Privacy Policy

1. Information We Collect

We collect account details such as your name and email, Google sign-in identifiers, profile and job-search preferences, uploaded resume files, parsed resume data, generated CVs, saved jobs, contact research, outreach drafts, sent outreach metadata, billing status, usage data, device data, and support messages you send us.

2. Google User Data and Gmail Access

If you choose to connect Gmail, Jobifer requests the following Google OAuth scopes:

• https://www.googleapis.com/auth/gmail.send — to send the outreach messages you have reviewed and explicitly approved inside Jobifer, from your own Gmail account.
• https://www.googleapis.com/auth/gmail.readonly — to read message and thread metadata (subject, recipients, dates, labels, message identifiers) and message bodies for threads that are part of your Jobifer outreach, so we can show reply status, surface replies, and let you continue conversations inside Jobifer.

We do not ask for or store your Google password. Authentication is performed by Google. We store the OAuth refresh and access tokens issued to Jobifer encrypted at rest in our database, and use them only to call the Gmail APIs above on your behalf.

You can revoke Jobifer's access to your Google account at any time from https://myaccount.google.com/permissions or from inside Jobifer.

3. How We Use Google User Data

Google user data accessed through the scopes listed in Section 2 is used only to:

• Send outreach messages that you have reviewed and approved in Jobifer.
• Read message and thread metadata and message bodies on threads that you started through Jobifer, so we can detect replies, display reply status, and let you respond from inside Jobifer.
• Operate, maintain, troubleshoot, and improve the user-facing features described above.

Google user data is not used for advertising, for training or fine-tuning generalized AI or machine-learning models, for credit or eligibility decisions, for resale, or for any other purpose outside the user-facing features described in this policy.

4. Limited Use of Google User Data

Jobifer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy and the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. How We Use Other Information

We use the rest of the information described in Section 1 to authenticate you, build your profile, parse resumes, recommend roles, discover and score jobs, find relevant decision-maker contacts, generate tailored CVs, draft outreach messages, manage credits and plan access, troubleshoot issues, prevent abuse and fraud, comply with legal obligations, and improve Jobifer.

6. AI and Third-Party Sub-Processors

To operate the features above, Jobifer relies on the following categories of third-party sub-processors, including but not limited to:

• Hosting, storage, and authentication: Amazon Web Services, Google Cloud / Firebase.
• AI generation and scoring: Anthropic, Google AI / Gemini, OpenAI.
• Job discovery and contact enrichment: search and enrichment providers used to find roles and verify professional contact details.
• Email delivery for transactional and product email from Jobifer: Resend.
• Payments: Paddle.com Market Limited (see Section 9).
• Analytics and error monitoring.

We send these sub-processors only the minimum information needed to perform their function. Where Google user data is involved, we send sub-processors only the specific message content or metadata required to support the user-facing feature you have triggered (for example, drafting a reply that Jobifer will then send through Gmail). We do not permit any sub-processor to use Google user data for their own purposes, to sell it, or to train generalized AI or machine-learning models on it. The full list of named sub-processors can be requested at support@jobifer.ai.

7. Data Sharing and Disclosure

We do not sell your personal information, and we do not transfer Google user data to third parties except as necessary to provide or improve the user-facing features described in this policy, to comply with applicable law (including valid legal process), or as part of a merger, acquisition, or sale of assets, in which case we will provide notice before personal information is transferred and becomes subject to a different privacy policy.

8. Security and Encryption

Jobifer protects your information using industry-standard safeguards. All traffic between your browser, the Jobifer service, and our sub-processors is encrypted in transit using TLS. Personal information, OAuth refresh tokens, and access tokens are encrypted at rest in our managed database. We restrict internal access to production data on a need-to-know basis and log administrative access. No online service is perfectly secure, and we cannot guarantee absolute security.

9. Payments

Payments are processed by Paddle.com Market Limited ("Paddle") acting as Merchant of Record for purchases from Auto PBR. Paddle collects billing details, tax information, transaction records, and payment identifiers under Paddle's own privacy policy. Jobifer does not store full payment card numbers. Paddle may also handle invoicing, tax remittance, refunds, and chargebacks on our behalf, and may share billing-related information with us so we can manage your subscription and provide support.

10. Data Retention and Deletion

We keep account and product information for as long as your Jobifer account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. You can:

• Update or correct your account and profile information inside the app.
• Disconnect Gmail at any time from inside Jobifer or from your Google account.
• Request deletion or export of your Jobifer data by emailing support@jobifer.ai. We aim to respond within 30 days.

When you delete your Jobifer account or disconnect Gmail, we revoke the associated OAuth tokens and delete or anonymize the related Google user data within a commercially reasonable period, except where we are required to retain it to comply with legal obligations or to detect and prevent abuse.

11. Your Rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact support@jobifer.ai.

12. International Transfers

Jobifer is operated from the locations of our hosting providers and sub-processors, which may include the United States and the European Economic Area. By using Jobifer you understand that your information may be processed in countries other than the country in which you reside.

13. Children

Jobifer is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. When we make material changes, including changes to how we use Google user data, we will update the "Effective Date" above and notify users by email or through an in-app notice before the change takes effect.

Contact

Questions about this policy can be sent to support@jobifer.ai. Auto PBR is the data controller for Jobifer.