Privacy Policy

1. Overview

Welcome to JobyGet ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, store, and share your personal data when you use our website, application, services, or any AI-powered workspace tools provided on JobyGet (collectively, the "Services").

2. Data We Collect

We only collect data that is directly necessary to provide, secure, and optimize your experience on our platform. The types of personal data we collect are restricted to:

• Account Data: Full name, email address, password, sign-in activity history, and authentication provider details (collected via email/password signups or OAuth providers via Supabase Auth).
• User-Generated Content: Resume files (including PDFs you upload), cover letters, portfolio content, and application tracking records.
• AI-Assisted Metadata & Analysis: Resume evaluations, score sheets, suggested bullet points, action plans, and structural feedback generated by our analysis engine.
• Subscription & Transactional Data: Plan details (e.g., Free, Plus, Pro), subscription status, and billing system tokens managed securely through our subscription integration.
• Cookies & Session Metadata: Technical identifiers such as session-state parameters and browser theme preferences to customize navigation and routing settings.

3. How We Use and Share Your Information

Your personal information is processed to facilitate resume building, ATS-friendly optimization, and career document synthesis. We explicitly share data with the following essential third-party service providers:

4. Legal Basis, Data Retention, and Security

• Legal Basis for Processing: We process your information primarily to fulfill our contract with you (providing the Services requested), and where necessary, for our legitimate interests (improving performance, fixing bugs) or to comply with applicable legal mandates.
• Data Retention: We store your personal information and documents for as long as your account remains active. If you delete your account, we trigger automated routines via Supabase on-delete cascades to purge your primary record, stored documents, and related metadata from our production databases.
• Data Security Measures: We employ standard cryptographic protocols to ensure data is encrypted both in transit (using HTTPS/TLS) and at rest. Access controls and strict row-level security (RLS) policies are active within our databases to restrict resource access strictly to authorized users.

5. Your Privacy Rights (Access, Deletion, and Export)

Depending on your jurisdiction (such as the EU/EEA under GDPR or various state-level privacy acts), you hold specific rights regarding your personal information, including:

• The right to request access and obtain copies of your stored personal information.
• The right to request correction or updates to any inaccurate or incomplete profiles.
• The right to request full erasure and absolute deletion of your personal account files.
• The right to export your resume documents in standard formats (such as PDF).

To exercise any of these rights, please contact us at privacy@jobyget.com. We will respond to your requests in accordance with applicable timeline standards.

6. International Data Transfers

By accessing our Services, you acknowledge that our third-party servers, databases, and AI processing infrastructure (including Supabase, Polar.sh, and Google Gemini API) may operate in the United States or other global regions outside your home country. We implement proper data safeguards and standard contractual clauses where necessary to protect your information.

7. Children's Privacy (Under 13 / Under 16)

Our Services are not designed, developed, or intended for use by children under the age of 13 (or under 16 in certain jurisdictions applying strict GDPR standards). We do not knowingly collect, parse, or maintain personal information from individuals under these ages. If you are under the age of 13 (or 16 respectively), please do not sign up for our Services or transmit any documents. If we discover we have inadvertently stored data for a child beneath these ages, we will immediately delete that information.