Privacy Policy

Who this applies to

This policy covers Job Hunter, including the hosted service and the public pages for pricing, terms, refunds, and privacy. Privacy questions can be sent to mikhail@girshovich.me.

Data we collect

• Account data: your email address, account creation time, admin status, login codes, email-change requests, and session records.
• Profile and search settings: roles, keywords, locations, work modes, preferred languages, current location, profile text, scoring rules, prompts, schedules, and notification settings.
• Provider credentials: OpenAI, Apify, and Resend API keys when you enter them in settings.
• CV data: uploaded PDF, TXT, or MD files, filenames, file type, file size, upload time, and CV comparison results.
• Job workflow data: fetched job posts, job descriptions, companies, locations, URLs, AI scores, rationales, summaries, duplicate status, verdict overrides, applied status, notes, blacklisted companies, and company notes.
• Operational data: run history, run status, error logs, provider/source labels, token/cost estimates, and ATS board discovery data.

How we use it

• Create and protect your account, including passwordless login and session management.
• Fetch jobs from configured providers and ATS boards, filter them against your settings, and save useful results.
• Send job posts, profile criteria, prompts, and CV content to configured AI providers when scoring, summarizing, deduplicating, or comparing CVs.
• Send login codes, email-change confirmations, test emails, and job digest emails through the configured email provider.
• Show analytics, run logs, job history, and cost estimates inside the app.
• Maintain, debug, secure, and improve the service.

Sensitive data notice

CVs, profile descriptions, prompts, notes, and job preferences can include employment history, location preferences, immigration or relocation context, and other personal details. Only upload information you are comfortable using for job-search automation.

Third-party services

Job Hunter uses third-party services only where needed to run the product. Based on the current app code, those services can include OpenAI for AI scoring, summaries, deduplication, balance checks, and CV comparison; Apify and scraping providers for job collection; Resend for email delivery; and job sources such as LinkedIn, Indeed, StepStone, Greenhouse, Ashby, and Lever.

Those providers process the data sent to them under their own terms and privacy policies. For example, AI requests can include job descriptions, your role criteria, prompt text, and, when you choose CV comparison, your selected CV.

Payments through Paddle

Public pricing, terms, and refund pages refer to Paddle for hosted payments. If you buy hosted credits through Paddle, Paddle handles checkout and payment processing. Do not enter card details directly into Job Hunter; the current app code does not include a Paddle checkout form, Paddle SDK, payment webhook route, billing table, or card-data storage.

If Paddle payment integration is enabled for the hosted service, Job Hunter should only use the billing information needed to recognize the transaction, support the account, handle refunds, and meet legal or tax requirements. Card details are handled by Paddle, not by this app.

Cookies and local storage

The app uses an HTTP-only session cookie named jh_session to keep you signed in. It also uses browser local storage for small interface preferences, such as whether a dashboard guide is open. The inspected code does not include advertising cookies or third-party analytics trackers.

API key storage

API keys entered in settings are stored in the application database as text. The current code does not add application-level encryption for those keys. Keep infrastructure access restricted, rotate keys when needed, and delete keys from settings when you no longer want the app to use them.

Retention and deletion

Account, settings, CV, job, note, and run data is kept while the account or hosted workspace exists so the app can show history and continue scheduled workflows. CV files can be deleted from settings. Other deletion, export, or correction requests can be sent to the contact email above, subject to any records that must be kept for legal, security, support, tax, refund, or payment-dispute reasons.

Your choices and rights

• Request access, export, correction, or deletion of your data.
• Change your login email, notification preferences, timezone, languages, current location, roles, prompts, and search settings.
• Rotate, revoke, or remove API keys in settings.
• Delete uploaded CVs from settings.
• Turn off email digests in profile settings.

Security

Job Hunter uses passwordless email login, expiring login codes, session records, file type and size limits for CV uploads, and profile-scoped database queries for user data. No method of storage or transmission is completely secure, and self-hosted users are responsible for their own server, database, network, backups, and access controls.

International transfers

The service and its providers may process data in countries different from where you live. This can happen when job providers, AI providers, email providers, Paddle, or hosting infrastructure operate internationally.

Changes

This policy may be updated as the product changes, especially if hosted billing, Paddle integration, analytics, or additional providers are added. The effective date at the top shows the current version.