How JobMate handles your data

This policy explains what information JobMate stores, why it is used, and the choices available to you. JobMate is a UK-focused AI job application app that helps users generate application and interview-prep materials. For the purposes of this policy, references to JobMate mean the JobMate service and business.

1. Account data

When you create an account, JobMate stores basic account information such as your name, login email and account timestamps in Supabase so you can sign in securely and access your workspace.

2. CVs, screenshots and job content

If you upload a CV, job advert screenshots or paste a job description, JobMate processes that material to generate interview packs and related AI outputs. Uploaded CV text, screenshots metadata, pasted job descriptions and generated AI documents may be stored in the database so you can revisit and refine your work.

3. Generated AI documents

JobMate stores generated cover letters, interview notes, role summaries, STAR examples and related pack content so you can review and reuse them later. This content is associated with your account.

4. Storage and service providers

JobMate uses Supabase for authentication and database storage. JobMate also sends relevant job and CV content to OpenAI or a similar AI provider so the app can generate your requested documents. That means some personal and job-related text may be processed outside JobMate's own database during generation.

5. Cookies and local storage

JobMate uses essential cookies and local storage for login sessions, theme preferences, draft persistence and similar core features. Optional analytics or diagnostics may be introduced later and, if they are, the app will ask for appropriate consent before loading non-essential tooling.

6. Payments

If paid access is enabled, JobMate shares limited billing data with Stripe so purchases can be processed and access windows can be granted. JobMate does not intend to store full card details directly on its own servers.

Stripe may process payment-related data under its own privacy and security standards in order to complete transactions and support billing operations.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete or export your personal data, and to object to certain processing. You can also request account deletion.

8. Contact

TODO: Replace `support@yourdomain.com` with your real privacy contact email before launch.

Privacy requests can be sent to `support@yourdomain.com`.

9. Applicable law

This policy is intended to sit alongside the laws of England and Wales and any applicable UK data protection requirements.