Privacy Policy

1. Information We Collect

• Google Sign-In / account data: your name, email address, and profile photo provided through Firebase Authentication.
• Browser extension job data: when you open the extension on a job page, the extension reads visible job metadata and page text from the active tab to extract role, company, location, and description. This data is sent to our APIs only when you trigger compatibility analysis or tracker card creation.
• Resume content: resume text you upload or paste, stored in Firestore.
• Parsed resume data: extracted information (skills, projects, experience, education, achievements) generated from your resume and stored in Firestore.
• Application tracking data: company, role, generated cover letters/cold emails/LinkedIn messages, status, and notes stored in Firestore.
• Assistant connector data (when authorized): job lead fields, descriptions, source details, status history, and drafts accessed or changed through the permissions you approve. Imported roles remain pending until you review them in the app. The GetYourJobs connector does not receive Gmail credentials or mailbox contents.
• Interview prep data: company research, questions, and answers stored in Firestore (including subcollections).
• ATS scores and resume analysis: results of resume analysis stored in Firestore.
• Generated resumes: generated resume versions, templates, and content stored in Firestore.
• Usage data: counts such as generations used, applications count, and plan status (free/pro).
• Payment metadata: subscriptionId, lastPaymentId, subscriptionStart, and subscriptionEnd stored in Firestore.

2. How We Use Your Information

• Provide sign-in, account features, and save your data securely.
• Generate AI content (cover letters, emails, LinkedIn messages, interview answers, resumes).
• Enable tracking features (applications, statuses, notes, interview prep).
• Manage free/pro access, usage limits, and subscriptions.
• Respond to support requests and improve reliability and security.

If you are located in the EU/EEA/UK, we generally rely on contract performance (to provide the Service) and legitimate interests (to secure and improve the Service) as legal bases.

3. AI Processing & Third-Party Services

When you use an AI feature, the relevant text and profile details needed for that feature are sent to its configured provider. Depending on the feature and account configuration, providers may include Google Gemini, Groq, OpenAI, or Cloudflare Workers AI. Inputs can include resume text, a job description, or profile details you chose to provide.

Processing is also governed by the selected provider's privacy and service terms. GetYourJobs does not train its own AI models on your content.

When you use resume parsing, pasted resume text is sent through an authenticated GetYourJobs Worker to Cloudflare Workers AI (currently using OpenAI gpt-oss-20b hosted by Cloudflare) to extract profile fields. The Worker does not log or store the resume text; it stores only a daily per-account usage count. Cloudflare states that standard Workers AI inference content is not retained after processing and is not used to train models, subject to legal and security exceptions. See Cloudflare's data usage terms.

When you use the Codex connector, it can read job leads and prepare selected imports for your review. If you approve the applicable permissions, it can also update tracker status or record a reply reference. The GetYourJobs connector does not access your Gmail mailbox or resume text, send messages, or submit applications. If you use a separate Gmail connection in an AI assistant, that connection is governed by the assistant and mail provider's own terms.

• Firebase (Google): Authentication and Firestore database hosting.
• Google Gemini, Groq, OpenAI, and Cloudflare Workers AI: AI processing for the features that use each configured provider.
• Razorpay: payment processing for users in India.
• Dodo Payments: payment processing for users outside India.
• Firebase Hosting: web app and marketing page hosting.
• Cloudflare: server API, assistant connector, and related storage.

4. Data Storage & Security

We store your account and product data in Firebase services (including Firestore) hosted on Google's infrastructure. We use reasonable technical and organizational measures intended to protect your information, but no method of transmission or storage is 100% secure.

If the assistant connector is enabled for your workspace, its job workspace records are also stored by Cloudflare Workers and D1, linked to your authenticated Firebase user ID. Only structured role fields selected for import are received from the assistant. The connector does not persist your Gmail message, mailbox credential, Codex account, or Claude account credential. Check the in-app connection settings to revoke an assistant's access.

Access to Firestore data is controlled through Firebase Authentication and Firestore security rules. The assistant workspace separately checks Firebase identity and scopes each D1 record to that user.

5. Payment Information

Payments are processed by Razorpay (India) or Dodo Payments (outside India). We store limited subscription metadata in Firestore (subscriptionId, lastPaymentId, subscriptionStart, subscriptionEnd) to manage your access. We do not store card numbers, CVV, UPI PINs, or other sensitive payment details - those are handled entirely by the payment processor. When an account is deleted, we retain a minimal, redacted transaction record for accounting and fraud prevention. The record can include provider references, amount, currency, billing term, payment status, and timestamps; we remove the account email, name, address, and raw provider payload from that record.

6. Your Rights & Data Deletion

• Access your data through the app (where available).
• Start account deletion in Settings, or contact us if you cannot access your account.

When deletion starts, your account is locked while a resumable process removes your profile, resumes, job leads, applications, interview preparation, saved workspace data, and connected assistant or Gmail credentials. The process advances in small steps. If it is interrupted, sign in again to resume; a saved receipt can check completion after sign-in has been removed. We do not report completion until Firebase confirms that the sign-in account was deleted.

A minimal deletion security record remains in Firestore and Cloudflare D1 to keep the account locked and prevent user data from being recreated. It contains the account UID, deletion phase, cursor, and timestamps, not profile or resume content. The server stores up to eight receipt hashes per account, never the plaintext receipt. Redacted payment records are retained for accounting and fraud prevention. Payment processors may separately retain records under their own policies.

The optional Codex connector stores selected job workspace records in Cloudflare D1 and uses a separate OAuth grant. It does not receive Gmail credentials or resume text, and it cannot send messages or apply to jobs. You can revoke the grant from the app's connection settings.

For help with deletion, email aakashkamal8505@gmail.com.

7. Cookies & Local Storage

Firebase Authentication uses browser storage to keep your session. The marketing page stores your theme preference locally. The current marketing page does not load advertising pixels or Google Analytics. See the Cookies & browser storage page for more detail.

8. Children's Privacy

GetYourJobs is intended for users 18+ (college students). We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page and the "Last updated" date will be revised.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact: aakashkamal8505@gmail.com.