Skip to content

Privacy Policy

Privacy Policy

Effective date: [to be set on publish date] · Last updated: 2026-09-11 (draft)

Draft — under legal review.

This policy is a working draft and has not been reviewed by counsel. Items marked “Pending verification” must be confirmed before this page is treated as final, especially given users in 16 countries. This draft is not legal advice.

1. Who we are

AI Job Search is a job-search SaaS product at https://aijobsearch.io.

Pending verification

Legal entity name, jurisdiction of incorporation, and a contact email for privacy requests are not yet confirmed. No contact email is currently published on the site.

2. Data we collect

Account data. When you create an account we collect your email address and a password. Authentication is handled by Supabase (GoTrue); passwords are stored as irreversible hashes by the auth provider, never in plain text.

Profile and job-search data. To provide matching, resume tools, and application tracking, we store what you give us: your resume/CV content, work history, target roles and preferences, saved jobs, and application-tracking entries you create.

Pending verification

Exact fields in the profiles table and resume storage are not yet confirmed — including whether resumes are stored as files, parsed text, or both.

Payment data. Paid plans (Core $29.99/month, Pro $59.99/month) are processed by Stripe. We do not see or store your full card number — card details go directly to Stripe. We store your subscription tier and billing status so the product can enforce entitlements.

Pending verification

Stripe is currently in test mode; confirm before accepting real payments, and confirm what subscription metadata is stored in Supabase.

Usage and technical data. Our hosting provider (Vercel) generates standard server logs (IP address, pages visited, timestamps, user agent) for security and reliability. Signed-in sessions use cookies/local storage to keep you logged in.

Communications. If you contact us or receive product emails (e.g., new-match alerts), we process your email address and message content to respond.

Pending verification

It is not yet confirmed whether a transactional email service (for alerts/confirmations) is configured, or which provider is used.

Analytics. We do not currently claim any product analytics. Analytics tooling (PostHog/GA4) is planned but not confirmed live.

Pending verification

Do not publish analytics claims until the implementation is verified. When enabled, this section will list the provider, what events are tracked, and link its opt-out.

SMS alerts. SMS sending is not confirmed as implemented. The site no longer advertises SMS alerts.

3. How we use your data

  • Create and secure your account (authentication, email confirmation).
  • Provide the service: job matching, resume tools, application tracking, interview prep.
  • Process payments and manage your subscription tier.
  • Send service communications (security notices, receipts, match alerts you opted into).
  • Keep the service safe and working (fraud prevention, debugging, logs).
  • Improve the product in aggregate (only once analytics, if any, is confirmed).

We do not sell your personal data. We do not share your resume or profile with employers or third parties except as described in section 4.

4. Who we share data with

We share data only with the service providers needed to run the product:

  • Supabase — database and authentication (account, profile, job-search data).
  • Stripe — payment processing (billing details you enter at checkout).
  • Vercel — website hosting (technical logs).

Pending verification

Complete sub-processor list and data regions are not yet confirmed (e.g., the Supabase project region where data is stored at rest).

We will also disclose data if required by law or to protect the security of the service.

5. International users

The service is offered in 16 countries. Your data is processed on the infrastructure described above, which may be located outside your country.

Pending verification

Hosting/data-residency regions, transfer mechanisms for EEA/UK users (e.g., Standard Contractual Clauses), and whether an EU/UK representative is required are not yet confirmed.

6. Your rights and choices

You may at any time:

  • Access — request a copy of the personal data we hold about you.
  • Correct — update your profile information in the product.
  • Delete — request deletion of your account and associated personal data, subject to legal retention duties (e.g., tax/invoicing records).
  • Object / restrict — ask us to limit certain processing.
  • Portability — request your data in a portable format.

Pending verification

The privacy contact email, how deletion is executed today (manual process vs. self-serve account deletion), and backup-retention windows are not yet confirmed.

7. Data retention

We keep your account and job-search data while your account is active. If you delete your account, we delete or anonymize your personal data, except where we must retain records for legal, tax, or security reasons. Server logs are retained per our hosting provider's defaults.

Pending verification

The deletion/anonymization window (e.g., 30 days) is not yet defined.

8. Security

We use industry-standard measures: encrypted connections (HTTPS), hashed passwords via our auth provider, and role-based access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children

Pending verification

The minimum age for consumer accounts is not yet defined. Business use is 18+ only. The service is not directed at children — confirm the threshold with counsel before publishing.

10. Cookies

We use strictly necessary cookies/storage for sign-in sessions and security (e.g., Supabase auth session).

Pending verification

The full list of cookies set by the app and Supabase is not yet enumerated. Analytics/marketing cookie disclosure will be added only if/when such tools are confirmed live.

11. Changes to this policy

We will post updates on this page with a revised “Last updated” date.

Pending verification

The method for communicating material changes (e.g., email to account holders) is not yet defined.

12. Contact

Pending verification

The privacy contact email and mailing address (if required by applicable law) are not yet confirmed.