Privacy Policy

• Account details: your name, email address, and profile picture if you sign in with Google.
• Workspace content: applications, companies, interviews, contacts, notes, skills and the text extracted from any CV you upload. We keep the extracted text only long enough to build your profile; the original file is not stored.
• Security and activity records: sign-in times, the last time you were active, and an audit log of security events such as password changes, two-factor changes and member invitations, including IP address and browser.
• Integrations: if you connect Google Calendar, the tokens needed to create and update interview events.

To provide and secure the service: storing your workspace, syncing interviews to your calendar, detecting suspicious activity, and responding to support requests. We do not use your content to train AI models and we do not sell personal data.

When you use an AI feature, the text needed for that request is sent to the AI provider selected for your workspace (for example Groq, OpenAI or Anthropic). If your workspace uses its own API key, the provider processes the request under your agreement with them.

Workspace API keys are encrypted with AES-256-GCM before they are stored, are bound to their workspace, are decrypted on our servers only at the moment of a request, and are never shown again after you save them.

• All traffic is encrypted in transit with HTTPS.
• Each workspace is isolated at the database level with row-level security, so one tenant cannot read another's data.
• Optional two-factor authentication with an authenticator app.
• Administrative access is limited to a small number of staff and every administrative action is recorded in the audit log.

We keep your data while your account is active. You can request deletion from Settings → Security. An administrator reviews the request, normally within a few days; once approved, your account, your profile and any workspace you own alone are permanently deleted. Audit records may be kept for up to 12 months for security purposes, without the content of your workspace.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us and we will respond within 30 days.

Privacy questions or requests: privacy@joblow.app.