Privacy

Last updated: 2026-04-28. Plain-English first; the legalese follows.

Plain English

We are an AI-assisted job search tool. The honest version: when you upload a resume, paste your story, link your GitHub, swipe through jobs, or practice an interview, that data goes to (a) the database on the server you're connecting to and (b) the local Ollama model on the same machine that's parsing it. By default, no data is sent to a third-party LLM provider.

The Job Listings API and ATS data we ingest is from publicly-available sources (Greenhouse, Lever, Ashby, Workable, SmartRecruiters, USAJobs, Adzuna). We don't scrape behind logins or paywalls. Glassdoor reviews are explicitly excluded.

What we collect

  • Profile data: resume text, portfolio docs, free-text answers, GitHub username (if you provided one).
  • Behavior: which jobs you swipe yes/no/save/apply on, application status updates you make, interview practice transcripts.
  • Reviews: any company or interview-experience reviews you write.
  • Cookies: a single session cookie (job_app_profile_id) so we know which profile is yours.
  • Logs: standard server logs (timestamps, paths, status codes). No content is logged by default.

What we do NOT collect

  • Third-party tracking pixels, analytics scripts, ad networks.
  • Biometrics, voice recordings, video, location.
  • Anything from outside the local instance.

AI use

Profile synthesis, match scoring explanations, interview chat + feedback, cover-letter generation, and review moderation all run on a local Ollama model (e.g. qwen2.5:14b). The model runs in the same process tree as the app on the same machine; nothing leaves it. If you swap the host (OLLAMA_HOST) to a remote endpoint, that remote endpoint will see the prompts — your call.

Bias audits run on synthetic profiles with names from research-validated demographic clusters (Bertrand & Mullainathan 2004). The full audit method and results are public at /admin/bias-audit.

Sharing

We don't sell or share your personal data. Reviews you submit are public on this site. Aggregate data (anonymous distributions, salary medians) may be displayed or exported via the API once that ships.

Your rights (GDPR / CCPA)

  • Access / export: ask us for everything we have on you; we'll send a JSON dump.
  • Delete: ask us to delete your profile and we'll wipe it within 30 days.
  • Correct: the /profile/edit page lets you override any field directly.
  • Opt out: stop using it; clear the job_app_profile_id cookie. The next visit treats you as a new user.

Retention

Profiles persist until you delete them. Behavioral data (swipes, applications) follows the profile lifecycle. Logs roll over after 90 days.

Contact

Questions or requests: open an issue on the project repo, or contact the founder directly. Real contact details live with the operator of this instance.

This is an MVP. The privacy stance described here is binding on the operator of this instance but has not yet been reviewed by counsel. If you operate a public deployment, consult an attorney.