Privacy Policy

Last updated October 17, 2026

This describes exactly what Job Hunter stores, who it goes to, and how to get rid of it. It is written to be read, not to be impenetrable.

What we collect

Because you gave it to us

• Your email address — the account identifier. You sign in with a link sent to it, or with the Google account that uses it.
• Your profile — name, headline, country and city, target countries, languages, years of experience, and any links you add (LinkedIn, portfolio, GitHub).
• Your preferences — preset, target titles, stack, score cut-off, message tone and proof points, plus your email and language settings.
• Your CV, if you upload one — the PDF is read once to suggest profile fields and is never stored. If you choose to keep it, a short summary of your experience is saved on your profile; you can edit or remove it in Account.

Because you used the service

• Your daily boards — the roles selected for you, their scores, and the messages drafted for each.
• Your activity — which messages you marked as sent, saved or skipped, your edits to them, streaks, totals and run times.
• Your applications — the stages, notes, follow-up dates and follow-up drafts you keep in your pipeline.
• Billing records — plan, amount, payment reference, and when access was granted. Mobile money transfers happen on your provider's systems; we never see or store card or wallet credentials.

What we deliberately do not collect

• No passwords — sign-in is by emailed link or Google.
• No card or mobile money credentials.
• No advertising trackers, no third-party analytics pixels, no cross-site profiling.
• No data about the people suggested as contacts. Those are search links generated from the company and job title. We do not fetch, store, or infer anything about individuals, and we never invent a name.

Cookies

A signed session cookie keeps you logged in, and two small preference cookies remember your language and light or dark theme. None is used for tracking or advertising, and there are no third-party cookies.

How your data is used

Only to run the service:

• to sign you in and keep you signed in;
• to score jobs against your profile and draft messages in your voice;
• to send you your sign-in link and service email, and the morning board, weekly recap or follow-up reminders if you turn them on;
• to grant and track paid access;
• to monitor cost and abuse in aggregate.

We do not sell your data, rent it, or share it for anyone else's marketing.

Who it is shared with

Only the processors needed to operate:

• Vercel — hosting and encrypted storage of your account data.
• AI model providers, via Vercel AI Gateway — to score roles and draft messages, we send the relevant parts of your profile and the job posting. We do not send your email address or billing details.
• Resend — to deliver sign-in and service emails. Receives your email address.
• Google — only if you choose to sign in with Google. We receive your name and verified email.
• Your mobile money provider — processes the payment itself. We receive only a reference and a status.

We may also disclose data where the law requires it.

How long it is kept

• Daily boards — roughly the last 30 days. Older boards are deleted automatically.
• Sign-in links — single use, and expire 20 minutes after being issued.
• Closed applications — deleted 180 days after they close.
• Profile, stats and billing history — kept while your account exists, so your streak and payment record survive.

Your rights

Whatever your jurisdiction, we will honour these:

• Access and portability — download everything we hold on you, any time, from Account.
• Correction — most of it is editable yourself on the profile page.
• Deletion — delete your account yourself from Account. It is immediate and not reversible. Payment receipts are kept where the law requires it, detached from your name and email.
• Objection — ask and we will explain what we can do.

Email kapolw@gmail.com from the address on the account. We aim to respond within 30 days.

Security

Data is stored in private, access-controlled storage and served over HTTPS. Sessions are signed tokens in an HttpOnly cookie. There are no passwords to steal, which removes a whole class of risk — but it makes your email inbox the key to your account, so protect it.

No service is perfectly secure. If a breach affects you, we will tell you.

International transfers

Our providers operate globally, so your data may be processed outside your country, including in the United States and the European Union.

Children

The service is not intended for anyone under 16. We do not knowingly collect data from children, and will delete it if we discover we have.

Changes

We will update the date above when this changes. Material changes will be announced by email or in the app.