Skip to main content

Privacy Policy

Last Updated: January 2025

Overview

JobMate is a browser extension and web application that helps job seekers create personalized cover letters. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

1. CV/Resume Data

  • What: Name, contact information, skills, work history, education
  • How: When you upload your CV/resume to the extension or web app
  • Storage: Encrypted locally in Chrome storage; synced to our servers when you connect your account
  • Purpose: Match your skills with job requirements to generate personalized cover letters

2. Job Posting Data

  • What: Job title, company name, description, requirements, location
  • How: Extracted from job board pages (LinkedIn, Greenhouse, Lever, etc.) when you click the extension
  • Storage: Temporarily in memory during analysis; saved to your account if you generate a cover letter
  • Purpose: Analyze job requirements for cover letter generation

3. Authentication Data

  • What: Access tokens, refresh tokens, email address
  • How: When you connect the extension to your JobMate account
  • Storage: Encrypted with AES-256 in Chrome's local storage
  • Purpose: Authenticate API requests and maintain your session

4. Analytics Data

  • What: Feature usage events, timestamps, browser type
  • How: Automatically collected during extension use
  • Storage: On our servers via PostHog
  • Purpose: Improve the product and fix bugs

How We Use Your Data

  • Generate personalized cover letters based on your CV and job requirements
  • Maintain your session and sync data between extension and web app
  • Improve our product based on usage patterns
  • Fix bugs and technical issues

Data Sharing

We do NOT sell your data

We do NOT share data with advertisers

Data is only shared with:

  • Our cloud infrastructure providers (for hosting)
  • PostHog (anonymized analytics)
  • AI providers (OpenAI/Anthropic) for cover letter generation (job and CV data only, anonymized)

Data Security

  • Authentication tokens encrypted with AES-256-GCM
  • 600,000 PBKDF2 iterations for key derivation (OWASP 2023 standard)
  • All data transmitted over HTTPS
  • No plaintext credentials stored
  • API keys never stored in extension

Your Rights

  • Access: View your stored data in extension settings
  • Delete: Clear all data by disconnecting your account or uninstalling
  • Export: Download your cover letters from the web app
  • Opt-out: Disable analytics in extension settings

Data Retention

  • CV data: Until you delete it or disconnect
  • Job data: Until you delete it
  • Analytics: 90 days
  • Generated cover letters: Until you delete them

Children's Privacy

JobMate is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via the extension or email.

Chrome Web Store Compliance

This extension's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy? Email: [email protected]