Privacy Policy

Last updated: 6 September 2026

1. Who we are

We provide the service under the JobFaster.ai brand. You can contact us using the support email below.

We act as the data controller for your JobFaster account, vacancy filters and application documents. This policy covers the free service and, where you use them, resume and application preparation features. Paid subscriptions are not yet available; the Paddle payment processing described below applies when checkout launches.

2. What we collect

Email address — when you sign up for the digest or create an account.
Your filters — job titles/keywords and locations you set (including as an anonymous guest, stored against a browser session identifier).
Account & sign-in — if you sign in with Google, your basic Google profile (name, email) via OAuth; otherwise your login credentials.
Resume and application data — text extracted from your uploaded resume, profile details and answers you provide, generated resumes and cover letters, and application statuses you record.
Payment data — when checkout launches, Paddle will collect payment and billing details. We will receive the identifiers and transaction, subscription and refund information needed to fulfil purchases and provide support. We do not store card numbers or security codes.
Support correspondence — messages and attachments you send us to resolve product, payment or privacy requests.
Email engagement — delivery, bounce and complaint events from our email provider, used to keep our sending healthy.
Technical data — IP address (stored against your account or guest profile, plus your browser and server logs) for security and abuse prevention.
Usage analytics — which pages you open on our site, the site that referred you, and your browser, operating system, device type, screen size, language and approximate location (country and city) derived from your IP address. See §10.

3. How we use your data

To send the daily digest you opted into, match vacancies to your filters, run your account, process payments for paid tiers, maintain email deliverability (suppressing addresses that hard-bounce or complain), and secure the service. When you request resume processing or an application package, we use your profile and the vacancy description to prepare the result. We also use relevant records to provide support, manage your package allowance and handle refunds. We do not submit applications to employers or collect employer replies on your behalf as part of Assisted Apply.

4. Legal bases (GDPR)

Consent — for the digest emails (collected via double opt-in; you can withdraw any time).
Contract — to provide the features you request, take steps at your request before a purchase, and fulfil a paid subscription when available.
Legal obligations — to keep records and respond to lawful requests where required.
Legitimate interests — security, abuse prevention, and basic service operation.

5. Email consent & unsubscribe

Digest emails use double opt-in: after you give your address we email a confirmation link, and we only send once you confirm. Every email includes a one-click unsubscribe (and a List-Unsubscribe header); you can also unsubscribe from account settings. Unsubscribing stops digest emails immediately.

6. Where your data is processed & international transfers

Our hosting, account database and self-hosted analytics run on DigitalOcean in New York, United States. We use Resend for service email and Google for optional sign-in. When you request resume parsing or application preparation, we send relevant resume/profile information and, for a package, the vacancy description to Anthropic's API to generate the result. Avoid including sensitive information that is not needed for your application.

When paid checkout launches, Paddle will process payment and billing information under its own privacy policy. Our service providers may process data in the United States and other countries outside your country of residence. Contact us for information about the applicable transfer safeguards. We do not sell your personal data. Paddle Privacy Policy.

7. Retention

We retain your profile and prepared documents while your account is maintained so that you can use and download them. Unsubscribing from the digest or cancelling a paid subscription does not itself delete your account or documents. To request deletion, email our privacy contact. We delete or anonymize data in response to a valid request, subject to records we must retain for legal obligations or resolving disputes; backup copies are removed through the backup retention cycle.

IP addresses stored on your account are cleared after 90 days of inactivity. Unconfirmed guest accounts without configured filters are removed after about 30 days. Service providers, including Paddle for its payment records, apply their own retention obligations and policies.

8. Your rights

Subject to applicable law, you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time — email privacy@jobfaster.ai. EU/EEA residents may also lodge a complaint with their local supervisory authority.

9. Cookies

We use a session cookie to keep you logged in and remember your guest filters and language choice. We do not use third-party advertising or cross-site tracking cookies, and our analytics sets no cookies at all (§10).

10. Analytics

We measure how the site is used with analytics software we run ourselves (Umami), hosted on our own server alongside the service. No third-party analytics or advertising provider is involved, and this data is not shared with anyone.

It sets no cookies and does not follow you across other websites. It records the page views and technical details listed in §2, and derives an approximate location from your IP address — the IP address itself is not stored by our analytics. Repeat page views within a visit are grouped under an identifier calculated from your IP address and browser details; that identifier is stored, the inputs are not. We use this only to see which pages people find useful and where they get stuck. Legal basis: our legitimate interest in operating and improving the service (§4).

11. Security

Data is served over HTTPS and access to production systems is restricted. No method is 100% secure, but we take reasonable measures to protect your data.

12. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

13. Changes

We may update this policy; we will change the "Last updated" date above and, for material changes, notify you.

14. Contact

Questions or requests: privacy@jobfaster.ai.