Privacy Policy

This Privacy Policy explains how Jobalina (“Jobalina,” “we,” “our,” or “us”) collects, uses, shares, and protects your information when you use our website at www.jobalina.com and related services (collectively, the “Service”). By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information

When you create an account we collect your email address, name (if provided), and authentication credentials. If you sign up via a third-party provider (e.g., Google), we receive basic profile information from that provider.

Resume and profile data

You may upload a PDF resume and, optionally, LinkedIn profile data. We store and process this content to generate your tailored job application materials.

Job posting data

When you submit a job posting URL, we fetch and extract the text of the job description to use in generating your tailored outputs. We store this data linked to your application history.

Generated outputs

We store the tailored resumes, cover letters, outreach roadmaps, and personal pitches we generate for you so you can access them later.

Payment information

Payments are processed by Stripe. We do not store your full card number, CVV, or banking details. We receive a Stripe customer ID, subscription status, and basic billing records (amount, date, last four digits of card) for account management.

Usage and analytics data

We collect information about how you use the Service, including pages visited, features used, session duration, and clickstream data. This is collected via PostHog and Google Analytics. We also collect standard server logs including IP address, browser type, and request timestamps.

Advertising data

If you visit our site after clicking an ad, the Meta Pixel may log a conversion event (page visit, sign-up) to measure advertising effectiveness. This uses standard browser cookies and does not share your resume content with Meta.

2. How we use your information

• Providing the Service: parsing your resume, fetching job descriptions, and generating tailored application materials via AI.
• Account management: maintaining your profile, application history, and subscription status.
• Payments: creating and managing your Stripe subscription, sending receipts, and handling billing inquiries.
• Email communications: sending transactional emails (account confirmation, password reset, billing notices, and opt-in email sequences) via Resend. You can opt out of non-transactional emails at any time.
• SMS communications: if you opted in at /sms-consent, we may send you relevant job-search notifications via SMS. You can opt out by replying STOP to any SMS.
• Product improvement: analyzing usage patterns to improve features, fix bugs, and measure how well the Service works.
• Security and fraud prevention: monitoring for abuse, unauthorized access, and violations of our Terms of Service.
• Legal compliance: meeting our obligations under applicable law, including responding to lawful requests from authorities.

We do not sell your personal information. We do not use your resume content or job data to train AI models.

3. AI processing

Your resume text and job description are sent to Anthropic (the maker of Claude) to generate your tailored materials. Anthropic processes this data as a data processor acting on our behalf, subject to their API data usage policies. Anthropic's API terms prohibit using API inputs to train their models without customer consent; we do not grant that consent.

We instruct the AI not to invent, fabricate, or embellish any experience, qualifications, or dates in your resume. The AI may rephrase, reorganize, and highlight content you have already provided — but it will not add content that is not already in your resume.

4. Third-party services

We share your data with the following categories of third-party service providers, each bound by appropriate data protection agreements:

We do not sell your data to these parties or permit them to use it for their own marketing purposes beyond what is necessary to deliver their services.

5. Cookies and tracking

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: required for authentication, session management, and security. Cannot be disabled.
• Analytics cookies: PostHog and Google Analytics use cookies to measure how the Service is used. These are enabled by default but you can opt out via your browser settings or by emailing us.
• Advertising cookies: the Meta Pixel sets a cookie to measure ad conversions. It does not share your resume content with Meta.

Most browsers allow you to block or delete cookies. Doing so may affect Service functionality.

6. Data retention

We retain your account data and application history for as long as your account remains active. You can delete individual applications from your dashboard, or delete your entire account at any time from account settings.

When you delete your account, we remove your profile, uploaded resumes, generated outputs, and linked application data. Some records may be retained longer as required by law (e.g., billing receipts for tax compliance, typically 7 years) or for legitimate fraud-prevention purposes.

Anonymized, aggregated analytics data (with no personally identifiable information) may be retained indefinitely to improve the Service.

7. Your rights

Depending on your location, you may have certain rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request deletion of your personal data (right to be forgotten), subject to legal retention requirements.
• Export / portability: request your data in a structured, machine-readable format.
• Opt out of sale or sharing: we do not sell personal data, but you may contact us to limit sharing for advertising purposes.
• Withdraw consent: where processing is based on consent (e.g., SMS), you may withdraw it at any time without affecting prior processing.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell), and to non-discrimination for exercising these rights.

EEA/UK residents (GDPR): our lawful basis for processing your data is primarily contract performance (providing the Service) and legitimate interests (security, analytics). You have the rights listed above plus the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email support@jobalina.com. We will respond within 30 days.

8. Data security

We use industry-standard safeguards including TLS encryption in transit, encryption at rest for stored files, and access controls limiting who can view your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@jobalina.com.

9. Children's privacy

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If we learn that we have inadvertently done so, we will delete that information promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: