Your Privacy Matters

1. User Profile Data

When you create an account and set up your profile, we collect and store:

• Full name, email address, and phone number
• Location information (city, state, country, and address)
• Professional title and work experience history
• Education history, including schools, degrees, and dates
• Skills, languages, and certifications
• Resume and cover letter files
• Portfolio links and social media profiles (LinkedIn, GitHub, etc.)
• Work authorization status and visa sponsorship requirements
• Job preferences (salary expectations, start date, preferred work location)
• Optional demographic information (for EEO compliance when applying to jobs)

2. Job Application Data

We automatically track and store information about your job applications:

• Job titles, companies, and descriptions
• Job URLs and unique identifiers
• Application dates, times, and status updates
• Custom resumes generated for specific applications
• Notes and follow-up information you add
• Communication history related to applications

3. Authentication & Account Data

We use Supabase for secure authentication and store:

• Login credentials (securely hashed using industry-standard encryption)
• OAuth tokens (for Google and GitHub sign-in)
• Session information and authentication tokens
• Account creation and last login timestamps

4. Usage & Analytics Data

To improve our service, we collect:

• Extension settings and user preferences
• Feature usage patterns (e.g., custom resume generation, cold email tools)
• Error logs and debugging information (to fix bugs and improve performance)
• Device and browser information
• Application statistics (total applications, response rates, streaks)

5. Contact Discovery Data (Cold Email Feature)

When you use our cold email feature:

• Company domain names and job URLs you provide
• Contact names, job titles, and email addresses discovered through Snov.io
• Generated email content (subjects and bodies)
• Email send history and contact interaction data

Primary Uses

• Autofill job applications: We use your profile data to automatically fill out job application forms on LinkedIn, Workday, and Greenhouse
• Custom resume generation: We use AI to generate tailored resumes based on specific job descriptions and your profile
• Application tracking: We track which jobs you've applied to, preventing duplicate applications and providing analytics
• Cold email outreach: We help you discover and contact recruiters and hiring managers with personalized emails
• Authentication: We verify your identity to protect your data and ensure only you can access your account
• Analytics & insights: We provide statistics on your job search progress, including application streaks and response rates
• Service improvement: We analyze usage patterns to improve features and fix bugs
• Customer support: We use your information to respond to your inquiries and provide assistance

Data Storage & Security

• All user data is securely stored in Supabase (a PostgreSQL-based database with enterprise-grade security)
• Data is encrypted in transit using HTTPS/TLS protocols
• Data at rest is encrypted using AES-256 encryption
• Authentication uses industry-standard security practices (bcrypt hashing, secure session tokens)
• We implement Row-Level Security (RLS) policies to ensure users can only access their own data
• Regular security audits and updates are performed

Supabase (Database & Authentication)

We use Supabase for:

• User authentication and account management
• Database storage for all user data
• File storage for resumes and cover letters
• Real-time data synchronization between extension and web app

Privacy Policy: https://supabase.com/privacy

OpenRouter (AI Service)

When you use custom resume generation or cold email features:

• Your profile data and job description are sent to OpenRouter's API
• OpenRouter uses AI models (Qwen) to generate customized content
• No data is stored by OpenRouter after generation
• All API calls are encrypted and secure

Privacy Policy: https://openrouter.ai/privacy

Snov.io (Contact Discovery)

When you use the cold email feature:

• Company names and domains are sent to Snov.io to discover contact information
• Snov.io searches their database for recruiter and hiring manager contacts
• Email addresses and contact details are returned to our service
• We do not share your personal profile data with Snov.io

Privacy Policy: https://snov.io/privacy-policy

Job Platform Websites

The extension operates on:

• LinkedIn (linkedin.com)
• Workday sites (*.workday.com, *.myworkdayjobs.com)
• Greenhouse (*.greenhouse.io)

We do not collect data from these sites beyond what you explicitly provide in your profile. We only interact with these sites to autofill forms when you initiate an application.

Children's Privacy

JobPly is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected information from a child under 18, we will delete it immediately. If you believe we have collected information from a child under 18, please contact us at contact@jobply.ai.

International Users

Our services are hosted in the United States. If you are accessing JobPly from outside the US, please be aware that:

• Your data will be transferred to and stored in the United States
• US data protection laws may differ from those in your country
• We comply with applicable international data transfer requirements
• For EU users, we implement appropriate safeguards for GDPR compliance

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

European Users (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time