Privacy Policy
At jobja (jobja.org), we respect your privacy and protect your professional job application data. This Privacy Policy details our data collection, security safeguards, Google OAuth user data commitments, and your individual privacy rights.
1. Data Controller & Principles
jobja ("we", "us", or "our") operates the smart job application assistant platform hosted at jobja.org and related subdomains.
We adhere to the core principles of GDPR and international privacy standards: lawfulness, fairness, transparency, data minimization, and purpose limitation.
- Direct inquiry contact: [email protected]
- Headquarters / Administration: jobja, Inc.
- Zero data monetization: We never sell, rent, or trade your personal data.
2. Google API & OAuth User Data Disclosure
When you choose to sign in to jobja using Google OAuth, we access basic profile information provided by Google with your explicit permission.
Specifically, we receive your email address, full name, and avatar profile photo URL to create or authenticate your jobja account.
- Strict Purpose Limitation: Google User Data is used solely to authenticate your identity, generate session tokens, and manage your account.
- Zero Advertising / Profiling: We NEVER use Google user data for advertisements, surveillance, or marketing profiling.
- Zero Model Training: Google User Data and confidential application documents are NEVER used to train generalized artificial intelligence or large language models.
- Zero AI NCII / Intimate Imagery: Google APIs, user data, and AI features are NEVER used to create, process, or distribute Non-Consensual Intimate Imagery (AI NCII), sexually explicit media, or deepfakes.
- Compliance with Law & Third-Party Rights: We strictly comply with Google APIs Terms of Service, applicable privacy laws, and third-party rights.
- No Third-Party Resale: We do not transfer or disclose Google user data to data brokers or advertising exchanges.
3. Information We Collect
We collect information required to provide our job application tracking and AI assistance services:
- Account Data: Email address, name, login authentication credentials, and subscription status.
- Job Application Materials: Raw job posting descriptions, company names, job titles, salary estimates, application stage timestamps, resumes, and cover letter references.
- Technical Logs: IP addresses (for rate limiting and fraud prevention), browser user agents, and security diagnostic events.
4. Third-Party Data Processors
To operate our distributed, high-performance platform, we partner with industry-leading infrastructure sub-processors under strict data processing agreements:
- Vercel: Frontend edge deployment, CDN caching, and serverless runtime hosting.
- Stripe: PCI-DSS Level 1 certified payment processing and subscription billing.
- Coolify & Cloud Infrastructure: Dedicated backend application servers with row-level data isolation.
- LLM Inference Providers (Google Gemini & OpenAI): Ephemeral text processing with Zero Data Retention policies enabled.
5. Data Retention, Portability & Deletion Rights
You retain full ownership and control over your personal career records. You have the right to access, rectify, export, or permanently delete your data at any time.
Upon receiving an account deletion request or deleting records via the user dashboard, all associated job records, resumes, and user profile data are permanently purged from active databases.
- Request full erasure: Send an email from your registered address to [email protected] with the subject "Data Erasure Request".
- Export data: Export your applications into standard structured formats directly from the dashboard.
6. Security Safeguards & Contact
We implement enterprise-grade security controls including TLS 1.3 encryption in transit, encrypted database storage at rest, strict JWT session isolation, and proactive rate-limiting defenses.
If you have questions regarding this policy or our data handling practices, please contact our Data Protection team at [email protected] or [email protected].