Privacy Policy

Who is responsible

AI Job Finder is run by the operator of AI Job Finder, who is responsible for your personal data in it.

What we hold

• Your account: email address, name if you give one, hashed password, time zone, and when you signed up, verified your email and last used the app.
• Your searches: the roles, places, salary, industries and languages you look for.
• Your CVs: the files you upload, their text, what the AI read from them, their reviews and tailored versions.
• Your email settings: whether you get the daily digest, and at what hour.
• Your matches and applications: scores and explanations, which postings you opened, drafted for or applied to, and applications you sent.
• Usage: which allowances you used and when, and a record of AI calls made for you (their purpose and size, not their content).
• Billing: your plan and subscription status, and the notifications Paddle sends us about your subscription. Card details stay with Paddle; we never see them.
• Security: a hashed record of recent failed sign-in attempts per email address and connection, to stop password guessing.

A CV doesn't need sensitive details such as your health, religion, ethnicity, political views or a photo, and we ask you to leave them out. If a CV you upload contains them, they are handled only as part of that CV, to give you the service you asked for, and are deleted with it.

Why we use it

To provide the service you signed up for (our contract with you): finding and scoring postings, reviewing and tailoring your CV, sending your digest and applications, and running your account and plan. To keep the service secure and prevent abuse (our legitimate interest). To meet legal duties such as tax records, which Paddle keeps as merchant of record. We do not sell your data, show you ads or use your CV to train AI models.

Who processes it for us

These services process data on our behalf, under contracts that limit them to doing so:

• Vercel: hosts the website and stores the CV files you upload.
• Neon: hosts the database with your account, searches, matches and applications.
• Anthropic: AI models that read and review your CV, score postings against your search and draft tailored CVs and cover notes.
• OpenAI: turns your search and CV into numeric embeddings, used to find relevant postings.
• Resend: sends account emails, the daily digest, and applications you send through the service.

Some of them are based in, or process data in, the United States. Transfers rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. The AI providers process your CV and search to answer each request and, under their API terms, do not use it to train their models.

Paddle sells Pro to you as our merchant of record. For payments, invoices and tax it is responsible for your data itself, under its own privacy policy, and it tells us only your subscription's status and a reference to it.

When you send an application through the service, the employer you send it to receives it and handles it under their own policy.

People named in job postings

AI Job Finder collects job postings from employers' own public job feeds and from job boards whose terms allow it. A posting can name a recruiter or hiring contact, with an email address for applications. We hold that only as part of the posting, to show it to job seekers and so they can apply, which is the purpose the employer published it for. This rests on our legitimate interest, and the employer's, in the job reaching suitable candidates.

We don't contact these people ourselves, build profiles of them, or use their details for anything else. A posting is removed 90 days after it was posted, unless a user applied for it or saved work on it, in which case it stays as part of that user's record. If you are named in a posting and want your details removed, contact us and we will remove them.

How long we keep it

• Your account and its data: until you delete your account. Deleting it removes your data, your stored files and Paddle's notifications about you at once.
• Free accounts not used for twelve months are deleted, after a warning email a month before. Pro accounts are kept while subscribed.
• Records of AI calls are kept for cost accounting after an account is deleted, without anything that links them to you.
• Job postings are removed 90 days after they were posted, or at once when their source's terms no longer allow us to show them, unless a user applied for them or saved work on them.

Your rights

You can see, correct and download your data, and delete your account, at any time: your searches and CVs are on their pages, and your account page has Download my data and Delete my account. You can also object to or ask us to restrict how we use your data. If you think we have handled your data wrongly, you can complain to the data protection authority where you live.

You can stop the daily digest email at any time, from your account page or with the link at the bottom of every digest. Emails about your account itself (verification, password resets, billing) are always sent.

If something goes wrong

If a security incident puts your data at risk, we tell the data protection authority within 72 hours of learning of it, and tell you without delay when it is likely to affect you.

Cookies

We use one cookie, to keep you signed in. See our Cookie Policy.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect.