Privacy Policy

JobNab ("JobNab," "we," "us," or "our") provides automated job-tracking and alerts for individual job seekers. This Privacy Policy describes what data we collect when you use jobnab.ai and our connected services, how we use it, who we share it with, and the rights you have over it.

If you have questions about anything in this policy, email us at hello@jobnab.ai.

1. Information We Collect

We collect only the data we need to operate JobNab. There are five categories:

Account information

Your email address (used for our passwordless email-code sign-in) and any optional profile fields you choose to provide, such as your name. We do not store your password — we authenticate you with a short-lived six-digit code sent to your inbox.

Payment information

JobNab uses Stripe to process subscription payments. Your card number, expiration date, and CVC are entered directly into Stripe-hosted forms and are never stored on JobNab systems. We retain only Stripe's customer and subscription identifiers, your subscription status, and your billing email.

Resume content

If you upload a resume, we store the file and extract structured information from it (work history, skills, education, contact details) to improve job matching. You can delete your resume at any time from your account settings; deletion removes the file and the extracted fields from our systems.

Job-search preferences

The career-page URLs you choose to track, your target position keywords, blacklist words, and preferred locations. This data is used to scrape the pages you've added and to score postings against your preferences.

Usage and technical data

When you use jobnab.ai we automatically collect standard server logs (IP address, user-agent, requested paths, timestamps), error reports, and basic product analytics (page views, feature usage). When you arrive via a marketing link we may also collect referral data such as UTM parameters, click identifiers (fbclid, ttclid, gclid), and the referring page so we can measure marketing effectiveness.

2. How We Use Your Information

We use the information described above to:

• Operate the core service — sign you in, scrape the career pages you track, generate alerts, and deliver them via email and in-app notifications.
• Process payments and manage your subscription.
• Match new postings against your preferences using AI scoring (see Section 4).
• Communicate with you about your account — transactional emails for verification, alerts, billing, and important service changes.
• Improve the product — debug errors, measure feature usage, and prioritize work. We aggregate or anonymize usage data wherever practical.
• Comply with legal obligations, prevent fraud or abuse, and enforce our terms.

We do not sell your personal information, and we do not use your data to train any AI model. We do not target advertising at you based on the contents of your resume or your job-search activity.

3. Sharing and Subprocessors

We share data only with the third-party services we depend on to run JobNab. Each subprocessor receives the minimum data needed for its specific function:

• Stripe — payment processing. Receives payment details and billing email. See Stripe's Privacy Policy.
• OpenAI and Anthropic— AI analysis of job postings and resumes. We send the text of job postings we've scraped, plus relevant portions of your resume and preferences, to score job-match relevance. These providers have committed not to use API content for training. See OpenAI's Privacy Policy and Anthropic's Privacy Policy.
• Railway — application hosting, database, and queue infrastructure. All JobNab data is stored on Railway-managed Postgres in the United States.
• AWS S3 / CloudFront — file storage and delivery for assets such as uploaded resumes and blog images.
• Email delivery provider — transactional emails (sign-in codes, alert notifications, billing receipts). Receives your email address and the contents of the messages we send you.
• Meta (Facebook) and TikTok — server-side conversion tracking for paid marketing. When you sign up through a paid ad we send hashed identifiers (email, IP, user-agent, ad platform cookies) so we can attribute conversions. This is used for measurement only — we do not send the contents of your resume, alerts, or trackers to ad platforms.
• Google Analytics — anonymous product analytics. We do not link analytics data to your account.

We may also disclose data if required by law, court order, or valid government request, or if necessary to investigate or prevent fraud or abuse.

4. AI Assistant Integrations (Model Context Protocol)

JobNab offers a connector for AI assistants that support the Model Context Protocol (for example, Claude). When you authorize a connector you grant the AI assistant's provider a scoped access token that lets it call a limited set of JobNab API actions on your behalf — add and remove trackers, view and update positions and locations, and read your alerts.

The MCP server itself is stateless. It does not store your conversation history, the prompts you send to the AI assistant, or any content the AI assistant generates. Access tokens issued to AI assistants expire after 24 hours and can be revoked at any time by removing the connector in your AI assistant's settings.

The AI assistant's provider — Anthropic for Claude, OpenAI for ChatGPT, and so on — handles your conversation with the assistant under their own privacy policy. JobNab is not a party to that conversation and does not receive a copy of it.

5. Cookies and Tracking

We use a small number of cookies and similar technologies:

• Authentication cookies that keep you signed in to your account.
• First-party analytics to understand product usage in aggregate.
• Marketing-attribution cookies (such as Facebook's _fbc/_fbp and TikTok's _ttp) that record the ad or referral source you arrived from. These are only set if you arrive through a paid marketing link.

You can clear cookies at any time from your browser settings; doing so will sign you out of JobNab and reset attribution tracking.

6. Your Rights

Regardless of where you live, you may:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and the data associated with it.
• Export your data in a portable format.
• Object to or restrict certain uses of your data.
• Withdraw consent for optional processing at any time.

If you live in the European Economic Area, the United Kingdom, or Switzerland, the GDPR gives you these rights. If you live in California, the CCPA and CPRA give you these rights, plus the right to know what categories of personal information we collect, sell, or share. We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined under California law.

To exercise any of these rights, email hello@jobnab.ai from the address associated with your account. We will respond within 30 days. We will not discriminate against you for exercising any of these rights.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we are required by law to keep it longer (for example, tax and billing records, which we retain for the period required by applicable law).

Backups containing deleted data are overwritten on our standard backup-retention schedule (typically within 90 days).

8. Security

All connections to JobNab are encrypted in transit with TLS. Data at rest is encrypted using industry-standard mechanisms provided by our infrastructure providers. Access to production systems is restricted to a small number of authorized personnel, protected by strong authentication, and logged.

No system is perfectly secure. If we become aware of a breach that affects your personal information, we will notify you without undue delay and as required by applicable law.

9. International Data Transfers

JobNab's production infrastructure is hosted in the United States. If you access JobNab from outside the United States, your data will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses and equivalent transfer mechanisms with our subprocessors to protect data transferred outside your country of residence.

10. Children's Privacy

JobNab is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email and update the "Last Updated" date at the top of this page. Continued use of JobNab after the changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions, data requests, or any other concern, email us at hello@jobnab.ai. We'll respond as quickly as we can — typically within one business day.