Privacy Policy

Effective Date: March 9, 2026

Last Updated: March 19, 2026

Version: 2.0

1. Introduction

JobIntel LLC ("JobIntel," "we," "us," or "our") operates the JobIntel platform at jobintel.com and the JobIntel browser extension (collectively, the "Service"), a job search intelligence platform that aggregates job postings, scores credibility, matches against your skill profile, and provides a prioritized job feed.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. It applies to all users globally, with additional provisions for users in the European Economic Area, United Kingdom, and Switzerland (Section 14) and California (Section 15).

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create a JobIntel account, we collect:

• Name -- your full name as provided during registration
• Email address -- used for authentication, notifications, and support communications
• Password -- stored only in hashed form (Argon2id, the OWASP-recommended algorithm); we never store or have access to your plaintext password
• Authentication credentials -- if you use passwordless login (magic link or passkey/WebAuthn), we store the associated credential identifiers and metadata required to authenticate you. Magic link tokens expire after 15 minutes. WebAuthn credential public keys are stored for the lifetime of your account.

2.2 Job Search Data

As you use the Service, we collect and store the data you provide and generate through your use of the platform:

• Job listings -- postings you add via URL paste, text/HTML paste, email forwarding, or that are ingested via automated API sources
• Skills profile -- your configured skills, proficiency levels, and skill categories
• Applications -- application status tracking data, application stages, notes, follow-up reminders, and contact information you enter for hiring contacts
• Company notes -- any notes or research you save about employers
• Support tickets -- messages and context submitted through our support system

2.3 Resume Data

If you upload a resume, we collect:

• Resume file -- we accept PDF, DOCX, and DOC files up to 5 MB
• Extracted resume text -- the full text content is extracted from your uploaded file and stored in your account profile
• AI-generated skill analysis -- your resume text is sent to our AI processing partners (see Section 4) to extract skills, assess proficiency, and generate career guidance. The AI-generated results are stored in your account.

Resume text may contain sensitive personal information such as employment history, education, contact details, and other biographical data. You can delete your stored resume text at any time from your account settings. When you delete your resume, the stored text and AI-generated analysis are permanently removed.

2.4 Usage Data

We automatically collect certain information when you access the Service:

• Log data -- IP address, browser type, operating system, referring URLs, pages visited, and timestamps
• Device information -- device type, screen resolution, and browser version
• Feature usage -- which features you use and how frequently, to improve the Service
• Daily activity records -- we record a summary of your daily usage (date, request count) for each day you actively use the Service. This is used for service analytics and capacity planning.

2.5 Marketing Attribution Data

When you create an account, we may collect information about how you found us:

• Campaign data -- UTM parameters (source, medium, campaign, content, term) from the URL you used to reach our site
• Referral information -- referral codes, referring URLs, and landing page
• Signup context -- device type, browser, and country at the time of registration

This data helps us understand which channels bring users to JobIntel. It is associated with your account and deleted when your account is deleted.

2.6 Payment Data

Payment processing is handled entirely by Stripe, Inc., a PCI Level 1 compliant payment processor. We do not collect, store, or have access to your credit card number, debit card number, or bank account details. Stripe provides us with limited information such as the last four digits of your card, card brand, expiration date, and billing country for display and record-keeping purposes. Please refer to Stripe's Privacy Policy for information on how Stripe handles your payment data.

2.7 Email Ingestion Data

If you use the email forwarding feature (paid tier), emails you forward to your JobIntel ingestion address are processed to extract job listing information. We store the extracted job data. We do not permanently store the raw email content after processing is complete.

2.8 Browser Extension Data

The JobIntel browser extension reads content from job board search results pages when you actively browse supported sites: Indeed, Glassdoor, ZipRecruiter, Dice, Google for Jobs, Reed, StepStone, Totaljobs, and InfoJobs.

Job listing metadata transmitted to our servers for scoring:

• Job title
• Company name
• Job location
• Job listing URL

Data transmitted when saving jobs:When you click the save button on a scored job listing, the job's title, company, location, URL, board name, and match score are sent to our servers and stored in your JobIntel dashboard. This data is associated with your account and retained per the data retention policy in Section 7. Saving is always a deliberate user action -- the extension never saves jobs automatically.

Data stored locally on your device (in browser extension storage, encrypted at rest by the browser):

• Authentication token (if signed in) -- extension tokens are valid for up to 90 days and can be revoked from your account settings at any time
• Cached job scores (expires after 24 hours)
• Parser configurations (expires after 6 hours)
• Scan history (last 50 scans)
• Saved job tracking (URLs of jobs you've saved, for showing saved state on revisit)

Optional usage telemetry (can be disabled in extension settings):

• Scan counts per job board
• Parser success and failure rates
• Error types and rates
• No personally identifiable information is included in telemetry

Data the extension does NOT collect or transmit:

• Your browsing history
• Page content beyond the job listing metadata listed above
• Personal information from job board pages
• Cookies or session data from job board websites
• Data from websites other than the nine supported job boards
• Keystroke data, form inputs, or credentials

Anonymous (Unregistered) Extension Users

If you use the extension without creating an account (anonymous "taste test" scan):

• Your scan data is ephemeral and is not persisted on our servers
• Anonymous scan sessions are identified by a hash of your IP address and browser User-Agent string for rate limiting purposes only. We do not use canvas fingerprinting, WebGL fingerprinting, or any other advanced browser fingerprinting technique.
• This rate-limiting data is automatically deleted after 24 hours
• No account exists on our servers for anonymous users -- there is no server-side data to delete or manage
• You can clear all locally stored extension data by removing the extension from your browser

Registered Extension Users

If you sign in to the extension with your JobIntel account, your scan history and usage data is associated with your account. Job listing metadata from scans is retained per the data retention policy in Section 7. You have full control over your data through the mechanisms described in Section 9.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service -- to operate and maintain your account, display your job feed, track your applications, and deliver the core functionality of JobIntel
• AI processing -- to parse job descriptions, extract skills from resumes and listings, calculate match scores, assess credibility, generate semantic search embeddings, and produce company research insights (see Section 4)
• Email notifications -- to send transactional emails including support ticket updates, subscription confirmations, billing notifications, and follow-up reminders
• Support -- to respond to your support requests and resolve issues. Authorized support administrators may access your account to diagnose and resolve issues; such access is logged and subject to internal access controls (see Section 8).
• Analytics and improvement -- to understand how the Service is used and to improve features, performance, and user experience. We use aggregate, non-personally-identifiable data for this purpose. We also maintain internal analytics events (see Section 7 for retention periods).
• Security -- to detect and prevent fraud, abuse, and unauthorized access, including IP-based rate limiting and brute-force login protection
• Legal compliance -- to comply with applicable laws, regulations, and legal processes

We do not use your information for advertising purposes. We do not serve third-party advertisements on JobIntel.

4. AI Processing Disclosure

JobIntel uses third-party AI services to provide intelligent features. The following AI processors are used:

4.1 Anthropic (Claude API)

We use Anthropic's Claude API for:

• Job description parsing -- extracting structured data (title, company, location, salary, requirements) from unstructured job postings
• Resume analysis -- extracting skills, assessing proficiency levels, and generating career guidance from uploaded resume text
• Skill extraction and matching -- identifying required and preferred skills from job descriptions and calculating how well your skill profile matches a given job
• Credibility scoring -- assessing the trustworthiness and freshness of job postings
• Company research -- generating research summaries and hiring context for employers

Data sent to Anthropic: Job description text, your skill profile data, and resume text (if uploaded). No email address, name, or account identifiers are sent to Anthropic.

Anthropic's data practices:Anthropic does not use data submitted through their API for model training. API inputs and outputs are retained by Anthropic only for abuse prevention and safety purposes, subject to Anthropic's data retention policies. For more information, see Anthropic's Privacy Policy.

4.2 OpenAI (Embedding API)

We use OpenAI's text embedding API to generate semantic vector representations of job descriptions. This enables similarity search and improved job matching.

Data sent to OpenAI: Job description text only. No email address, name, skill profile, resume text, or account identifiers are sent to OpenAI.

OpenAI's data practices: OpenAI does not use data submitted through their API to train models. For more information, see OpenAI's Privacy Policy.

Note: This feature may be enabled or disabled at our discretion. When disabled, no data is sent to OpenAI.

4.3 General AI Processing Information

Processing location:AI processing occurs in the United States via our AI partners' API infrastructure.

Usage tracking: We track aggregate API usage (call counts and token counts) for cost management and capacity planning. These metrics are not associated with individual users.

5. Cross-User Intelligence

JobIntel provides aggregate job market intelligence by analyzing patterns across all users' job data. Here is how this works and how your privacy is protected:

• Description fingerprinting-- job descriptions are fingerprinted using cryptographic hashing (SHA-256) and similarity hashing (SimHash) to create anonymized "global job" identity records. This allows JobIntel to identify when the same or substantially similar job posting is tracked by multiple users.
• No personally identifiable information is shared-- cross-user records contain only anonymized, aggregate data. No user's name, email, profile, skills, notes, or application status is visible to any other user.
• Aggregate statistics only-- users may see aggregate information such as "5 other users are tracking this role" or market-level trends like popular skills and emerging job categories. These statistics cannot be used to identify individual users.
• Skill demand trends -- aggregate skill frequency data across job listings is used to power market trend analysis. This data is derived from job descriptions, not from individual user profiles.

6. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We share your information only with the following categories of service providers, and only to the extent necessary to operate the Service:

6.1 Core Service Providers

6.2 Job Data Providers

We retrieve job listing data from third-party job board APIs to populate your job feed. When you configure job searches, your search parameters (keywords, location, job type) are transmitted to these providers to retrieve matching listings. No personally identifiable information (name, email, account details) is shared with these providers.

We may add or remove job data providers over time. This list reflects our current integrations.

6.3 Legal Disclosures

We may also disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email at least 30 days before any change in ownership or use of your personal information takes effect.

7. Data Retention

7.1 Account Data

• Active accounts -- your account data, job listings, skills profile, resume data, applications, and all associated data are retained for as long as your account is active.
• Subscription downgrade or cancellation -- if you downgrade from a paid tier to the free tier, or cancel your paid subscription, your data is preserved indefinitely. Your profile, skills, saved listings, and application history are never deleted due to a change in subscription status. You retain access to your data within the limits of your current tier.
• Account deletion -- if you request deletion of your account, your account enters a 7-day grace period during which you can cancel the request. After the grace period, your personal data is permanently anonymized across all database tables. This includes your account information, job listings, skills profile, resume data, applications, notes, support ticket history, and analytics events. Anonymized aggregate data (e.g., global job fingerprints that do not identify you) may be retained.

7.2 Analytics Data

• Internal analytics events -- event-level analytics data (feature usage, scan events, and associated metadata) is retained for up to 365 days from the date of the event, after which it is automatically purged. If you delete your account, analytics events associated with your account are deleted as part of the account erasure process.
• Daily activity records -- per-user daily activity summaries are retained for the lifetime of your active account and deleted upon account erasure.
• Marketing attribution data -- retained for the lifetime of your active account and deleted upon account erasure.

7.3 Other Retention Periods

• Support tickets -- support ticket content is retained for the lifetime of your account to provide continuity of support. Upon account deletion, ticket content is anonymized.
• Rate-limiting data -- IP-based rate-limiting records are automatically deleted after 24 hours (anonymous extension scans) or 15 minutes (login brute-force protection).
• Backups -- encrypted database backups may retain your data for up to 90 days after deletion as part of standard disaster recovery procedures, after which backup data is purged.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit -- all data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Encryption at rest -- all data stored in our databases and file systems is encrypted at rest using AWS encryption services (AES-256)
• Password hashing -- passwords are hashed using Argon2id, the OWASP-recommended algorithm. We never store plaintext passwords. Legacy password hashes are transparently migrated to Argon2id on next login.
• Authentication -- JWT (JSON Web Token) based authentication with token expiration (8 hours for web sessions, up to 90 days for browser extension tokens). Extension tokens can be revoked independently from your account settings. We also support passwordless authentication via magic links and passkeys (WebAuthn).
• CSRF protection -- all mutating API requests are protected with double-submit CSRF tokens
• Administrative access controls -- internal access to user data is restricted by role. Authorized administrators may access user accounts for support and diagnostic purposes; all such access is logged with timestamps and requires elevated credentials. Administrative sessions have separate expiration policies.
• Infrastructure security -- our production environment runs on AWS with VPC isolation, security groups, and encrypted connections between services
• No raw payment data -- credit card and payment method details are handled exclusively by Stripe and never touch our servers

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

All users of JobIntel have the following rights regardless of location:

• Access -- you can access your data at any time through your JobIntel dashboard. Your profile, skills, job listings, resume data, and applications are all visible and accessible within the Service.
• Correction -- you can update or correct your account information, skills profile, and other data directly through the Service at any time.
• Deletion -- you can request deletion of your account and all associated data from the Settings page in your dashboard. Deletion includes a 7-day grace period during which you can cancel the request. After the grace period, your data is permanently and irreversibly anonymized.
• Data export -- you can export a complete copy of your data in CSV format (packaged as a ZIP file) from the Settings page in your dashboard. The export includes your profile, skills, job listings, applications, application notes, application contacts, search configuration, billing history, support tickets, and feedback. Exports can be requested once every 24 hours.
• Marketing opt-out -- you can opt out of marketing emails at any time by using the unsubscribe link in any marketing email or by contacting us. Transactional emails (billing confirmations, security alerts, support responses) are not affected by this opt-out.
• Extension controls -- if you use the browser extension, you can: disable usage telemetry in the extension settings; sign out of the extension to clear all locally stored data and revoke your extension API token; revoke extension access from your Account Settings page on jobintel.com (this invalidates the token server-side without needing access to the browser where the extension is installed); or remove the extension from your browser to delete all locally stored data immediately.

For additional rights specific to your jurisdiction, see Section 14 (EEA/UK/Switzerland) or Section 15 (California).

10. Cookies and Analytics

JobIntel uses minimal cookies and similar technologies:

10.1 Essential Cookies

• Session cookies -- access_token (httpOnly, secure) and refresh_token (httpOnly, secure, scoped to the token refresh endpoint) maintain your authenticated session. A csrf_token cookie is used for cross-site request forgery protection. These are essential for the Service to function and cannot be disabled.

10.2 Analytics (Consent Required)

We may use behavioral analytics tools to understand how visitors interact with our site. These tools may capture session recordings and heatmap data. These analytics scripts are only loaded after you give explicit consent via our cookie consent banner. If you decline, no behavioral analytics scripts are loaded.

You can change your preference at any time by clearing the "analytics_consent" entry from your browser's local storage and refreshing the page.

10.3 Other Technologies

• Privacy-respecting page analytics -- we use Plausible Analytics for aggregate page view counts. Plausible is a privacy-focused analytics tool that does not use cookies, does not track users across sites, and does not collect personal data. It runs without requiring consent under GDPR guidance for strictly necessary audience measurement.
• No tracking cookies -- we do not use cookies for tracking your activity across other websites.
• No third-party advertising cookies -- we do not serve third-party ads and do not allow third-party advertising networks to place cookies on your device through our Service.
• Local storage -- we use browser local storage to store your analytics consent preference. The browser extension uses separate extension storage (see Section 2.8) for its authentication token, cached scores, and scan history.

11. Children's Privacy

JobIntel is not directed at children under the age of 16 (or 13 in jurisdictions where 13 is the applicable age of consent). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@jobintel.com. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. This policy is versioned (see "Version" at the top) so you can track changes over time.

• Material changes -- for significant changes to how we collect, use, or share your information, we will notify you via email at least 30 days before the changes take effect. We will also display an in-app notification banner on your next login directing you to review the updated policy.
• Non-material changes-- for minor updates (clarifications, formatting), we will update the "Last Updated" date and version number at the top of this policy.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and may request account deletion.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@jobintel.com
• Entity: JobIntel LLC
• Location: United States
• Data Protection Officer: Brian Will -- info@jobintel.com (see Section 14 for EEA/UK/Swiss inquiries)

We will respond to all privacy-related inquiries within 30 days (or within the timeframes required by applicable law, if shorter).

14. Additional Disclosures for EEA, UK, and Swiss Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply to you under the General Data Protection Regulation (GDPR) and UK GDPR.

14.1 Data Controller

JobIntel LLC is the data controller responsible for your personal data. Our Data Protection Officer can be reached at:

Brian Will, Data Protection Officer
Email: info@jobintel.com

14.2 Legal Bases for Processing

We process your personal data on the following legal bases under GDPR Article 6:

14.3 Your GDPR Rights

In addition to the rights described in Section 9, you have the following rights:

• Right to data portability (Art. 20) -- you can export your data in a structured, commonly used, machine-readable format (CSV/ZIP) from your account settings
• Right to restriction of processing (Art. 18) -- you can request that we restrict processing of your data in certain circumstances (e.g., while we verify the accuracy of your data following a correction request)
• Right to object (Art. 21) -- you can object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests. You can object to processing for direct marketing at any time without restriction.
• Right to withdraw consent -- where processing is based on consent (resume analysis, behavioral analytics), you can withdraw consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint -- you have the right to lodge a complaint with a supervisory authority in your country of residence. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en

To exercise any of these rights, contact our Data Protection Officer at info@jobintel.com. We will respond within 30 days, as required by GDPR Article 12.

14.4 International Data Transfers

JobIntel is based in the United States. When you use our Service, your personal data is transferred to and processed in the United States. We also transfer data to our third-party processors (Anthropic, OpenAI, Stripe, AWS) which process data in the United States.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on the following safeguards:

• EU-U.S. Data Privacy Framework (DPF) -- where our processors are certified under the DPF, transfers are covered by their certification
• Standard Contractual Clauses (SCCs)-- for processors not covered by the DPF, we use the European Commission's Standard Contractual Clauses (2021/914) as the transfer mechanism
• Supplementary measures -- we implement additional technical safeguards including encryption in transit (TLS 1.2+) and at rest (AES-256), access controls, and data minimization

14.5 Data Processing Agreements

We maintain Data Processing Agreements (DPAs) with all third-party processors that handle personal data on our behalf, as required by GDPR Article 28. These agreements ensure processors are contractually bound to process data only on our instructions and implement appropriate technical and organizational security measures.

14.6 Automated Decision-Making

JobIntel uses AI-powered scoring (credibility scores, match scores, readiness scores) to help you evaluate job listings. These scores are informational tools designed to assist your job search -- they do not constitute automated decision-making with legal or similarly significant effects on you as defined under GDPR Article 22. You are always free to apply to any job regardless of its scores, and scores do not restrict your access to any feature of the Service.

15. Additional Disclosures for California Residents

If you are a California resident, the following additional provisions apply to you under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

15.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

15.2 Business Purposes for Collection

We collect and use personal information for the business purposes described in Section 3 of this policy: providing the Service, AI processing, communications, support, analytics, security, and legal compliance.

15.3 Sale and Sharing of Personal Information

We do not sell your personal information as defined by the CCPA.

We do not "share" your personal information for cross-context behavioral advertising as defined by the CPRA.

The cross-user intelligence features described in Section 5 use anonymized, aggregate data that does not constitute "personal information" under the CCPA. No individual user can be identified from this aggregate data.

15.4 Your CCPA Rights

In addition to the rights in Section 9, California residents have the right to:

• Right to know -- request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties with whom we share it
• Right to delete -- request deletion of your personal information (subject to certain exceptions)
• Right to correct -- request correction of inaccurate personal information
• Right to opt-out of sale/sharing-- we do not sell or share personal information, so this right does not currently apply. If our practices change, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to non-discrimination -- we will not discriminate against you for exercising your CCPA rights. All Service tiers and pricing are available equally regardless of whether you exercise privacy rights. Differences between free and paid tiers are based on feature access, not on the amount of personal information provided.

To exercise your rights, contact us at support@jobintel.com or use the data export and account deletion features in your account settings. We will verify your identity before processing your request. We will respond within 45 days, as required by the CCPA.

15.5 Authorized Agents

You may designate an authorized agent to make a CCPA request on your behalf. We will require the agent to provide proof of authorization and may require you to verify your identity directly.

16. Do Not Track

Some browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals because there is no industry-standard interpretation. However, you can control analytics tracking through our cookie consent controls (see Section 10).

This Privacy Policy applies to the JobIntel platform and browser extension operated by JobIntel LLC. It does not apply to third-party websites, services, or applications that may be linked from our Service.