Privacy & Data Security FAQ

What data do we collect?

JobsLoop collects the following types of information:

Account Information:

• Email address
• Name (optional)
• Password (encrypted and never stored in plain text)
• OAuth tokens (if you sign in with Google)

Resume and Career Content:

• Resume files you upload
• Cover letters you generate
• Job descriptions you paste for analysis
• LinkedIn profile data (only if you authorize import)
• Application tracking information
• Interview preparation notes

Usage Data:

• Features you use and when
• Credit consumption patterns
• Page views and navigation paths
• Device type, browser, and operating system
• IP address and general location (city/country level)

Payment Information:

• Billing address
• Payment method (processed by Stripe, PayPal, or Creem - we never store full card details)
• Transaction history

Why do you collect this data?

• Account information: To authenticate you and provide personalized service
• Resume content: To analyze, optimize, and generate career documents using AI
• Usage data: To improve our features, fix bugs, and understand how users interact with JobsLoop
• Payment information: To process transactions and prevent fraud

Do you use cookies or tracking?

Yes, JobsLoop uses cookies for essential functionality and optional analytics:

Essential Cookies (required):

• Authentication and session management
• Security and fraud prevention
• User preferences and settings

Analytics Cookies (optional):

• Google Analytics for usage patterns
• Feature adoption tracking
• Performance monitoring

You can manage cookie preferences in your account settings or browser settings. Disabling analytics cookies does not affect core functionality.

See our Cookie Policy for details.

How is my resume stored?

Your resume and career documents are stored securely in our cloud infrastructure:

• Encryption: All files are encrypted at rest using AES-256 encryption
• Access control: Only you can access your documents (and our support team with your explicit permission)
• Redundancy: Data is backed up across multiple geographic locations
• Retention: Documents remain in your account until you delete them

Where is my data stored?

JobsLoop uses cloud infrastructure providers with data centers in:

• United States (primary)
• European Union (for GDPR compliance)
• Other regions based on user location

We use industry-leading providers (AWS, Google Cloud) that comply with SOC 2, ISO 27001, and regional data protection regulations.

Who has access to my data?

Access to your personal data is strictly limited:

• You: Full access to all your data
• JobsLoop AI systems: Automated processing to provide features (no human review)
• Support staff: Only with your explicit permission for troubleshooting
• Third-party services: Limited data sharing with service providers (see below)

Do you share my data with third parties?

JobsLoop shares limited data with trusted service providers who help us operate:

Service Providers:

• Payment processors (Stripe, PayPal, Creem): Billing information only
• Cloud hosting (AWS, Google Cloud): Encrypted data storage
• Email services (SendGrid): Email address and transactional messages
• Analytics (Google Analytics): Anonymized usage data (if you consent)
• AI providers (OpenAI, Anthropic): Resume content for analysis (see below)

We NEVER:

• Sell your personal data to advertisers or data brokers
• Share your resume with employers without your permission
• Use your career content for marketing purposes
• Provide your information to third parties for their own use

How do you protect my data?

JobsLoop implements multiple layers of security:

Technical Safeguards:

• 256-bit SSL/TLS encryption for all data transmission
• AES-256 encryption for stored data
• Encrypted database backups
• Multi-factor authentication (MFA) available
• Regular security patches and updates

Organizational Safeguards:

• Strict access controls and role-based permissions
• Employee security training
• Confidentiality agreements for all staff
• Regular security audits and penetration testing
• Incident response plan

Monitoring:

• 24/7 system monitoring for suspicious activity
• Automated threat detection
• Regular vulnerability scans

Can I delete my data?

Yes, you have full control over your data:

Delete Individual Items:

• Go to your dashboard
• Select any resume, cover letter, or document
• Click "Delete" and confirm
• Deleted items are permanently removed within 30 days

Delete Your Entire Account:

1. Go to Account Settings → Privacy & Data
2. Click "Delete My Account"
3. Confirm deletion (this cannot be undone)
4. All data is permanently deleted within 30 days

After account deletion:

• Your resumes, cover letters, and personal data are permanently deleted
• Your subscription is canceled (no refund for remaining time)
• Anonymized usage data may be retained for analytics
• Legal and financial records are retained as required by law

Can I export my data?

Yes, you can download all your data at any time:

1. Go to Account Settings → Privacy & Data
2. Click "Export My Data"
3. You'll receive a download link within 24 hours
4. The export includes all resumes, cover letters, and account information in JSON format

Data exports are available for 7 days before expiring.

What are my CCPA rights? (California residents)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

Right to Know:

• What personal information we collect
• How we use your information
• Who we share it with

Right to Delete:

• Request deletion of your personal information
• We'll comply within 45 days (with some legal exceptions)

Right to Opt-Out:

• Opt out of the "sale" of personal information (note: we don't sell your data)
• Opt out of analytics and non-essential cookies

Right to Non-Discrimination:

• We won't discriminate against you for exercising your rights
• Same service quality and pricing regardless

How to exercise your rights: Email privacy@jobsloop.ai with "CCPA Request" in the subject line. Include your account email and specific request. We'll verify your identity and respond within 45 days.

What are my GDPR rights? (EU residents)

Under the General Data Protection Regulation (GDPR), EU residents have:

Right of Access:

• Request a copy of all personal data we hold

Right to Rectification:

• Correct inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten"):

• Request deletion of your personal data

Right to Restriction:

• Limit how we process your data

Right to Data Portability:

• Receive your data in a machine-readable format

Right to Object:

• Object to processing based on legitimate interests

How to exercise your rights: Email privacy@jobsloop.ai with "GDPR Request" in the subject line. We'll respond within 30 days.

How do I update my privacy preferences?

1. Log in to your account
2. Go to Account Settings → Privacy & Data
3. Adjust your preferences:
   • Marketing emails (opt in/out)
   • Analytics cookies (enable/disable)
   • Data sharing for product improvements
4. Click "Save Changes"

What happens if there's a data breach?

In the unlikely event of a data breach:

1. We'll investigate immediately and contain the breach
2. Affected users will be notified within 72 hours
3. We'll provide details about what data was affected
4. We'll offer remediation steps (password reset, credit monitoring, etc.)
5. We'll notify relevant authorities as required by law

JobsLoop maintains cyber insurance and an incident response plan to handle security events.

How can I report a security issue?

If you discover a security vulnerability:

• Email security@jobsloop.ai immediately
• Include detailed information about the vulnerability
• Do not publicly disclose the issue until we've addressed it
• We'll acknowledge your report within 24 hours

We appreciate responsible disclosure and may offer recognition or rewards for valid reports.

Is JobsLoop appropriate for children?

JobsLoop is not intended for users under 16 years old. We do not knowingly collect personal information from children. If we discover that a child has provided personal information, we'll delete it immediately.

Parents or guardians who believe their child has provided information to JobsLoop should contact privacy@jobsloop.ai.

Can I use JobsLoop from outside the US?

Yes, JobsLoop is available internationally. We comply with data protection regulations in multiple jurisdictions including:

• GDPR (European Union)
• CCPA (California, USA)
• PIPEDA (Canada)
• Privacy Act (Australia)
• LGPD (Brazil)

Your data may be transferred to and processed in countries where our servers and service providers are located. We use standard contractual clauses and other legal mechanisms to ensure adequate protection.

How will I know if your privacy policy changes?

• Material changes will be announced via email
• Notice will be displayed on the website
• You'll be asked to review and accept changes at next login
• Previous versions are archived and accessible

Last updated: January 2026