Privacy Policy

It applies to the JobProofed website and the account features available on it: sign-in, saved jobs, job alerts, application tracking, Career Profile, resume tailoring, listing reports, employer job submissions and paid plans.

Information you give us

• Account details. If you sign up with email and password, we store your email address and an authentication record held by our authentication provider. We never see or store your password in readable form. If you sign in with Google, we receive the basic profile information Google returns for sign-in — your email address, name and profile image where available — and an account identifier.
• Saved jobs. When you save a role while signed in, we store the link between your account and that job so your saved list persists.
• Job alerts. When you create an alert, we store the search criteria you chose and the fact that the alert belongs to your account. Matches are shown inside your account, and where you have enabled email delivery for an alert, a digest of those matches is sent to the email address on your account. Every alert email carries an unsubscribe link, and unsubscribing is recorded so we stop sending to that address.
• Employer submissions. If you submit a role, we store what you enter in the form, including employer details, the job description, the canonical source URL, sponsorship wording and the contact email you provide, so a reviewer can verify it.
• Submitted job URLs. If you send us a posting link, we store the link and what our verification pipeline resolved it to.
• Listing reports. If you report a listing, we store the listing reference, the issue you selected, what you wrote, and the contact email you optionally provide.
• Payment details you give to Stripe. Paid plans and job-posting purchases use Stripe's hosted checkout. Your card details go directly to Stripe and are never sent to or stored by JobProofed. We store only the resulting subscription, purchase and posting-credit records linked to your account.
• Career Profile resumes. Your original PDF, DOCX or TXT upload remains on your device and is not retained by JobProofed. We privately retain a rendered PDF preview linked to your account so you can view it after a refresh or on another device. We also store the career details extracted from the resume and their source references.
• Application tracking. When you track an application, we store the job title, employer, location and source link where available, your application stage, applied and follow-up dates, and any notes you add so the tracker and application workspace can persist across sessions.
• Resume tailoring. JobProofed uses the job information you choose and the career evidence you provide to compare qualifications, select supported evidence and create tailored resume content. For profile-backed tailoring, we can store version history containing the derived resume document, generated text, edits you make, the target job identity, selected professional links and version metadata. We do not store the original source-resume snapshots inside those saved tailored versions, and tailored work based only on pasted or uploaded device-only resume text is not saved as server-side version history.

Information collected automatically

JobProofed does not run third-party advertising, product analytics or session-recording trackers. Our hosting and backend providers process standard technical request information (such as IP address, request path and browser user agent) in server logs in order to serve the site, apply rate limits and protect it from abuse.

Browser storage is functional only. We store your light/dark theme choice, your sign-in session so you stay signed in, and — for visitors who are not signed in — a local list of saved job IDs on your own device. During Resume Tailoring, the active draft can also be kept in your browser's session storage for the life of that tab, including the selected job, the resume material you supplied for that session and generated output, so a refresh does not discard work in progress. We do not use advertising or tracking cookies.

If you choose "Use my location" in job search, your browser asks your permission and we round the coordinates before use, then look up the nearby city name through the OpenStreetMap Nominatim service. We do not store your coordinates with your account.

• To authenticate you and keep you signed in.
• To provide the features you asked for: saved jobs, job alerts, application tracking, Career Profile, resume tailoring, submission tracking and paid plans.
• To compare a job description with the career evidence you supplied, identify supported and unsupported qualifications, and create or revise resume content without inventing candidate facts.
• To record limited candidate-reported application-stage events, such as an offer or rejection, as reported service-quality or employer-behaviour observations where that product feature is enabled. These observations do not make your private tracker notes employer-visible and are not treated as independently verified hiring outcomes.
• To review employer submissions, submitted URLs and listing reports before anything is published or changed.
• To send the emails you ask for, such as job alert digests for alerts you have enabled, and to honour unsubscribe requests and other suppression records.
• To keep the service secure, debug faults, and prevent abuse.

We do not sell your personal information. We do not use it to build behavioural advertising profiles for ourselves or for third parties, and we do not use advertising or tracking cookies.

The listings on JobProofed are collected from employers' own public career sites and applicant tracking systems. That content is employer-published business information, not personal information about you, and it is preserved so we can show source evidence alongside each role.

JobProofed may also collect and display professional information about recruiters or hiring-team members when supported by public or employer-published evidence, such as a person's name, professional title, business contact route and the source used to support that relationship. This information is used to help users identify an appropriate recruiting contact and is kept separate from candidate account data.

JobProofed relies on the following third-party services to operate:

• Lovable — hosting and deployment of the website and its server functions, including automatic request logs.
• Supabase — the managed database, authentication and private file-storage service that stores accounts, saved jobs, job alerts, application-tracker records, employer submissions, listing data, Career Profile data and rendered resume previews, and saved profile-backed tailored resume versions.
• Stripe — payment processing through Stripe's hosted checkout and billing portal. Stripe receives and holds your payment details; JobProofed does not.
• Lovable managed email infrastructure — the delivery service configured for JobProofed account and job-alert email, sending from notify.jobproofed.com. Delivery outcomes are used to maintain a suppression list, so that addresses that have unsubscribed or that must not be emailed are excluded from future sends.
• JobProofed Match Analyzer — an external Render-hosted service used for resume and job evidence analysis. When this analysis is used, JobProofed sends the relevant job title and job-description text together with resume-derived text needed for the analysis. Match Analyzer results are returned to JobProofed and are not retained as a separate server-side analysis history.
• Lovable AI Gateway — used for certain resume-writing operations. JobProofed sends a bounded structured evidence packet and job-related skill context needed to compose resume bullets; the gateway can route that request to the configured AI model provider. Candidate source facts remain the authority for what may be claimed, and generated output is validated before use.
• Google — only if you choose Google sign-in, to authenticate you and return your basic profile information.
• OpenStreetMap Nominatim — only if you use the optional "Use my location" feature, to turn rounded coordinates into a nearby city name.
• Employers' public career sites and applicant tracking systems — read by us to collect job listings; they do not receive information about you.

Account data is kept while your account exists. Saved jobs, job alerts, application-tracker records and saved tailored resume versions can be removed through their product controls where available and are removed with your account as described below. Job listings are deactivated when they are no longer verified as live, and their source evidence is retained.

How long we keep things

• Account data — kept while your account exists, then deleted or anonymized as described below.
• Career Profile rendered resume previews — kept privately until you replace the resume, delete all Career Profile data, or delete your account. Original uploaded files are not retained server-side.
• Application tracker records — kept until you delete the individual application or delete your account.
• Saved profile-backed tailored resume versions — kept until you delete that saved resume history or delete your account. Device-only pasted or uploaded resume text used for tailoring is not added to server-side version history.
• Employer submissions, submitted posting URLs and listing reports — kept for 3 years as verification records.
• Billing, refund and dispute records — kept for 7 years.
• Email delivery and event records — kept for 1 year.
• Suppression and unsubscribe records — kept for as long as necessary to keep honouring the unsubscribe or suppression.
• Backups — copies of data may persist in routine backups until normal backup rotation removes them.

We may keep records longer where that is reasonably necessary for legal, fraud-prevention, security, dispute or compliance purposes.

What happens when you delete your account

You can delete your account yourself from your account settings, after a confirmation step. Deleting your account removes your saved jobs, job alerts and their delivery records, application-tracker records and related candidate-owned application events, saved tailored resume versions, your queued and sent email records, your unsubscribe tokens, your Career Profile facts, evidence sources, resume metadata and private rendered preview, your posting-credit records, the billing records we hold, your roles and your profile, and then deletes your sign-in record.

Employer job submissions, submitted posting URLs and listing reports are not deleted, because they are part of a verification record. Instead they are un-linked from your account and their contact email is cleared, so no account-identifying contact data is left behind.

Two things deliberately survive account deletion. Email suppression records are kept, because they are keyed to an email address rather than an account and are what allows us to keep honouring an unsubscribe or a bounce. And published job listings are not removed, because listing availability is governed by our verification and freshness rules rather than by account status.

Your payment records held by Stripe are governed by Stripe's own retention practices, not by ours.

• You can remove saved jobs, delete job alerts, delete individual application-tracker records and remove saved tailored resume histories through the available product controls.
• You can deactivate a job alert at any time, and unsubscribe from alert emails using the link carried in every one of them.
• You can delete your account, and the data described above, from your account settings.
• You can ask what account data we hold about you.

Accounts are protected by our authentication provider, and row-level database access rules restrict private account records — including saved jobs, alerts, application-tracker records, Career Profile data and saved tailored resumes — so they are readable only by the account that owns them. Internal review tooling is restricted to accounts holding an administrator or reviewer role, and privileged backend processes use a separate, server-only credential that is never available in the browser. No system is perfectly secure, and we do not claim any security certification.

JobProofed is intended only for users age 18 or older. We do not knowingly provide accounts or services to children under 18.

If we make material changes to this policy, we will update the date above and provide additional notice when required by law.

Privacy questions and requests can be sent to privacy@jobproofed.com. General support questions go to support@jobproofed.com, and formal legal notices to legal@jobproofed.com. You can also reach us through our contact page.