Privacy Policy — Jobsmith

1. Who We Are

Jobsmith (“we,” “us,” or “our”) is an AI-powered job application document service operated by its individual developer. Our app is available at app.jobsmith.work. You can reach us at hello@jobsmith.work.

2. Information We Collect

We collect the following categories of information when you use Jobsmith:

Account information — your email address and password (stored via Supabase Auth).
Profile information — your name, phone number, and any other details you enter in your profile.
Uploaded documents — resume files and any other documents you upload to the app.
Job descriptions — text or screenshots of job postings you submit to generate documents.
Conversation history — your question-and-answer exchanges with the AI during a generation session.
Generated documents — the tailored resume, cover letter, and interview prep guide we produce for you.
Usage data — number of documents generated, timestamps, and basic app interaction logs.
Payment information — billing details processed by Stripe. We do not store card numbers; Stripe handles all payment data.

3. How We Use Your Information

To generate tailored job application documents on your behalf.
To manage your account, authentication, and subscription status.
To process payments and enforce free-tier limits.
To respond to support requests and communications.
To improve the service (aggregate, anonymized usage trends only).

We do not sell your personal data to third parties. We do not use your documents or personal information to train AI models.

4. Third-Party Services

Jobsmith relies on the following third-party services to operate:

Anthropic (Claude API)— your resume, job description, and Q&A answers are sent to Anthropic's API to generate document content. Anthropic's privacy policy applies to data processed by their API.
Supabase — we use Supabase for authentication, database storage (your profile, generation history), and file storage (uploaded documents, generated files).
Stripe — payment processing for Pro subscriptions. Stripe stores your billing information under their own privacy policy.
Google Cloud Platform (GCP) — our backend API is hosted on GCP Cloud Run in the us-central1 region.
Vercel — our frontend is deployed and served via Vercel.

5. Data Retention

We retain your account data and generated documents for as long as your account is active. Generated document download links expire after 1 hour for security reasons, but the underlying files remain stored in your account until you delete them or delete your account.

6. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable privacy laws, including the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and all associated data.
Export your data in a portable format.
Object to or restrict certain processing.

To exercise any of these rights, contact us at hello@jobsmith.work or use the account deletion feature in the app under Account Settings.

7. Security

We use industry-standard security practices including encrypted connections (TLS), row-level security in our database, and short-lived signed URLs for file downloads. No system is perfectly secure; please use a strong, unique password for your account.

8. Children

Jobsmith is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy as the service evolves. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the service after an update constitutes acceptance of the revised policy.

10. Contact

Questions or concerns? Email us at hello@jobsmith.work.