Privacy

Last updated 8 August 2026.

This page describes what this website actually does today, not what a finished product might do later. It replaces the theme’s stock policy, which described data collection that does not happen here.

What this website collects

Nothing.

That is the literal answer, and these are the specifics behind it:

• No analytics. No Google Analytics, no Plausible, no Fathom, no pixel, no beacon.
• No cookies. The site sets none. There is no consent banner because there is nothing to consent to.
• No forms. Nothing on this site submits anywhere. The content security policy sets form-action 'none', which means the browser itself will refuse to submit a form from this origin even if one were added by mistake.
• No third-party requests. Fonts, styles and scripts are all served from this domain. Nothing is fetched from Google, from a CDN, or from anywhere else, so no other company learns that you visited.

That last point is deliberate. The stock version of this site loaded its fonts from Google, which would have disclosed your IP address and browser to Google before you had read a sentence. On a site whose entire argument is that it does not overstate things, that seemed like the wrong way to begin.

Our host serves the files and, like any web server, processes the request needed to do that. We do not add tracking on top of it.

What the app collects

The app is a separate service from this marketing site. To tailor a resume it has to hold your material, so it does. These are the defaults the code ships with, not aspirations:

• Your uploaded resume, the evidence in your truth pack, and the documents it generates. It cannot work without them.
• Encrypted at rest by default. The key is derived from your own access token, so it is not sitting on the server next to the data it protects. A service holding other people’s CVs should not store them in the clear.
• Deleted automatically after a period of inactivity. Data you no longer hold cannot be stolen. Free packs are removed after seven days of inactivity by default; packs with any purchase are kept for ninety days, since paying users come back. Any activity restarts the clock, and there is also a delete endpoint, so you can remove a pack immediately rather than waiting.
• No cross-origin access unless explicitly configured. The server allows no origins by default; each deployment widens that deliberately.
• The server refuses to start if its key configuration is wrong, rather than booting, accepting uploads, and failing on the first one - by which point a resume has already been sent.

Retention and encryption are configurable per deployment (JOBOS_RETENTION_SECONDS, JOBOS_RETENTION_SECONDS_PAID, JOBOS_ENCRYPT). The values above are what the software does unless an operator changes them, and this page will say so if the hosted deployment ever differs.

If you create an account

Accounts are optional — guest mode (an access key, nothing else) remains a full path. An account stores your email address, a hash of your password (scrypt, salted), and the list of your packs. No name, no profile, nothing from a resume. Password reset emails are delivered through a transactional email provider, which necessarily sees your email address for that one message and nothing else about you.

Who your data is shared with

Nobody. Specifically:

• Never sold. Not to data brokers, not to recruiters, not to anyone.
• Never shared with third parties, with exactly two mechanical exceptions: the hosting provider that runs the servers (it processes requests the way any host does), and Stripe if you buy credits — Stripe handles your card on its own pages and never sees your resume content, and the billing record kept on our side holds no personal information at all, only a pack id, counts, and timestamps.
• Never used to train models. Not ours, not anyone’s. When you switch the optional AI pass on for a build, bullet text is sent to the configured model provider for that one request; content you locked is never sent at all, and nothing is retained for training. With the AI pass off — the default — no model provider is involved.
• No advertising or analytics companies are present on the app, same as this site.

Getting your data out, or gone

In guest mode there is no account to close — your pack is the whole footprint. With an account, deleting the account deletes every pack on it AND the account record itself, immediately and permanently. Either way: delete your pack and everything goes with it, immediately and permanently: the uploaded resume, the evidence, the locks, the generated documents, and the build history (which lives inside the encrypted pack, so it cannot outlive it). Deletion is not a flag; the data is removed from the server. If you do nothing instead, the pack expires on the retention window above and the same deletion happens automatically.

Contact

Questions about this page: privacy@ this site’s domain. Security reports: the repository’s security contact listed in SECURITY.md.

A note on this document

This is a plain description of current practice written by the people who built the site. It is not a lawyer’s work product, and it is not legal advice. This page needs review by an actual solicitor, particularly on GDPR and CCPA obligations, since resumes contain personal data by definition.