Privacy Policy

JobKit (“we”, “our”, or “us”) operates the job-kit.app website and the JobKit Chrome Extension (“the Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1. Information We Collect

Account Information

When you register, we collect your email address and a hashed password. We do not store plain-text passwords.

Job Data

Job descriptions, titles, company names, and URLs you save through the Service (including via the Chrome Extension) are stored to power your application kits and tracker.

Resume & CV Data

If you upload a resume or CV, the file and extracted text are stored in our secure Supabase storage to generate personalised outputs. You can delete your resume at any time from your account settings.

Usage Data

We collect anonymised analytics events (e.g., “kit generated”, “application tracked”) to understand feature adoption and improve the product. We do not sell this data.

Chrome Extension

The JobKit Chrome Extension reads the visible text of job listing pages you visit only when you actively click the extension (floating button or popup). We do not track your browsing history or read pages unless triggered by you. Extracted job data is transmitted to job-kit.app and stored in your account.

2. How We Use Your Information

• To provide, operate, and improve the Service.
• To generate cover letters, resume bullets, and other kit outputs using AI.
• To send transactional emails (e.g., follow-up reminders you set).
• To analyse aggregate usage patterns and improve product quality.

3. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase – database & storage hosting (EU/US).
• OpenAI – your job description and resume text are sent to OpenAI to generate kit outputs. OpenAI does not use API inputs to train their models by default. See OpenAI API data usage policies.
• Vercel – our hosting provider processes requests on our behalf.

4. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing privacy@job-kit.app.

5. Security

All data is transmitted over HTTPS. We use row-level security (RLS) in our database so that users can only access their own data. Service role keys are never exposed to the client or extension.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@job-kit.app.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-app notice.

9. Contact

If you have questions about this Privacy Policy, contact us at privacy@job-kit.app.