Privacy Policy

We collect only what is necessary to provide the service:

• Account data — email address and password hash (via Supabase Auth) when you create an account.
• Profile data — current job title and skills you enter in the dashboard, used to generate personalised job recommendations.
• Job tracker — application statuses, notes, and dates you add to your tracker board.
• Usage data — anonymous page views via Vercel Analytics (no cookies, no cross-site tracking).

Your resume is never stored. When you upload or paste your resume into the ATS checker, the text is parsed in-memory, scored, and immediately discarded. We do not write resume text to any database or log file. The same policy applies when you use AI rewrite or JD match features — your text is sent to our inference provider (Groq) for processing and is not retained by them beyond the API call under their data processing agreement.

• To authenticate you and save your preferences across sessions.
• To generate personalised job recommendations using an embedding of your profile (title + skills). The embedding is a numeric vector — not human-readable text.
• To send job alert emails if you opt in (unsubscribe link in every email).
• To improve the product via aggregate, anonymised usage patterns.

We do not sell your data, share it with recruiters, or use it for advertising.

• Supabase — database and authentication (EU/US data centres). Privacy policy
• Railway — backend API hosting. Privacy policy
• Vercel — frontend hosting and privacy-preserving analytics (cookieless, no cross-site tracking). Privacy policy
• Groq — AI inference for resume features (Starter/Pro only). Data is not used for model training under our DPA. Privacy policy
• OpenAI — embedding generation for job/profile matching. Only job metadata and your profile title/skills are sent — never resume text. Privacy policy
• Resend — transactional email delivery. Privacy policy

We use a single session cookie to keep you logged in (Supabase Auth). We do not use advertising cookies, third-party tracking cookies, or fingerprinting. Vercel Analytics is cookieless.

You can delete your account at any time from the dashboard settings. Deletion removes all profile data, tracker entries, and the profile embedding from our database within 30 days. Anonymous analytics data (aggregate counts) cannot be attributed back to you and is not deleted.

Under DPDP (India), GDPR (EU), and applicable laws you have the right to access, correct, or delete your personal data. To exercise these rights, email us at privacy@joboscope.com. We will respond within 30 days.

If we make material changes we will update the “Last updated” date and, where required, notify registered users by email.