it, and we do not publish anything you have not chosen to publish.
This policy sits alongside our Terms of Service. Words defined there have the same meaning here.
02What we collect
Information you give us.
- Account details — name, username, email address, password (stored only as a bcrypt hash), locale, profile picture, and two-factor settings.
- Resume and career content — everything you upload or type: work history, education, skills, projects, publications, references, contact details, links, and any files such as PDF resumes or LinkedIn exports.
- Portfolio and case-study content — copy, images, custom domains, and design settings.
- Job-search data — saved jobs, job descriptions you paste in for tailoring, application statuses, and notes on your tracker board.
- Communications — messages you send to support, and contact-form leads submitted through a portfolio you publish.
Information we collect automatically.
- Usage data — pages and features used, actions taken, timestamps, and error reports.
- Device and connection data — IP address, browser type, operating system, and approximate location derived from IP.
- Analytics on links you share — when someone opens a resume or portfolio link you published, we record the view, referrer, UTM parameters, and coarse location so we can show you those statistics. This is about your visitors, and we surface it only to you.
- Cookies — see the cookies section below.
Information from third parties. If you sign in with Google, GitHub, or another provider, we receive your name, email address, and profile picture from them. Payment processors tell us your subscription status, but never your full card details.
03How we use your information
We use your information to:
- create and maintain your account, and authenticate you;
- provide the features you ask for — parsing an uploaded resume, rendering and exporting PDFs, publishing a portfolio, tailoring a resume to a job description, scoring it, generating case studies, and tracking applications;
- improve the quality of the results the Service produces, for you and for other users — see the AI section below;
- send you transactional email: verification, password resets, security notices, welcome and onboarding messages, and portfolio contact leads;
- show you analytics about links you have shared;
- process payments and manage subscriptions;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- comply with legal obligations and enforce our Terms.
We send marketing email only where you have opted in or where the law otherwise permits it, and every marketing message carries an unsubscribe link. Transactional email about your account cannot be unsubscribed from while the account is open.
04AI processing and model improvement
This is the section covered by the consent box at sign-up.
Your content is processed by AI. To parse a resume, tailor it, score it against a job description, or draft case-study and portfolio copy, we send the relevant parts of Your Content to AI models — our own systems and third-party providers acting as our processors under contract. This is unavoidable: it is how the features work.
We use your content to improve the Service. With your consent, we use Your Content, the inputs and prompts you submit, and how you interact with the results to:
- measure and improve the accuracy of parsing, tailoring, and scoring;
- refine our prompts, ranking logic, templates, and heuristics;
- train, fine-tune, and evaluate AI models used to serve you and other users;
- build aggregated, non-identifying statistics about how the Service performs.
Safeguards. Where content is used for improvement or training rather than to serve your own immediate request, we take reasonable steps to remove or mask direct identifiers first — name, email address, phone number, and postal address. Access to raw content is limited to staff who need it, and is logged.
Third-party AI providers do not train on your data. Our contracts with them prohibit using your content to train their own general-purpose models. They act only on our instructions.
No automated decisions with legal effect. Scores and suggestions the Service produces are informational. Nothing in the Service makes an automated decision that produces a legal or similarly significant effect on you, and no employer decision is made by Jobzo.
Withdrawing consent. Email support@jobzo.ai to opt out of improvement and model training. We will honour it going forward; it cannot undo processing that has already happened, and it does not stop the processing required to run the features you actively use.
05Legal bases for processing
If you are in the UK, EEA, or another region with similar law, we rely on these bases:
- Contract — processing needed to give you the Service you signed up for: your account, your resumes, exports, publishing, and transactional email.
- Consent — using your content to improve the Service and to train or fine-tune AI models, marketing email, and non-essential cookies. You may withdraw consent at any time.
- Legitimate interests — securing the Service, preventing fraud and abuse, understanding aggregate usage, and defending legal claims, where those interests are not overridden by your rights.
- Legal obligation — tax, accounting, and responding to lawful requests.
07Storage, security, and international transfers
Data is stored on infrastructure provided by our cloud hosts and in object storage for files and generated PDFs. Passwords are hashed with bcrypt and never stored in plain text. Traffic is encrypted in transit with TLS. Access to production systems is restricted and authenticated.
No system is perfectly secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as required by law.
Our providers operate in several countries, so your data may be transferred outside the country where you live — including to the United States. Where required, those transfers are covered by appropriate safeguards such as Standard Contractual Clauses.
08How long we keep it
- Account and content — for as long as your account is open.
- After deletion — resumes, portfolios, case studies, and application data are deleted from live systems promptly; residual copies expire from encrypted backups within 30 days.
- Link analytics — retained for up to 24 months, then aggregated or deleted.
- Billing records — retained as long as tax and accounting law requires, typically 7 years.
- Derived and anonymised data — content that has been aggregated or stripped of identifiers is no longer personal data and may be retained indefinitely. This includes improvements already incorporated into a trained model, which cannot be individually reversed.
09Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct anything inaccurate — most of it you can edit directly in the app;
- delete your account and content, from your account settings or by asking us;
- export your data in a portable format — resumes and portfolios can be exported from the app at any time;
- object to or restrict processing based on legitimate interests;
- withdraw consent for AI improvement, model training, and marketing;
- complain to your local data protection authority.
Email support@jobzo.ai to exercise any of these. We respond within 30 days and may need to verify your identity first. We will not discriminate against you for exercising a right.
11Browser extension
The Jobzo Chrome extension ("Jobzo — Job Capture") saves job postings from the page you are viewing to your Jobzo tracker. This section describes exactly what it does with data, and the permissions it asks for.
What runs on the pages you visit. Because job postings live on thousands of different sites, the extension has access to all websites. On each page it runs two lightweight scripts, entirely inside your browser:
- a job detector that checks the page address and a few page elements to decide whether the page is a job posting, and if so shows a small "Job detected" badge;
- a click marker that remembers which job card you clicked on job boards that show many postings side by side, so the right one is captured.
Neither script sends anything anywhere, stores your browsing history, or records what you type. On pages that are not job postings they do nothing visible.
What happens when you capture a job. Only when you open the Jobzo side panel does the extension read the posting in detail — title, company, location, salary, and description — so you can review and edit it. For postings hosted on Greenhouse, Lever, SmartRecruiters, Workable, or Ashby, it may fetch the same posting from that platform's public job-board API to get cleaner data. Nothing is saved to your account until you press Save.
What is sent to Jobzo. The extension talks only to the Jobzo API, and only to: check whether you are signed in, load your tracker columns, check whether the current posting is already on your board, and save the job you chose to save. It authenticates with your existing jobzo.ai sign-in session; it does not store your password or any access token.
What is stored on your device. Using Chrome's local extension storage: jobs you recently captured (up to 500), your settings and theme, the tracker column you last used, sites where you dismissed the badge (remembered for a week), and page-layout hints you teach it for sites it could not read automatically. This stays on your device and is removed when you uninstall the extension.
What the extension does not do. It contains no analytics, advertising, or tracking code. It does not collect browsing history, sell or transfer data to third parties, use data for advertising, creditworthiness, or lending, or use it for anything unrelated to capturing jobs to your tracker.
Permissions it requests:
- Access to all websites — to detect and read job postings on any career site or job board, and to reach the public job-board APIs listed above;
- activeTab, tabs, and scripting — to read the posting in the tab you are capturing from, including postings embedded in frames;
- storage — for the on-device data described above;
- sidePanel — to show the capture panel beside the page.
Chrome Web Store User Data Policy. The use of information received through the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.
12Children
The Service is not for anyone under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact support@jobzo.ai and we will delete it.
13Changes to this policy
We update this policy as the product and the law change; the effective date above always reflects the current version.
For material changes — particularly any expansion of how we use your content for AI — we will notify you by email or in the product before the change takes effect, and where the law requires it we will ask for fresh consent.
14Contact us
Privacy questions, requests, and complaints: support@jobzo.ai.
Anything else: support@jobzo.ai.