Effective April 29, 2026

Privacy Policy

This policy explains how Jobs That Fit handles resumes, profile data, job preferences, applications, generated AI content, payments, email, retention, deletion, and GDPR rights.

What we collect

Jobs That Fit collects the information needed to create your account, parse your resume, match jobs, and run the product.

  • Account data such as your email address, name, authentication identifier, plan, and account settings.
  • Resume files, extracted resume text, structured profile fields, contact details, employment history, projects, skills, education, languages, links, and parser warnings.
  • Job preferences such as desired roles, excluded roles, skills, work type, location, country, timezone, pay, hours, languages, industries, saved companies, and notification settings.
  • Saved jobs, application tracker entries, notes, status history, follow-up dates, generated cover letters, resume suggestions, and usage events.
  • Basic analytics events such as signup started, resume upload started, profile confirmed, first match viewed, job saved, apply link clicked, and upgrade clicked.

How we use data

  • To parse resumes into an editable profile and let you confirm what is accurate.
  • To find, normalize, deduplicate, score, and explain job matches.
  • To store private resume files and profile data for your account.
  • To send account emails, digests, match alerts, billing notices, and follow-up reminders you request.
  • To provide paid AI features such as cover letters, job summaries, instruction detection, and resume improvement suggestions.
  • To monitor reliability, prevent abuse, apply plan limits, and improve product quality.

AI processing

AI providers may process resume text, profile fields, job posts, and generated content only to provide the requested product features. We do not ask AI providers to train models on your resume data. AI output can be wrong, so you should review it before using it.

  • Current AI providers: OpenAI and Anthropic.
  • AI features must not invent experience, employers, technologies, seniority, or qualifications.

Service providers

  • Vercel hosts the Next.js application and deployment infrastructure.
  • Supabase provides Postgres database, authentication, and private resume storage.
  • Stripe processes subscription billing and payment details. We do not store full card numbers.
  • Resend sends transactional and notification emails.
  • Inngest, Trigger.dev, QStash, Railway, or a similar worker provider may run background job discovery and notification tasks.
  • Analytics tooling may record product events without selling resume data.

Data retention and deletion

We keep account and product data while your account is active or as needed to provide the service, meet legal obligations, prevent abuse, and maintain billing records. You can request deletion of your resume, profile, generated content, or account. Some billing and security records may be retained where legally required.

Export and portability

You should be able to export account metadata, profile data, resume metadata, preferences, saved jobs, applications, generated content, notifications, usage events, consent history, and subscription metadata. Binary resume files may be handled separately from the JSON export.

GDPR rights

If GDPR applies to you, you can request access, correction, deletion, restriction, portability, objection, and withdrawal of consent where applicable. You can also contact your local data protection authority.

Marketing email

Product emails needed for account, security, billing, and requested notifications are separate from optional marketing updates. Marketing opt-in is optional and can be withdrawn later.

What we do not do

  • We do not sell user resume data.
  • We do not train AI models on user resumes.
  • We do not submit job applications for you.
  • We do not automate LinkedIn or bypass platform restrictions.
Questions about your data? Contact mattias@raver.dk.