Privacy Policy

Effective March 2026

Startova Labs LLC (DBA JobSeeker-AI) · jobseeker-ai.com

1. Introduction

We take your privacy seriously. This policy explains what data we collect, why we collect it, how it is used, and your rights regarding your personal information.

JobSeeker-AI is operated by Startova Labs LLC. By using our platform, you agree to the collection and use of data as described in this policy.

2. What Data We Collect

Account Data

  • Name, email address, password (hashed by Supabase Auth)
  • Phone number (optional, if provided)

Profile and Career Data

  • Resume text, work history, education, skills, certifications
  • Any career information you provide through the AI Career Coach, upload, or paste features

Job Search Data

  • Job descriptions you paste or search for
  • Job preferences and saved jobs

Generated Content

  • Resumes, cover letters, and networking emails you generate on the platform

Usage Data

  • Pages visited, features used, session timestamps
  • Login history and last login date (used for inactivity detection)

Payment Data

  • Subscription plan and billing status
  • Payment is processed by Stripe — we do not store credit card numbers

Technical Data

  • Browser type, device type, IP address
  • Error logs (via Sentry, anonymized)

3. How We Use Your Data

DataPurpose
Account dataAuthentication, account management, support
Profile and career dataAI-powered document generation, profile building
Job search dataJob matching, personalized search
Usage dataProduct improvement, inactivity detection
Payment dataBilling management via Stripe
Technical dataBug fixing, security monitoring

We do not sell your data to third parties. We do not use your data for advertising.

4. Third-Party Services We Use

Your data is shared with these services to operate the platform:

ServicePurposeData Shared
OpenAIAI content generationCareer profile data, job descriptions
SupabaseDatabase and authenticationAll user and profile data (hosted/encrypted)
PineconeVector search for profile retrievalProfile text chunks (anonymized by namespace)
StripePayment processingName, email, subscription status
RenderBackend hostingAll data in transit
VercelFrontend hostingPage requests, session cookies
RapidAPI / JSearchJob search dataJob search queries
SentryError monitoringAnonymized error logs

Important note on OpenAI: When you generate a resume, cover letter, or use the AI Career Coach, your career profile data is sent to OpenAI's API for processing. OpenAI's data usage policies apply. We do not send unnecessary personal information — only what is required to generate the requested content.

5. Data Retention and Account Inactivity Policy

Active accounts: We retain your data for as long as your account is active.

Inactivity Policy: If you do not log in for 6 consecutive months, we consider your account inactive. We will send email warnings at:

  • 30 days before the 6-month mark
  • 15 days before the 6-month mark
  • 7 days before the 6-month mark
  • 2 days before the 6-month mark

After the 6-month inactivity mark, there is a 30-day grace period. If you do not log in during this period, your account and all associated data are permanently deleted with no ability to recover. Logging in at any time resets the inactivity clock.

Manual deletion: If you delete your account via Account Settings, all data is permanently deleted immediately including profile data, generated documents, and job history.

Subscription data: Stripe retains billing records independently per their own retention policies.

6. Your Rights

You have the right to:

  • Access — Request a copy of your data (email support@jobseeker-ai.com).
  • Correction — Update your profile or account data at any time within the app.
  • Deletion — Delete your account and all data via Account Settings → Danger Zone, or by emailing us.
  • Portability — Request an export of your data (email us).
  • Opt-out — Unsubscribe from marketing emails at any time.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of any sale of personal information. We do not sell personal information.

EU/UK residents (GDPR): Our legal basis for processing is contract performance (providing the service you signed up for) and legitimate interest (security, fraud prevention). You may contact us to exercise your rights under GDPR.

7. Security

We implement reasonable security measures including:

  • HTTPS encryption for all data in transit
  • Data at rest encrypted by Supabase (PostgreSQL)
  • Authentication via Supabase Auth with JWT tokens
  • Rate limiting on all API endpoints
  • No credit card data stored on our servers (handled by Stripe)

No system is 100% secure. We encourage strong passwords and prompt reporting of any security concerns to support@jobseeker-ai.com.

8. Cookies

We use cookies and local storage for:

  • Authentication session management (required)
  • Theme preference (dark/light mode)
  • Dismissed UI hints and banners

We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Children's Privacy

JobSeeker-AI is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us at support@jobseeker-ai.com and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will provide notice of material changes via email or in-app notification. Continued use of the service after changes constitutes acceptance.

The effective date at the top of this page reflects the most recent update.

11. Contact

For privacy questions or data requests:

Last updated: March 2026

← Back to Home