Privacy notice

Beta service. Last updated 2026-09-20.

What we store

• Your account: email address, display name, a salted password hash, sign-in sessions.
• Your career evidence: the CV text you upload or paste, the facts extracted from it, and your verification decisions.
• Your preferences and sources: keywords, locations, the job feeds and mailbox label you configure.
• Postings and evaluations: job postings collected from the sources you enable, and the AI's assessment of each one against your verified facts.
• Application drafts you request, with every version you save.
• Connection secrets: your OpenAI API key and mailbox (IMAP) credentials, if you add them. They are encrypted at rest and used only to act on your behalf.
• Telegram: the chat ID of the private chat you link.

How it is used

Only to run the service for you: collecting postings, evaluating them against your evidence, sending you the alerts you enable, and drafting documents you explicitly request. Nothing is submitted to employers. No other member can see your workspace. The service owner administers the server and database where your data is stored; in running the service the owner looks only at account-level activity (for example whether a CV was verified or how many drafts were requested) and does not read your CV contents or drafts except to resolve a support request you make.

Third parties

• OpenAI, under your own API key: (a) the full text of the CV you upload or paste is sent once to extract facts with source quotes; (b) your verified facts and each posting are sent to produce evaluations and drafts; (c) if you connect a mailbox, the text of each job-alert email in your JobsFindAI label is sent to extract the postings it lists; (d) if you add a careers-page source, that page's text is sent to identify the postings on it. Requests are sent with storage disabled on OpenAI's side.
• The help assistant sends your question, the recent turns of that conversation and, when you are signed in, a short non-sensitive summary of your account status (for example whether a key is set and how many sources you have) to OpenAI under the service owner's key, with storage disabled. Conversations are not stored by the service.
• Job sources (ReliefWeb, employer boards, feeds, your mailbox) are read on your instruction.
• Telegram and email providers deliver the alerts you enable.
• The hosting provider stores the encrypted database on infrastructure in the EU.

Usage analytics and session replay

To find where the product confuses people, we use PostHog (hosted in the European Union) for page views, feature usage, error reports and session replay. Replay records how the interface is used: clicks, scrolling and navigation. Every input field is masked before recording, and text that could identify you or describe your career (your email, CV facts, postings, drafts, assistant conversations) is hidden in the recording. You are identified only by a random account ID, never by name or email. No CV contents, API keys or passwords are sent to PostHog. Browsers that send a "Do Not Track" signal are not recorded. Recordings are kept for the period set in PostHog (30 days by default) and reviewed only to diagnose usability problems.

Your control

You can remove your API key, mailbox credentials and Telegram link at any time under Account. To export or delete your whole workspace, contact the service owner at the address you received your invitation from; deletion is completed within 14 days.

Retention

Postings that disappear from feeds and were never shortlisted are archived after 45 days. Accounts inactive for 12 months may be deleted after notice.