Privacy policy

JobBot applies to jobs on your behalf. This page explains what we keep and why.

What we store

Your account: email address and name, from Google sign-in or the email you sign in with.
What you give us to apply with: your CV, contact details, right-to-work details, job preferences, skills and answers to application questions.
Your API keys (NVIDIA, Groq) and, if you connect Gmail, a Gmail access token. These are encrypted (AES-256) before they are stored.
The jobs found for you and the applications made, with the CV and cover letter sent.
Payment records you submit (reference and receipt).

Only to find matching jobs and fill in and submit applications for you, and to show you what was done.
Your API keys are used only for your own applications.
Gmail: the app searches your inbox only for security-code emails that job application sites send while you apply, reads the code, and moves that email to Trash once the application is submitted. If you keep email alerts on, it also places short notes from the app (jobs waiting for your answers, setup reminders, plan ending) in your inbox. If you turn on "Spot employers' replies", every few hours it also reads the sender, subject and Gmail's short preview line of new inbox emails, to recognise replies from companies you applied to; it keeps only the subject line and date of those replies, and nothing from any other email. Apart from moving used code emails to Trash, it never sends, changes or shares your email, and it does not read anything else.
We never sell your data or use it for advertising.

The employers you apply to receive your application.
The AI provider whose key you added processes job posts and your details to write your application.
Our hosting providers (Cloudflare, Neon, GitHub) store and run the service.

Pause applying, disconnect Gmail or remove your keys at any time from your dashboard; you can also remove Gmail access at myaccount.google.com/permissions.
Delete your account from Settings → Account: everything we hold about you is deleted.

The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.