Your California privacy rights

Last updated: July 9, 2026. Effective: July 9, 2026. This California Privacy Notice adds to—and, for California residents, controls over—our general Privacy Policy. It explains the rights that California residents (“consumers”) have under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and the regulations of the California Privacy Protection Agency (together, the “CCPA”). Jobeezy, Inc. (“Jobeezy,” “we,” “us,” or “our”) is the “business” that decides how and why your personal information is handled. Any term defined in the CCPA has the same meaning here. Where this notice and the general Privacy Policy disagree for a California resident, this notice controls.

The most important thing to know: Jobeezy does not sell your personal information, and we do not “share” it for cross-context behavioral advertising (targeted ads that follow you across other sites and apps), as those words are defined by California law. We have not done either in the past 12 months. We run no advertising cookies or tracking pixels in the app. You still have all of the rights described below.

A plain-language summary. You can ask us what personal information we hold about you, get a copy, fix mistakes, and delete it. You can tell us to limit how we use sensitive information (although we already limit it). You can turn off our AI matching and Auto-Apply (“profiling”) and still use Jobeezy by hand. We answer within 45 days, we don’t charge a fee, and we never treat you worse for asking. Your race, ethnicity, sex, veteran status, and disability answers (“EEO” answers) are kept separate, are never used by our AI or to score you, and are erased right away when you delete your account. Fair-chance details you choose to share (like a record or an employment gap) are different — our AI does use them to tailor and match your applications, and we never sell them. The full details are below.

1. About this notice and who it covers

This notice is for people who live in California. It reflects the CCPA as it stands in 2026, including the California Privacy Protection Agency regulations on opt-out signals and automated decisionmaking. To the extent the CCPA applies to Jobeezy, we honor the rights described here. Jobeezy is a direct consumer service — you deal with us, not with a data broker — and we describe our actual practices rather than claiming any certification.

If you live in another U.S. state with a comprehensive privacy law (for example Texas, Colorado, Connecticut, Oregon, or Virginia), your rights are described in the Regional disclosures section of our Privacy Policy instead of here. This notice is California-specific.

2. Categories of personal information we collect

The table below walks through every statutory category of personal information under the CCPA and marks whether we collect it. The specific data points inside each category are described in the Personal data we collect section of our Privacy Policy. Under the CCPA you may ask to know the personal information we have collected about you, and for information going back beyond the last 12 months (for personal information collected on or after January 1, 2022), unless doing so would be impossible or take a disproportionate effort.

Payment cards. We do not collect or store your full payment-card numbers. Billing runs through Apple, Google Play, and RevenueCat; we keep only your subscription status and an opaque transaction identifier.

Other people’s information. If you add references (a name, relationship, and contact details for someone else), we collect that information from you and send it to our AI intake helper to build your profile. You confirm you have permission to share their details.

3. Categories of sources

We collect personal information from these categories of sources:

• You — what you type, upload (your résumé), and answer during onboarding, the AI intake interview, and application forms.
• Your device — app-usage, diagnostic, and crash data generated as you use Jobeezy.
• Your sign-in provider (Clerk) — the email, name, and identifiers tied to your account.
• Our subscription processors (Apple, Google Play, RevenueCat) — your purchase and entitlement state.

Job postings come from public employer and job-board sources; that information is about employers and roles, not about you.

4. Business and commercial purposes

We use the personal information above for the business and commercial purposes described in the How we use personal data section of our Privacy Policy, including: providing and operating the Services; matching you to jobs and computing your Fit Score; tailoring and, at your direction, submitting applications you have reviewed; managing your subscription; customer support; keeping the Services secure and preventing fraud and abuse; meeting our legal obligations; and improving the Services with analytics. We do not use your personal information for a purpose that is materially different from, or incompatible with, the purpose we disclosed when we collected it, without giving you notice.

5. How we disclose your information

In the past 12 months we disclosed personal information for business purposes only — never for money and never for cross-context behavioral advertising — to the categories of recipients below. We also list which categories of your information each recipient receives.

• Service providers and sub-processors that process personal information on our behalf under written contracts that meet the CCPA’s service-provider terms. They receive only what they need for their specific job. The current, canonical list is in the Sub-processors and AI providers section of our Privacy Policy and on our Sub-processors page. They include:
  • Infrastructure and storage — Render (compute, hosting, logging), MongoDB Atlas (database), Cloudflare R2 (résumé files, generated documents, and Auto-Apply screenshots and browser traces). They can receive essentially any category above.
  • Sign-in (Clerk) — identifiers and your credentials (Clerk stores and manages your password; Jobeezy never stores it).
  • AI providers — OpenRouter (primary) and Anthropic (fallback) — résumé text, cover letters, job descriptions, intake answers (including any fair-chance information you choose to add), and Auto-Apply form screenshots. AI requests are sent under no-training terms, with zero data retention where the provider supports it. Your EEO answers are never sent to any AI model.
  • Application submission — Browserbase (the managed, isolated cloud browser that fills and submits the applications you approve) and 2captcha (which solves any CAPTCHA on the employer’s page using the page address and site key, not your profile). Browserbase handles the approved application content for the length of the session only.
  • Subscriptions — RevenueCat (entitlement and receipt validation) receives an app-user id and purchase state, not résumé data.
  • Email — Resend receives your email address and message content, including your data-export ZIP.
  • Analytics, crash, and push — PostHog (pseudonymized usage events with personal identifiers stripped before sending), Sentry (scrubbed crash and error traces), Expo Push Service (your device push token and the notification text), Google Analytics 4 (event parameters on the marketing site with IP anonymized, and some server-side events carrying a pseudonymous user id), and Google Firebase (mobile analytics and remote configuration; a crash-reporting SDK is bundled). A limited, non-PII-only Google AI Studio path may run for generations that never include your résumé, cover letter, or intake answers.
• Employers and their applicant-tracking systems (ATS), when you direct us to apply. See the Auto-Apply note below. They receive your identifiers, professional/employment information, the screening answers you approved, and any EEO answers you chose to include.
• Legal authorities and others, when required by valid legal process, to protect rights and safety, or in a merger or other corporate transaction, as described in the When we share personal data section of our Privacy Policy.

Auto-Apply and employers — who controls your data. When you approve an application, Jobeezy acts as your agent to submit it. For most employer systems we apply as a guest — no account is created in your name. For Workday only, we create a candidate account for you, store its password securely, and use a Jobeezy-managed email alias; we never use your own login credentials. Once your application reaches an employer’s ATS, that employer becomes an independent business that controls the copy it received, under its own privacy notice — we cannot reach into the employer’s system to change or delete it, and an application already sent cannot be recalled.

6. We do not sell or share your information

In the preceding 12 months, Jobeezy has not sold any category of personal information, has not shared any category of personal information for cross-context behavioral advertising, and has not used or disclosed sensitive personal information for any purpose beyond those the CCPA permits for providing our Services. We do not sell or share the personal information of consumers of any age, and we have no actual knowledge of ever selling or sharing the personal information of a consumer under 16. Because we do not sell or share, no opt-out of sale or sharing is required — but you may still submit one and we will honor it.

7. Sensitive personal information and the right to limit

“Sensitive personal information” under the CCPA includes things like government-ID numbers, log-in credentials, precise geolocation, racial or ethnic origin, immigration status, health information, and the contents of your messages. Here is exactly how we handle the sensitive information Jobeezy touches:

• We do not collect your Social Security number, driver’s-license number, passport number, precise device GPS location, biometric identifiers, genetic data, or the contents of your private messages. Some employer forms ask about your driver’s-license or work-authorization status; if you answer, we save your answer so you don’t have to retype it next time.
• Passwords are handled by our sign-in provider, Clerk. Jobeezy never stores your password.
• Your EEO answers — race, ethnicity, sex, veteran status, and disability self-identification — are collected only if you choose to share them. They are kept isolated in a separate, protected place, are never used to score you, match you, or tailor your applications, are never sent to any AI model, reach an employer only if you approve it on a given application, and are erased immediately when you ask us to delete your account.
• Fair-chance information you choose to add — justice-impacted or reentry status, criminal-record disclosures, and the reasons for any employment gaps (which can include medical or incarceration) — is treated as sensitive and is never sold. Unlike your EEO answers, this information is not isolated: our AI uses it to help tailor your applications and match you to jobs, and it is one input to the fairness dimension of your Fit Score. It is disclosed to an employer only as you direct. We do this to help — not to score you against other people — and we describe it plainly so there are no surprises.

We use all sensitive information only to deliver the service you asked for and for the limited purposes the CCPA allows, and we do not use it to infer characteristics about you. Because of this, the CCPA does not require us to post a “Limit the Use of My Sensitive Personal Information” link, and we do not post one. You may still ask us to limit our use of your sensitive information as described in Section 11, and we will honor it.

We are not a background-check company. Jobeezy is not a consumer reporting agency, and our Fit Score and AI-drafted materials are not “consumer reports” under the Fair Credit Reporting Act. Any fair-chance information you add is used to help you — to tailor and submit your own applications and match you to jobs, as described above — and never as a background check or consumer report on you.

8. How long we keep your information

We keep each category of personal information only for as long as we need it for the purposes above or to meet a legal obligation, and no longer. In general, we keep your information while your account is open. The details, matched to our practices, are in the How long we keep personal data section of our Privacy Policy. In short:

• Account and profile (name, email, address, preferences, résumé text, work history) — kept while your account is open; when you delete your account we lock it and remove your personal information from our active systems within about 30 days.
• EEO answers — erased immediately when you request deletion; we do not wait the 30 days.
• Auto-Apply screenshots and session traces — deleted with the rest of your data when you delete your account.
• Résumés and generated documents — kept for up to 12 months, and deleted when you delete your account.
• Security and audit logs — kept for a limited period to investigate problems, with archived logs kept longer where the law requires.
• Subscription and tax records — held by Apple, Google Play, and RevenueCat under their own rules; we keep only your subscription status.
• Backups — kept for a limited time on our providers’ standard rotation and overwritten in the ordinary course; we do not use backups to rebuild a deleted account. Do-not-contact records are kept so we can honor your choice, and a small record that a deletion happened is kept as proof.

9. Automated decisionmaking (Fit Score, AI, Auto-Apply)

Jobeezy uses automated tools to (1) score how well a job fits you (your Fit Score, a 0–100 number that is advice to you about a posting, typically surfaced around 70 and above), (2) tailor your résumé and draft cover letters, and (3) when you turn on Auto-Apply, fill out and submit applications you approve first. This is a self-help tool for you, the job seeker. Jobeezy is not an employer and does not decide whether you get hired — the employer does. The Fit Score is guidance, not a gate: you can apply to any eligible or stretch job you like. There is no solely-automated decision that Jobeezy makes about you.

How the Fit Score works. It compares the skills, experience, availability, location, and requirements in a posting with the information in your profile. It does not use your race, ethnicity, sex, veteran status, disability, or other EEO/diversity answers, which are kept separate from scoring. (Fair-chance information you choose to add is used — see Section 7.) It is job-matching, not a prediction about your personality or worth.

Pre-use notice, opt-out, and access (CCPA automated-decisionmaking rules). This section serves as your plain-language notice of how these tools work, what information they use, and the outputs they produce. You may opt out of this profiling and automated decisionmaking at any time. If you opt out, we will not compute a Fit Score for you or auto-submit applications for you, and you can still search and apply by hand. You may also ask us for access — a meaningful explanation of how a score or output was produced and how it was used — and you may ask a person to review it. Contact us as described in Section 11. We will not retaliate against you for opting out or asking. A fuller, plain-language explanation lives in our AI Transparency Notice.

10. Your California rights

Subject to certain exceptions in the CCPA, you have the right to:

• Know and access — the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it. You may request this for the period beyond the last 12 months as described in Section 2.
• Delete — ask us to delete personal information we collected from you, subject to legal exceptions (for example, completing a transaction, detecting security incidents, or complying with a legal obligation).
• Correct — ask us to fix inaccurate personal information we hold about you.
• Opt out of sale or sharing — we do not sell or share, so no opt-out is necessary, but you may submit one anyway.
• Limit sensitive personal information — as described in Section 7.
• Opt out of automated decisionmaking / profiling and request access to it — as described in Section 9.
• Data portability — get a copy of the personal information you gave us, in a structured, commonly used, machine-readable format (we provide a JSON file inside a ZIP, emailed to you).
• Non-discrimination — not be treated worse for exercising any of these rights (see Section 15).

11. How to exercise your rights

You can exercise your rights in any of these ways:

• In the app: open your Profile and use the privacy and account controls (the fastest way to export, correct, or delete your data).
• Delete-account page: visit jobeezy.com/delete-account/, which is also a valid way to submit a deletion request if you have uninstalled the app.
• By email: write to privacy@jobeezy.com with “California Privacy Request” in the subject line.

Because Jobeezy operates entirely online and deals directly with you, the CCPA does not require us to offer a toll-free phone number, and we do not. You do not need to create anything extra or hand over new sensitive information to make a request.

How we verify you. To protect your information, we confirm your identity to a reasonable degree of certainty before we act — usually by confirming you control the email on your account. For a deletion request we may ask for a reasonably higher degree of certainty, matched to the sensitivity of the request. We will not require you to create an account just to make a request.

Authorized agents. You may use an authorized agent to submit a request. An agent with a valid power of attorney only needs to prove that authority. An agent without a power of attorney must give us your signed permission, and we may verify your identity directly and ask you to confirm you authorized the agent. We do not require a power of attorney as the only route.

Timing and fees. We acknowledge your request within 10 business days and respond within 45 calendar days. If we need more time, we may take up to 45 additional days and will tell you why within the first 45. We do not charge a fee — unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, and will explain why.

12. Global Privacy Control and “Do Not Sell”

We honor the Global Privacy Control (GPC) browser signal on our websites. If your browser sends GPC when you visit our marketing site or web portal, we treat it as a valid request to opt out of any “sale” or “sharing” of your personal information, apply it without asking you to confirm, and — where technically feasible — show you that we recognized it. Because we do not sell or share, GPC does not change our practices, but we record and respect the signal.

On mobile: there is no operating-system GPC signal on Android or iOS, so the app cannot receive one. Our websites honor GPC, and the app gives you equivalent privacy controls in your Profile.

Do Not Track: there is no agreed industry standard for browser “Do Not Track” signals, so we do not respond to them; we honor GPC instead. We do not have a “Do Not Sell or Share My Personal Information” link because we do not sell or share personal information as defined by California law. You can review these choices any time on our Your Privacy Choices page.

13. Notice of Financial Incentive

Jobeezy offers a referral promotion — “give a month, get a month” — that can grant a period of Jobeezy Plus access. To the extent any referral or promotional credit is treated as a “financial incentive” tied to your personal information under California law, this is the notice of its material terms:

• What it is: when you refer a friend who signs up, you and/or your friend may receive promotional Jobeezy Plus access. To take part, we use the referring and referred person’s account identifiers and email.
• How to join and withdraw: participation is entirely voluntary. You opt in by choosing to refer someone, and you may withdraw at any time by contacting privacy@jobeezy.com or simply not participating.
• Value: the reasonable value of the promotion to us is not more than the value of the promotional access granted; we make a good-faith estimate that any difference relates to the ordinary value of a new referred subscriber, not to the sale of data (we do not sell data).
• No effect on your service or price: whether or not you participate, you receive the same Jobeezy at the same price and quality. The promotion is not a condition of using the Services and is not a trade of your privacy rights for a discount.

14. Minors

Jobeezy is intended for job seekers who are at least 16 years old, and Auto-Apply and Jobeezy Plus are for users who are at least 18 (or the local age of majority, if higher). We do not knowingly collect personal information from children under 13. We do not sell or share personal information at all; specifically, we do not sell or share the personal information of consumers we know to be under 16 without the opt-in consent the CCPA requires (from the consumer if they are 13 to 15, or from a parent or guardian if under 13). If you believe a child under 13 gave us information, contact privacy@jobeezy.com and we will delete it.

15. Non-discrimination

We will not discriminate against you for exercising any of your California privacy rights. We will not deny you goods or services, charge you a different price or rate, provide you a different level or quality of service, or suggest that we will — because you made a request. The only permitted differences are financial incentives allowed by law and directly related to the value of your data; the referral promotion described in Section 13 is the only such program, and taking part is voluntary and does not change your price or service.

16. Appeals

The CCPA does not create a formal appeal right (that is a feature of some other states’ laws), but as a courtesy, if we decline your request in whole or in part we will tell you why, and you may ask us to reconsider by replying to our response within a reasonable time (we suggest 30 days). We will review and respond. Whether or not you appeal, you may file a complaint with the California Privacy Protection Agency or the California Attorney General; we will tell you how.

17. Shine the Light

Under California’s “Shine the Light” law (Cal. Civ. Code §1798.83), California residents may request once per calendar year a list of the categories of personal information we shared with third parties for those third parties’ own direct-marketing purposes, and the names and addresses of those third parties. Jobeezy does not share personal information with third parties for their direct-marketing purposes. To submit a request anyway, email privacy@jobeezy.com.

18. Other California notes

We are not a data broker. Jobeezy has a direct relationship with you and does not sell your personal information, so we are not a “data broker” and are not required to register under California’s data-broker law (Cal. Civ. Code §1798.99.80 et seq.).

Request metrics. The CCPA requires businesses that handle the personal information of 10 million or more California consumers a year to publish annual request statistics. Jobeezy is below that threshold, so this requirement does not currently apply to us.

Accessible formats. We want this notice to be usable by everyone, including people who use screen readers or other assistive technology. See our Accessibility Statement, and if you need this notice in an alternative accessible format, email privacy@jobeezy.com and we will provide one.

19. Contact

For any question about this notice or to submit a request: privacy@jobeezy.com. For legal notices, subpoenas, or law-enforcement requests: legal@jobeezy.com. General questions: hello@jobeezy.com.
Jobeezy, Inc. (the “business” under the CCPA), a Delaware corporation · 800 Brazos St., Suite 400, Austin, TX 78701, USA.