Privacy Policy

What you give us

Account details: your name, email, and either a password (stored hashed) or your Google sign-in.

Your profile: contact details and addresses, links such as LinkedIn, GitHub and your portfolio (plus an optional portfolio password, stored encrypted), work history, education, skills, job preferences, work authorization and sponsorship needs, and optional self-identification answers.

What you create in Jobmagic: resumes you upload, documents we generate, saved answers, tracked jobs, interview notes, contacts you save and outreach you log.

What we collect as you use Jobmagic

Your application history, including exactly what Autopilot filled in for each application.

Where you came from on your first visit (the referring site, campaign tags or a referral code), kept in a cookie for up to 30 days and saved to your account when you sign up.

Whether our emails were delivered and, when our email provider reports it, opened or clicked.

Technical data such as IP address and browser, used for security and rate limiting.

How we use it

To run Jobmagic for you: matching you to jobs, preparing documents and applications, tracking your search, and sending the emails you can control in Settings (job alerts, application updates, reminders) along with account and billing emails. We also use it to keep the service secure and to improve it. We never use it for third-party advertising.

How we use AI

To parse resumes, tailor documents, draft answers and outreach, prepare interview questions and score matches, we send the minimum needed content (your resume text, the job description and relevant preferences) to AI model providers through OpenRouter. Providers process it to return a result and do not use it to train their models under our agreements.

We keep a record of each AI request (the task, model and cost), not its content.

AI never invents employers, titles, dates or metrics; numbers that aren’t in your resume are flagged for you to fill in.

Analytics

Product analytics and session replay in your browser (PostHog) load only after you accept analytics cookies, and respect Do Not Track. Replays mask form fields and never record resumes, cover letters, answers or settings pages.

We also record core product events on our servers, such as an application submitted or a plan change, linked to your account ID only and never to your name, email, resume or answers.

Voluntary self-identification (EEO)

Gender, ethnicity, veteran and disability answers are optional, default to “Decline to answer”, are only used to fill the matching application questions you ask us to answer, are never shown on resumes and are never sent to AI or analytics.

The Jobmagic Chrome extension

The extension runs on its own only on Greenhouse, Lever and Ashby application pages and on LinkedIn and Indeed job pages. On any other site it reads the page only after you click its icon.

From a job page it sends us the job’s title, company, location, salary, description and link, so we can show your fit and save the job. From an application form it sends the form’s questions and choices, and after Autopilot submits, exactly what it filled in, so you can see it in Jobmagic. It never sends us anything else from the pages you visit, and never reads your browsing history.

Autopilot never solves CAPTCHAs, never signs in to employer sites for you and never sees employer passwords or emailed codes. Your Jobmagic sign-in stays inside the extension; web pages can’t read it. Signing out of Jobmagic signs the extension out too.

We use what the extension sends only to provide Jobmagic to you. We never sell it, share it for advertising or use it for anything unrelated, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

People in Networking

Networking shows people who work at the companies in your tracker: name, job title, department, work email and LinkedIn link, from public sources and Hunter.io. This directory is shared by Jobmagic users who track the same company. Jobmagic never contacts these people; users decide whether to reach out themselves.

If you’re listed and want to be removed, email us and we’ll take you out.

Who else sees your data

Referrals: if you sign up through a friend’s link, the reward email tells each of you the other’s name.

Staff: a small number of Jobmagic staff can see account details such as name, email, plan and referral activity to run and support the service.

Employers see only the applications you submit to them.

We may disclose information if the law requires it, or to a buyer if Jobmagic is sold, under this same policy.

Sub-processors

Hosting and database (Laravel Cloud), file storage (DigitalOcean Spaces, private), email (Resend), payments (Stripe), Google sign-in (Google), AI (OpenRouter and the model providers it routes to), bot protection on the free resume grader (Cloudflare Turnstile), street address suggestions (Photon by komoot, sent from our servers with only the text you type) and, with consent, product analytics (PostHog, US region).

Company data comes from Hunter.io (contacts), People Data Labs (company details) and Logo.dev (logos). We send them only company names or domains, never anything about you, though your browser loads logo images straight from Logo.dev.

These providers may process data in the United States and other countries.

Security

Uploaded resumes and generated files sit in private storage and are only downloaded through Jobmagic after we check they’re yours. Traffic is encrypted with HTTPS. Our logs and error reports record IDs, not resume text, answers or email addresses.

Retention

We keep your data while your account is active. Deleted accounts are removed permanently 30 days after the deletion request, along with uploaded files and exports; copies in database backups expire on our hosting provider’s schedule.

Free resume-grader uploads from visitors without an account are read in memory and never stored, and their results are deleted after 24 hours. Email delivery records are deleted after 90 days. Data export links expire after 7 days.

Your rights and choices

Edit your profile at any time. Export all your data as a ZIP, or delete your account, from Settings → Account. Turn off any type of email from Settings or the unsubscribe link in it, and change cookie choices with “Consent preferences” in the footer.

Depending on where you live (for example the EU, UK or California) you may have further rights, such as to access, correct or object to processing. Email us and we’ll respond within 30 days.

Children

Jobmagic isn’t for anyone under 18, and we don’t knowingly collect their data. If you believe a minor has an account, email us and we’ll delete it.

Changes to this policy

If we make significant changes we’ll tell you by email or in the app before they take effect. The date at the top shows the current version.