JoblitBack

    Privacy Policy

    April 2, 2026

    Joblit ("we," "us," or "our") operates the Joblit web application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

    1. Information We Collect

    1.1 Account Information

    When you sign in via Google or GitHub OAuth, we receive your name, email address, and profile avatar from the identity provider. We do not receive, store, or have access to your passwords.

    1.2 Job Data

    The Service fetches publicly available job listings from third-party platforms (LinkedIn, Seek, and others) on your behalf. These listings — including job title, company name, location, job type, and description — are stored in your account for your personal use only.

    1.3 Resume & Application Content

    You may create, upload, or edit resumes, cover letters, and application materials within the Service. This includes your professional summary, work experience, skills, education, and any other information you choose to provide. This content is stored securely and associated with your account.

    1.4 Usage & Analytics Data

    We automatically collect standard usage information including browser type, device type, operating system, pages visited, features used, and timestamps. This data is used solely for analytics, performance monitoring, and improving the Service. We do not use this data for advertising or sell it to third parties.

    1.5 Cookies & Local Storage

    We use essential cookies for authentication session management and locale preferences. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Local storage may be used to cache non-sensitive UI preferences (e.g., skill pack version metadata).

    2. How We Use Your Information

    We use your information exclusively to: provide, operate, and maintain the Service; authenticate your identity and manage your account; generate tailored resumes and cover letters based on your profile and job listings; improve, optimize, and develop new features for the Service; communicate with you about updates, security alerts, or issues related to the Service; and comply with legal obligations.

    3. AI Data Processing

    When you use the resume/cover letter generation feature, your professional profile data and the target job description are sent to AI providers (currently Google Gemini) for content generation. We send only the minimum data necessary for the task. Your data is not used by AI providers for model training (per their API terms). AI-generated content is returned to you and stored in your account. You may also export your AI prompt rules as a Skill Pack ZIP for use with external AI services (Claude, ChatGPT, Gemini) — in this case, your resume snapshot is included in the download and you control where it is uploaded.

    4. Data Storage & Security

    Your data is stored in a PostgreSQL database hosted on Neon (neon.tech). The application is deployed on Vercel (vercel.com). File attachments (PDFs, generated documents) are stored in Vercel Blob Storage. All data is transmitted over HTTPS/TLS encryption. Database connections use SSL. We implement commercially reasonable security measures including encrypted storage, access controls, and regular security reviews. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

    5. Third-Party Services

    We use the following third-party services, each operating under its own privacy policy:

    • Google OAuth — for user authentication
    • GitHub OAuth — for user authentication
    • Vercel — for application hosting, serverless functions, and blob storage
    • Neon — for PostgreSQL database hosting
    • Google Gemini API — for AI-powered resume and cover letter content generation
    • LaTeX rendering service — for PDF compilation (receives document content only, no personal identifiers)

    We encourage you to review the privacy policies of these services.

    6. Data Sharing

    We do not sell, rent, trade, or otherwise share your personal information with third parties for marketing or advertising purposes. We may share data only: with third-party service providers listed above, solely for operating the Service; if required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Joblit, our users, or the public; in connection with a merger, acquisition, or sale of assets (you will be notified of any such change).

    7. Cookies & Tracking Technologies

    We use only essential, first-party cookies required for the Service to function. Specifically: a session cookie for authentication (managed by NextAuth); a locale preference cookie (managed by next-intl). We do not use Google Analytics, Facebook Pixel, or any third-party tracking or advertising technologies. We do not engage in cross-site tracking.

    8. Data Retention & Deletion

    We retain your data for as long as your account is active. You may delete individual job records, applications, and generated documents at any time through the Service interface. To request complete account deletion and removal of all associated data, contact us at the email below. We will process deletion requests within 30 days. Some data may be retained in encrypted backups for up to 90 days after deletion, after which it is permanently removed.

    9. Your Rights

    Depending on your jurisdiction, you may have the following rights regarding your personal data:

    • Under GDPR (EU/EEA): Right to access, rectification, erasure, restriction of processing, data portability, and objection. Right to withdraw consent at any time. Right to lodge a complaint with a supervisory authority.
    • Under CCPA (California): Right to know what personal information is collected, right to delete, right to opt-out of sale (we do not sell data), right to non-discrimination for exercising rights.
    • Under the Australian Privacy Act: Right to access and correct your personal information. Right to complain to the Office of the Australian Information Commissioner (OAIC).

    To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

    10. International Data Transfers

    Your data may be processed and stored in countries outside your country of residence, including the United States (Vercel, AI providers) and other jurisdictions where our service providers operate. By using the Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable.

    11. Disclaimer of Liability

    The Service is provided on an "as is" and "as available" basis. To the fullest extent permitted by applicable law:

    • We make no warranties, express or implied, regarding the accuracy, completeness, or reliability of job listings fetched from third-party sources. Job data is sourced from public platforms and may be outdated, inaccurate, or incomplete.
    • We are not responsible for any employment decisions, application outcomes, or consequences arising from your use of the Service.
    • AI-generated content (resumes, cover letters, skill packs) is provided as a starting point and should be reviewed and edited by you before submission to any employer. We are not liable for any errors, omissions, or misrepresentations in AI-generated content.
    • We shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities, arising from your use of or inability to use the Service.
    • Our total aggregate liability for any claims arising from the Service shall not exceed the amount you paid us in the twelve (12) months preceding the claim, or AUD $100, whichever is greater.
    • We are not responsible for any data loss resulting from third-party service outages, including but not limited to Vercel, Neon, AI provider, or internet connectivity disruptions.

    12. Children's Privacy

    The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or an in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

    14. Contact Us

    If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy-related complaint, please contact us at:

    Email: privacy@joblit.tech

    Joblit·Privacy·Terms·© 2026 All rights reserved.