Privacy Policy
Summary: JobsLoop processes career and recruiting data to provide the product. Resumes, job descriptions, interview notes, compensation details, uploaded documents, and AI prompts may contain personal or sensitive data. Do not upload information you are not authorized to process.
Contents
1. Scope and Roles
This Policy applies to JobsLoop websites, web apps, APIs, support channels, and related services. When JobsLoop determines why and how personal data is processed, we act as a controller. When an employer, recruiter, school, agency, or enterprise customer instructs us to process data for its own workflow, we may act as a processor or service provider under a separate agreement.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email, name, avatar, user ID, authentication provider, role, locale, timezone, login events | You, Supabase Auth, OAuth providers |
| Career content | Resumes, CVs, job descriptions, notes, saved jobs, comparisons, interview prep, salary details, career goals | You upload, paste, import, or generate it |
| Recruiting data | Candidate profiles, screening criteria, interview kits, employer notes, job requirements, recruiter workspace data | Recruiter or enterprise users |
| AI request data | Prompts, context, outputs, model, provider, token usage, credit charges, request IDs, error logs | Generated when you use AI features |
| Payment data | Checkout IDs, provider customer IDs, payment status, amount, currency, invoices, refunds, tax-related records | Stripe, PayPal, Creem, and our systems |
| Device and usage data | IP address, browser, device, extension version, pages viewed, feature events, diagnostics, security events | Automatically collected |
| Support data | Messages, screenshots, attachments, troubleshooting context, account identifiers | You or your organization |
3. Purposes and Legal Bases
- Provide the Services: authenticate users, store workspaces, run AI workflows, parse files, sync settings, and return outputs.
- Perform contracts: create orders, process payments, manage subscriptions, allocate credits, provide support, and handle refunds.
- Security and integrity: prevent abuse, detect fraud, enforce limits, monitor service health, investigate incidents, and protect users.
- Product improvement: understand feature usage, debug failures, improve prompts and workflows, and evaluate model performance. We minimize content where feasible.
- Legal compliance: meet accounting, tax, sanctions, consumer protection, employment, privacy, and lawful request obligations.
For EEA/UK users, legal bases may include contract performance, consent, legitimate interests, legal obligations, and, where applicable, explicit consent for sensitive data you choose to provide.
4. AI Processing and Model Providers
When you use AI features, the information required for that feature may be sent to JobsLoop servers and AI model providers. We may use domestic lower-cost model providers during development and production, and we may later route to OpenAI, Anthropic, Google Gemini, xAI Grok, or other providers when configured.
- Model providers may process prompts and outputs according to their own terms, data processing terms, and abuse monitoring policies.
- We try to minimize input data and may use masking, truncation, or local processing where practical, but no automated masking is perfect.
- Do not submit trade secrets, highly sensitive personal data, third-party resumes, employee records, or candidate data unless you have authorization and a lawful basis.
- Enterprise customers should use a written data processing agreement before processing candidate or employee data at scale.
5. Sharing and Processors
We do not sell personal data for money. We may share personal data with service providers that help operate JobsLoop, including cloud hosting, database, authentication, storage, payment processing, email, analytics, logging, security, support, and AI model providers.
Third-party service providers include:
- AI model providers: OpenAI, Anthropic, Google (Gemini), and other AI services for processing prompts and generating outputs
- Payment processors: Stripe, PayPal, Creem, or other processors you choose at checkout
- Infrastructure and hosting: Supabase (authentication and database), Google (OAuth, analytics), Cloudflare (edge services)
- We may disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, financing, or asset transfer.
6. International Transfers
JobsLoop is built for US, European, and global markets. Your data may be processed in the United States and other countries where we, our processors, or model providers operate. Where required, we use contractual safeguards, data processing agreements, standard contractual clauses, transfer risk assessments, or similar mechanisms.
7. Retention
- Account data: We retain account data for 90 days after your last login OR immediately upon user deletion request. After the retention period, account data is deleted except where required for security, fraud prevention, legal, accounting, or dispute purposes.
- Workspace, resume, job, and AI content is kept until you delete it, your organization instructs deletion, or the applicable retention period expires.
- Payment, invoice, tax, and ledger records are kept as required for accounting, tax, chargeback, and legal obligations.
- Security logs and diagnostic records are kept for a limited period appropriate to the risk and operational need.
8. Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, object, withdraw consent, opt out of sale/share or targeted advertising, limit sensitive data use, or complain to a regulator. We may need to verify your identity before fulfilling a request.
9. Region-Specific Disclosures
EEA, UK, and Switzerland
You may have GDPR-style rights, including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint rights. We do not use JobsLoop to make solely automated decisions that produce legal or similarly significant effects about you.
California Consumer Privacy Act (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You can request what personal information we collect, use, disclose, and sell or share. Use the data summary endpoint or contact privacy@jobsloop.ai.
- Right to Access and Data Portability: You can request a copy of your personal information in a portable, machine-readable format. Use the data export endpoint.
- Right to Delete: You can request deletion of your personal information. Note that we provide a 30-day grace period during which you can cancel your deletion request. Use the deletion request endpoint or contact privacy@jobsloop.ai. Some information may be retained as required by law, for security, fraud prevention, or to complete transactions.
- Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising. If our practices change, we will provide an opt-out mechanism.
- Right to Limit Use of Sensitive Personal Information: If you upload resumes, career documents, or recruiting data that contains sensitive personal information (such as social security numbers, financial account details, health information, or precise geolocation), we use it only to provide the services you request. We do not use such information for other purposes without your consent.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not be denied service, charged different prices, or provided a different level or quality of service solely because you exercised your privacy rights.
Authorized agent: You may designate an authorized agent to make a request on your behalf. We will require proof of authorization and may need to verify your identity directly.
Verification: To protect your privacy, we will verify your identity before fulfilling access, deletion, or portability requests. Verification may require you to log in to your account, confirm your email or phone number, or provide additional information.
Do Not Sell My Personal Information: As stated above, we do not sell personal information. If you wish to confirm your opt-out status or have questions, contact privacy@jobsloop.ai or use the footer link "Do Not Sell My Personal Information."
Other US state privacy laws
We honor similar rights under Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and other state privacy laws where applicable.
Brazil, Canada, Australia, Japan, and other regions
We honor applicable access, correction, deletion, consent withdrawal, complaint, and cross-border transfer requirements where those laws apply to our processing.
10. Security
We use reasonable technical and organizational safeguards, including access controls, encryption in transit, credential isolation, logging, least privilege, and monitoring. No system is perfectly secure. You are responsible for protecting your devices, passwords, OAuth accounts, and browser sessions.
11. Children
Children's Online Privacy Protection Act (COPPA) Compliance: JobsLoop is not intended for or directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. The Services are designed for adult career and recruiting use and require users to be at least 16 years old (or 18 in most jurisdictions).
If you believe a child under 13 has provided personal data to JobsLoop, please contact us immediately at privacy@jobsloop.ai so we can investigate and take appropriate action, including deletion of the account and associated data.
12. Contact
Contact privacy@jobsloop.ai for privacy requests. For security-sensitive issues, avoid sending passwords, full payment card numbers, full government IDs, or complete raw resumes in ordinary email.