Privacy Policy

Welcome to Jobless ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, please contact us at hello@jobless.dev.

This privacy notice describes how we might use your information if you visit jobless.dev, use our application, or otherwise engage with us.

We collect personal information that you voluntarily provide when you register, express interest in our services, or contact us. This includes: names, email addresses, job titles, skills, resume/CV data, job application data, and payment information.

We also automatically collect certain technical information when you visit or use our Services, such as IP address, browser characteristics, operating system, language preferences, and usage patterns. This information does not reveal your specific identity.

We use your personal information for the following purposes:

• To facilitate account creation and login
• To deliver and improve our services (job matching, resume optimization, cover letter generation)
• To send administrative and transactional communications
• To fulfill and manage your subscriptions
• To respond to inquiries and provide support
• To protect our Services and enforce our policies
• To analyze usage trends and improve our platform

We process the information you provide, including your profile, resume, job preferences, and application answers, to operate and improve the Service: to build your matching profile, generate job matches, and create materials such as resume feedback, cover letters, and application answers.

Some of this processing is performed by third-party AI providers who process your data to provide the features you request. We currently use OpenAI and OpenRouter, which routes our requests to inference providers we have reviewed and approved (currently DeepInfra, Novita, and Alibaba). OpenAI does not use API inputs or outputs to train its models by default and may retain API content for abuse monitoring for up to 30 days unless shorter retention controls apply. We configure OpenRouter requests to use zero-data-retention endpoints and providers that do not use prompts or outputs to train their models. Under that OpenRouter configuration, content is not retained for model training, although OpenRouter and the underlying provider may process limited operational metadata such as the model selected, token counts, request status, latency, and timestamps. We use the results to operate and improve our matching. We do not sell your data or use it to build advertising profiles.

As Jobless develops, we may also use data you provide directly through the website to build, train, and improve our own matching technology and new features, including by analyzing patterns across users. Where this uses data that identifies you, we rely on our legitimate interest in improving the Service; we minimize and de-identify the data where practical, we do not use special-category details from your resume (such as health, ethnicity, or religion) for this purpose unless you give separate, explicit consent, and you can opt out at any time by contacting us at hello@jobless.dev. Information received from the browser extension is subject to the narrower uses described in the Browser Extension section below and is not used to train general-purpose models or for unrelated product features.

Your resume may contain sensitive details (such as health, disability, ethnicity, or religion) if you choose to include them. By uploading your resume and using the Service, you explicitly consent to us and our AI providers processing your resume content, including any such details you include, for the purpose of matching you to jobs and generating your application materials. You can withdraw this consent at any time by deleting the relevant content or contacting us at hello@jobless.dev, and you may object to processing where the law gives you that right.

We do not sell your personal information, and we do not share it for advertising or with third parties for their own purposes. The data you provide is used to operate and improve Jobless.

We never share your personal data, including your resume and profile, with recruiters, employers, or any other third party for their own use until you choose to make it visible. We use your data internally to power your job matches, but a match is only ever shown to a recruiter when you opt in.

We share data only with service providers who process it on our instructions, under their terms of service or a data processing agreement with us, for example cloud hosting, AI inference, payment processing, email delivery, and analytics. These providers are not permitted to use your data for their own purposes.

When you choose to apply to a job, we transmit the application materials you direct us to send to the relevant employer or applicant tracking system, at your request.

We may also disclose information where required by law, or in connection with a merger, acquisition, or sale of company assets.

We retain your personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required by law. When data is no longer needed, we delete or anonymize it securely.

Jobless is hosted in Germany, within the European Economic Area (EEA), where your personal information is primarily stored and processed. Some of our service providers operate outside the EEA. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact us at hello@jobless.dev for more information.

We use a small set of analytics and monitoring tools to understand how Jobless is used, to fix errors, and to improve the product.

Public pages. On our public and marketing pages we run a self-hosted, privacy-friendly analytics tracker (Rybbit, hosted by us in the EU). It stores no cookies, persistent identifiers, or cross-site tracking data, and collects only aggregated, non-identifying signals: page URL, referrer, country (derived from IP and then discarded), browser, and device type.

Error monitoring. We use Sentry for error monitoring. When the app crashes or hits an error, Sentry captures a short session recording of the moments around that error so we can diagnose and fix it. These recordings are triggered only by errors, and input fields and text content are masked.

Logged-in product analytics and session replay. When you are signed in to the Jobless dashboard, we use the same self-hosted Rybbit instance (hosted by us in the EU, no third-party analytics provider involved) for product analytics and session replay. This records your authenticated sessions, including clicks, navigation, and page interactions, and associates them with your Jobless account so we can understand how the product is used and improve it. Input fields and text you enter are masked and are not captured in these recordings. We rely on our legitimate interest in understanding and improving the product as the lawful basis for this processing. You can opt out at any time using the toggle in Settings → Privacy & Data, or by contacting us at hello@jobless.dev.

We do not use Google Analytics or any advertising or cross-site tracking networks.

Strictly necessary cookies (authentication tokens, theme preference) are exempt from consent because the site cannot function without them.

The Jobless browser extension helps fill application forms on supported applicant tracking systems: Greenhouse, Ashby, Lever, Workable, Recruitee, Teamtailor, Pinpoint, BambooHR, Personio, and SmartRecruiters. It uses the profile, resumes, and saved answers in your Jobless account. You review the application and submit it yourself.

Consent and local detection. The extension asks you to review this notice and give affirmative consent before it connects to your account or handles careers-page data. After consent, a lightweight detector runs locally on HTTPS pages so the extension can recognize supported application forms on employer-owned and custom domains. For detection it examines the page URL and limited structural signals in the page, such as form elements and platform identifiers. On pages it does not recognize as supported applications, this detection stays on your device and the extension does not send the page URL or form content to Jobless.

What it accesses. When it recognizes a supported application, the extension automatically sends the application URL to Jobless to find the corresponding job and prepare application tracking. It reads field names, labels, types, options, and the values you or Jobless enter so it can fill the form and record the application after you manually submit it. The data used may include your name, email, phone, location, professional links, employment history, resume and cover-letter files, saved application answers, and compensation expectations.

What it sends, and who receives it. The extension sends encrypted network requests only to the Jobless API at api.jobless.dev. Depending on the feature you request, Jobless may send relevant profile, resume, job, form-question, and saved-answer content to OpenAI or through OpenRouter to our approved inference providers, currently DeepInfra, Novita, and Alibaba, to produce matches, application answers, resumes, or cover letters. These providers process the data on our behalf under the training and retention controls described above. Jobless also sends the application materials you choose to submit to the employer's applicant tracking system through your interaction with that site. The extension contains no advertising or third-party analytics code.

What it stores on your device. The extension stores its Jobless access token, consent choice, theme, preferences, and limited local diagnostics in extension-controlled storage. It temporarily caches a resume file for up to 30 minutes and keeps short-lived application state and delivery events in browser-session storage so forms and full-page navigation can complete reliably. This extension-controlled storage is not available to the employer's page scripts. Signing out clears the token, temporary application state, cached resume, and local diagnostics; removing the extension clears its local storage.

Retention and deletion. Temporary resume and application-session data expires automatically or is cleared after delivery, sign-out, tab or browser closure, or the applicable short retention window. Application records and reusable answers sent to your Jobless account are retained while needed to provide your tracker and Story Bank and until you delete the relevant record or your account, subject to limited legal, security, and backup retention described elsewhere in this policy. You can request access or deletion by contacting hello@jobless.dev.

Authentication and control. Connecting the extension requires an explicit action after you sign in and consent. Jobless creates an extension access token and transfers it only to the Jobless extension through the authenticated connection page; the extension does not read your Jobless website cookies. You can sign out, revoke the extension token from account settings, or remove the extension to stop future access. Autofill only acts on a recognized supported form, and you can review or change every value before clicking the site's submit button yourself.

Sensitive fields. The extension is designed to identify and exclude sensitive and equal-opportunity fields—including race, ethnicity, religion, health or disability status, veteran status, genetic information, sexual orientation, pronouns, date of birth, and marital status—from autofill and answer capture. You answer those fields manually if you choose. A resume you upload may still contain sensitive details, which are handled as described in Improving Our Matching & Service above.

Chrome Web Store Limited Use. Our handling of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use or transfer extension data only to provide and improve the extension's disclosed, user-facing application-assistance features, for security, to comply with law, or as part of a user-directed transfer to an employer or applicant tracking system. We do not sell extension data, use it for advertising, use it to determine creditworthiness or lending eligibility, or allow human access except when necessary for security, legal compliance, or support you request.

Depending on your location, you may have the right to: access and obtain a copy of your data, request rectification or erasure, restrict or object to processing, and data portability. To exercise these rights, contact us at hello@jobless.dev.

If we rely on your consent to process personal information, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you are in the EEA or the UK and believe we have not handled your personal data lawfully, you also have the right to lodge a complaint with your local data-protection supervisory authority. We would, however, appreciate the chance to address your concerns first, so please consider contacting us at hello@jobless.dev before doing so.

Jobless is intended for users who are at least 16 years old, and the Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us at hello@jobless.dev and we will delete it.

We implement appropriate technical and organizational security measures to protect your personal information. However, no electronic transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

We may update this privacy policy from time to time. Updates will be indicated by a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed.

If you have questions or comments about this policy, please contact us:

Email: hello@jobless.dev

Company: Jobless