JobMatch AI

Privacy Policy

Last updated: 6 April 2026

Summary: We collect your CV text and job preferences to power job matching. Your data is processed by Claude AI (Anthropic) and stored session-based. We do not sell your data. You can clear your data at any time.

1. What Data We Collect

We collect the following information when you use JobMatch AI:

  • CV / Resume data: The text content of your uploaded CV file, including your name, contact details, work history, education, skills, and any other information contained in your CV.
  • CV file: The original PDF or DOCX file you upload, stored in order to attach it to application emails.
  • Job preferences: Your desired job title, location, contract type, salary expectations, and other search preferences.
  • Job search queries: The search parameters used to find job listings on your behalf.
  • Application emails: The recipient email addresses and content of any job application emails sent through the Service.
  • Session identifier: A randomly generated identifier stored in your browser's localStorage to associate your data across the session.

2. How We Use Your Data

  • AI processing: Your CV text is sent to Anthropic's Claude API to extract structured information (name, skills, experience) and to score job listings for compatibility.
  • Job search: Your job preferences are used to query third-party job APIs (Adzuna, RemoteOK) to find relevant listings.
  • Email generation: Your CV data and job listing details are sent to Claude AI to generate personalized cover letter emails.
  • Email sending: Your application emails are sent via Resend with your CV attached.
  • Application tracking: Sent application details are stored so you can track your job search progress.

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

  • Anthropic Claude API: Used for AI processing of CV data and email generation. Data is sent to Anthropic's servers. Anthropic Privacy Policy
  • Supabase: Used for database storage and file storage of CV files and application data. Supabase Privacy Policy
  • Resend: Used to send application emails with CV attachments. Resend Privacy Policy
  • Adzuna API: Used to search for job listings. We send your job title, location, and preferences to Adzuna.
  • RemoteOK API: Used to search for remote job listings. Public API, no personal data sent.

4. Data Retention

Your data is retained as follows:

  • Browser localStorage: CV data and preferences are stored in your browser and remain until you clear them or start a new session using the "Start New Search" button.
  • CV file in storage: Your uploaded CV file is stored for the duration of your session to enable email attachments.
  • Application records: Records of emails sent are stored in our database for a period of 90 days, after which they are automatically deleted.
  • Job search data: Job search queries and results are stored for 30 days for analytics and to improve the service.

5. Your Rights

You have the following rights:

  • Clear your session: Use the "Start New Search" button in the Dashboard to clear all locally stored data. This will remove your CV data, preferences, and session identifier from your browser.
  • Access: You can export all your application data using the "Export Data" button in the Dashboard.
  • Deletion: To request deletion of data stored in our database, please contact us with your session identifier.
  • GDPR / data protection: If you are in the European Economic Area, you have additional rights under GDPR including the right to access, rectify, erase, and port your personal data. Contact us to exercise these rights.

6. Security

We implement appropriate technical and organizational measures to protect your data. CV files are stored in encrypted storage. API communication is encrypted via HTTPS. However, no system is completely secure, and we cannot guarantee absolute security. Do not include sensitive financial information (e.g., bank account numbers, SSN) in your CV or preferences.

7. Cookies and Local Storage

We do not use tracking cookies. We use browser localStorage to store your session data (CV profile, preferences, session ID) to enable the multi-step onboarding flow without requiring account registration. This data stays on your device and is not sent to third parties except as described in this policy.

8. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the website. We will respond within 30 days.