Privacy Policy

Last updated: July 9, 2026. Effective: July 9, 2026.

This Privacy Policy (the “Policy”) explains what personal data Jobeezy, Inc. (“Jobeezy,” “we,” “us,” or “our”) collects, how we use it, who we share it with, how long we keep it, the choices you have, and how to contact us. It applies to the Jobeezy mobile app for Android (and for iOS if and when we launch it), the websites at jobeezy.com and app.jobeezy.com, and any related service that links to this Policy (together, the “Services”).

We have written this Policy in plain language so you can understand exactly what we do with your data. If you live in California, another U.S. state, the European Economic Area (EEA), the United Kingdom, Switzerland, Brazil, Canada, Australia, or another region with specific privacy rights, the Regional disclosures section describes the additional rights you have.

The short version. Jobeezy is a job-search and auto-apply tool that works for you, not for employers. We do not sell your personal data, we do not run advertising trackers, and we ask our AI providers to work under “no-training” terms. Your diversity/EEO answers (race, ethnicity, sex, veteran status, disability self-ID) are kept in a separate, isolated place and are never used to score you or sent to any AI. Fair-chance and background information you choose to add is different: it is used by our AI to tailor your applications and match you to jobs — but it is never sold. You can see, export, correct, and delete your data at any time.

1. At-a-glance summary

• What we collect: account info you give us (email, name); your résumé and career details; the jobs you save, dismiss, or apply to; screening answers you choose to pre-fill; optional fair-chance/background and diversity/EEO answers; messages you send us; your approximate (city-level) location if you allow it; subscription status; and device, log, and analytics data.
• What we don’t collect: your precise GPS location, your device contacts, your photo library, your camera or microphone, your biometric data, or your full payment-card numbers. Our app also blocks the Android advertising ID.
• How we use it: to run the Services, match you to relevant jobs, tailor and submit applications you authorize, keep your account secure, prevent fraud, meet our legal duties, and improve the product.
• Who we share it with: the vendors that run Jobeezy for us (our “sub-processors” — see the Sub-processors section); the employer hiring systems you authorize us to apply through; our subscription processors (RevenueCat, Apple, Google Play); and authorities when the law requires it.
• The two-category rule: your diversity/EEO answers are isolated and never used to score you or sent to AI; fair-chance/background info you add is used by AI to tailor and match — but never sold.
• We do not sell or “share” your personal data as those terms are defined under California and other U.S. state laws, and we do not use your résumé or applications to train third-party AI models.
• You can see, export, correct, and delete your data from inside the app (Profile → Delete account / Export my data), from app.jobeezy.com, from jobeezy.com/delete-account/, or by emailing privacy@jobeezy.com.

2. Notice at Collection

This is a compact summary that some U.S. state laws (like California’s CPRA) ask us to give you at or before the time we collect your data. The full detail is in the sections below and in our California Privacy Notice.

Category we collect	Why we use it	Do we sell or “share” it?	How long we keep it
Account & contact identifiers	Create and secure your account; contact you	No	While your account is open; then deleted (see Retention)
Résumé & career information	Build your profile and match you to jobs	No	While your account is open
Application activity & screening answers	Apply to jobs you authorize; auto-fill future forms	No	While your account is open
Fair-chance / background information (optional)	Tailor your applications and match fair-chance-friendly jobs	No	While your account is open
Diversity / EEO answers (optional)	Forward to an employer only if you approve; never used to score you	No	Erased immediately on deletion request
Approximate location (optional)	Suggest jobs near you	No	While your account is open
Subscription status	Grant paid features	No	While your account is open
Device, log & analytics data	Security, debugging, and improving the product	No	Per provider (see Retention)

We do not sell or “share” (for cross-context behavioral advertising) any category of personal data. A just-in-time version of this notice also appears inside the app — before we ask permission for your approximate location, and on the screens where you can add sensitive fair-chance or EEO answers.

3. Who we are and who is responsible for your data

Jobeezy, Inc. is the “data controller” (or, under U.S. state laws, the “business”) responsible for the personal data described in this Policy. We are a Delaware corporation with operations in Austin, Texas.

Our contact details: Jobeezy, Inc., 800 Brazos St., Suite 400, Austin, TX 78701, USA. For privacy questions and to exercise your rights, email privacy@jobeezy.com. If you are in the EEA, the UK, Switzerland, or Brazil, the same entity is the controller and can be reached at the same address and email; see Regional disclosures for representative and Data Protection Officer details.

Some words we use in this Policy:

• Services — the Jobeezy job-search and application-intelligence services across the Android app, the web portal (app.jobeezy.com), and jobeezy.com.
• Auto-Apply — the feature by which, at your explicit direction for a specific job and as your agent, Jobeezy submits an application you have reviewed, by driving a managed remote cloud browser on our servers.
• Employer Systems / ATS — employers’ careers pages and third-party applicant-tracking systems. Each employer is an independent controller under its own privacy policy — it is not a Jobeezy vendor.
• Fit Score — a 0–100 score of how well a job posting matches the preferences and qualifications you entered. It is advice to you about a job; it is never a report about you sent to an employer.
• EEO Information — voluntary race, ethnicity, sex/gender, veteran-status, and disability self-ID answers.
• Fair-Chance / Record Data — criminal-history, justice-impacted, reentry, or employment-gap information you choose to add. We never obtain it from a background check.
• Sub-processor — a vendor that processes personal data on our behalf, under our instructions.
• Jobeezy Plus — our paid subscription.

4. Personal data we collect

We collect only the data we need to run the Services. The categories are:

• Account and identity data. Email address, optional display name and profile photo, the Apple ID or Google account you choose to sign in with, and a per-installation device identifier. Your password is handled by our authentication provider, Clerk — Jobeezy never stores your password in plaintext.
• Contact and customer-record data. Phone number, city, state, ZIP/postal code, country, and any LinkedIn, portfolio, or website links you add.
• Résumé and career data. Your résumé file and the text extracted from it, work history, education, skills, certifications, work-authorization status, availability, salary expectations, target job titles, and career goals.
• Application activity. The jobs you view, save, dismiss, mark “not interested,” or authorize us to apply to; the tailored résumé and cover letter we generate for each application; the status of each submission; and your application outcomes.
• Screening answers. Answers you give to employer screening questions — which we save so you don’t have to re-type them — including status-type answers about work authorization or a driver’s license when an employer asks.
• Fair-chance / background information (optional). If you choose to add it: whether you are justice-impacted, in recovery, or formerly incarcerated; whether you have a criminal record; the reason for an employment gap (which can include incarceration, recovery, or a medical/medical-leave reason); program completions; informal experience; and character references (see below). You control whether to share any of this, and you can remove it at any time. See the two-category rule: this information is used by our AI to tailor your applications and match jobs, but it is never sold.
• Diversity / EEO answers (optional). Voluntary self-ID of race, ethnicity, sex/gender, veteran status, and disability status. These are isolated and are never used to score you or sent to any AI (see the two-category rule).
• Character references (other people’s data). If you add references, we collect the name, relationship, and contact details you provide about those people, and our AI intake helper reads them to strengthen your profile. You confirm you have permission to share their contact details with us.
• Compensation data. If you use our negotiation coach: your current, target, and competing offer figures and salary ranges.
• Approximate location (optional). If you grant permission, we read your device’s approximate (coarse, low-accuracy) location one time to suggest nearby jobs, and derive a “City, ST” label and approximate coordinates. We do not use precise GPS location, background location, or continuous tracking. If you deny permission, we fall back to a city from your résumé or one you type in.
• Communications. Emails, in-app messages, support tickets, and survey or feedback responses you send us.
• Subscription state. We do not see, store, or transmit your full payment-card number — Apple, Google Play, and our subscription processor (RevenueCat) handle billing. We receive your subscription state (active, paused, cancelled), the product you purchased, renewal/expiration timestamps, an opaque store-side transaction identifier, and your remaining application credits.
• Device and log data. IP address, mobile OS and version, app version, device model, language and locale, time-zone, push-notification token (only if you opt in to push), crash and error traces, and basic event logs (for example, “app_open,” “job_viewed”).
• Product and marketing analytics. Pseudonymized usage events (screen views, feature engagement, conversion funnels). On our marketing website only, newsletter/waitlist email addresses and the UTM parameters of the link you clicked to arrive.
• Auto-Apply session artifacts. When our Auto-Apply helper fills out an employer’s form, it captures screenshots and a session recording (trace) of that form to confirm the application was submitted and to fix errors. Those images can include information the employer’s form displayed or that was entered into it. See Auto-Apply and Retention.
• Consent and privacy-choice records. A record of the consents you give, your opt-out flags, and any Global Privacy Control signal we detect (including a timestamp and IP).

What we do not collect. We do not collect your precise device GPS location; your device contacts, photo library, camera, microphone, or call/SMS logs; biometric identifiers; or your full payment-card numbers. We do not require government-ID numbers (Social Security, driver’s-license, or passport numbers) and we do not build a structured store of them. Some employer applications ask status questions (for example, your work-authorization or driver’s-license status), and if you answer them we save your answers to save you time later. Because our Auto-Apply helper captures screenshots of the employer’s own form, those images can include information the form displayed, even data types we do not otherwise store.

5. Sources of personal data

• You. Most personal data comes directly from you — your account details, résumé, preferences, screening answers, and the content you generate using the app.
• Your device. Diagnostic, device, log, and (with your permission) approximate-location data is collected automatically when you use the Services.
• Apple and Google. If you sign in with Apple or Google, those services share the basic profile attributes you authorized (email, name, an opaque user identifier).
• Subscription processors. RevenueCat, Apple, and Google Play send us your subscription state and store-side identifiers so we can grant paid features.
• Public job postings. Job content (titles, descriptions, employer information, application URLs) is sourced from public job boards and employer career pages. This is information about the employer, not about you, and is ingested by our vendor Apify without any of your personal data.

6. How we use personal data

• Provide the Services. Authenticate you, store your résumé securely, surface relevant jobs, generate tailored résumés and cover letters you can review before submission, submit applications when you authorize us to, and notify you about new matches and application status.
• Match jobs to you. Compute a Fit Score for each job based on the posting and the information you provided, and rank your feed. The Fit Score is guidance for you about a job; it is not a submission gate, and you can apply to any eligible or “stretch” job you choose.
• Apply on your behalf. When you approve a specific application, complete and submit it as your agent (see Auto-Apply).
• Manage your subscription. Determine whether you are on the free or Plus tier, enforce monthly application limits, and grant paid access.
• Support you. Investigate and resolve issues you report.
• Keep the Services safe. Detect credential stuffing, scraping, abuse of free limits, fraudulent payments, and impersonation, and maintain access and audit logs.
• Meet legal duties. Comply with applicable law, respond to lawful legal process, and enforce our Terms of Service.
• Improve the product. Diagnose bugs and crashes; test changes to onboarding, matching, and other surfaces; and analyze aggregated outcomes.
• Communicate with you. Send transactional emails and in-app notices (account, security, application status), and — only if you opt in — product updates and tips.

7. Legal bases (EEA / UK / Switzerland)

If you are in the EEA, the UK, or Switzerland, the GDPR, UK GDPR, and Swiss FADP require us to identify a legal basis for each use. The bases we rely on are:

• Performance of a contract (Art. 6(1)(b)) — creating your account, delivering the Services, matching and scoring jobs, drafting your application materials, processing your subscription, and completing an Auto-Apply submission you have specifically authorized.
• Legitimate interests (Art. 6(1)(f)) — security and fraud prevention, debugging, and product analytics that improve the Services in a way you would reasonably expect. We balance our interests against your rights and choose the least intrusive option.
• Consent (Art. 6(1)(a)) — non-essential cookies, marketing email, approximate-location collection, and optional sensitive disclosures. For special-category data — your EEO answers and any disability/health information — we rely on your explicit consent (Art. 9(2)(a)). You may withdraw consent at any time, without affecting processing already carried out.
• Criminal-conviction and offence data (Art. 10) — fair-chance/record data you choose to add is handled under an additional lawful basis and used to help you prepare and submit your applications and to match you to fair-chance-friendly jobs (see the two-category rule in the AI features section). We minimize this data and you can remove it at any time.
• Legal obligation (Art. 6(1)(c)) — tax, accounting, and lawful requests from competent authorities.

8. When we share personal data

We share personal data only as described here.

• With our sub-processors who run the Services on our behalf, under written contracts that require them to protect your data and use it only as we direct. The current list is in the Sub-processors section.
• With employers and their applicant-tracking systems (ATS), when you authorize Jobeezy to submit an application. The data sent includes the résumé and cover letter you approved, the screening answers you pre-approved, and any EEO questions you elected to answer. Once submitted, the employer is an independent controller and the application cannot be recalled by us (see Auto-Apply).
• With payment and subscription processors. Apple, Google Play, and RevenueCat receive the data needed to process and reconcile your purchase.
• For legal reasons. In response to a valid subpoena, court order, or other lawful request, we may disclose data to the requesting authority. We resist over-broad or non-specific requests, disclose only the narrowest data responsive to valid process, and notify you when we are lawfully allowed to do so.
• To protect rights and safety. Where we have a good-faith belief that disclosure is necessary to prevent fraud, a security incident, or imminent harm.
• In a corporate transaction. If Jobeezy is involved in a merger, acquisition, or sale of assets, personal data may be transferred subject to standard confidentiality and continued protection under this Policy.

As of the effective date of this Policy, we do not sell personal data, we do not “share” personal data for cross-context behavioral advertising (as defined under California and other U.S. state laws), and we do not use your résumé or application content to train any third party’s AI model.

9. Sub-processors and AI providers

The vendors below process personal data on our behalf. This is the same list we keep on our live Sub-processors page; we may add or change vendors, and we post material changes there. Unless noted, processing takes place in the United States.

Sub-processor	Purpose	Data shared	Role
Render	Compute (web + worker), hosting, cron, logging	All service data transits and executes here	Processor
MongoDB Atlas	Primary database	Profile, résumé metadata, applications, outcomes, quotas (EEO data isolated)	Processor
Cloudflare R2	Object storage	Résumé files and text, generated documents, Auto-Apply screenshots and browser traces	Processor
Clerk	Authentication, sessions, identity (stores credentials)	Email, name, auth identifiers	Processor
OpenRouter	Primary LLM + embeddings (matching, résumé/cover-letter tailoring, Auto-Apply form-fill, interview prep)	Résumé text, cover letters, job descriptions, intake answers, apply-form screenshots — sent under no-training terms	Processor
Anthropic	Fallback/additional LLM	Same prompt content as above	Processor
Apify	Ingestion of public job postings	No end-user personal data — employer/job data only	Processor
Browserbase	Managed, isolated cloud browsers that fill and submit authorized applications	The approved application content and employer page contents, for the session only	Processor
2captcha	Solving CAPTCHAs encountered during Auto-Apply	The employer application-page URL and CAPTCHA site key (not your profile data)	Processor
RevenueCat	Subscription entitlement and receipt validation	App user id, purchase/entitlement state (no résumé data)	Processor
Resend	Transactional email (and inbound; delivers data-export ZIPs)	Recipient email, message content	Processor
PostHog	Product analytics and feature flags (server + mobile)	Pseudonymized usage events (personal data stripped before send)	Processor
Sentry	Error monitoring / crash reporting (server + mobile)	Scrubbed error/crash traces	Processor
Expo Push Service (650 Industries)	Push-notification delivery	Device push token, notification title/body	Processor
Google — Analytics (GA4)	Product + marketing analytics (marketing-site tag, IP-anonymized, and server-side events)	Event parameters; a pseudonymous user id on server events	Processor
Google — Firebase (mobile Analytics + Remote Config; Crashlytics SDK bundled)	Mobile analytics, remote feature-flag config, crash auto-collection	Mobile analytics events; device/app attributes	Processor
Google — AI Studio (Gemini)	Conditional non-personal-data-only AI generations (never résumé/cover-letter/intake)	Non-personal prompts only, and only when enabled	Processor
Apple / Google Play	In-app subscription billing (Google Play also = push transport)	Purchase/transaction state; some push tokens	Independent controllers (billing)

About our AI providers. Our primary AI is OpenRouter (which routes prompts to underlying model providers), with Anthropic as a fallback. We send prompt content under no-training terms and configure zero data retention where the underlying provider supports it. Because OpenRouter dispatches to varying models, we do not claim uniform zero-retention across every routed model. Your résumé and application content are never used to train these providers’ models. Your diversity/EEO answers are never included in any prompt sent to an AI model.

10. AI features and automated decision-making

Jobeezy uses AI to help you — not to make decisions about you for an employer. Our AI features are:

• Fit Score (0–100). The AI compares the skills, experience, availability, location, and requirements in a job posting with the information in your profile and scores the job. It is a suggestion for you, not a prediction about your personality, and it does not use your race, ethnicity, sex, health, or EEO answers. The default Fit Score we surface is around 70, but it is guidance only, not a submission gate — you can apply to any eligible or stretch job.
• Résumé and cover-letter drafting. The AI suggests wording; you review, edit, and approve every draft before it is used. You are responsible for the truthfulness of what you submit.
• Interview prep. The AI generates likely interview questions and example answers for a role you select.
• AI intake interview and negotiation coach. The AI reads the free-text and figures you provide to strengthen your profile and coach you on compensation.

The two-category rule (please read this). Your diversity/EEO answers — race, ethnicity, sex/gender, veteran status, and disability self-ID — are kept in a separate, isolated place, are never used to score, rank, tailor, or recommend, are never sent to any AI model from your profile, and reach an employer only if you explicitly approve them. Fair-chance and background information you choose to add is different. It is not isolated: our AI does use it to tailor your applications and help match you to fair-chance-friendly jobs, and it feeds the fairness part of the Fit Score. We treat it as sensitive and we never sell it, but we do not wall it off the way we wall off EEO answers — so you always know exactly how it is used before you choose to share it.

No solely-automated significant decisions by Jobeezy. Jobeezy does not make hiring, credit, housing, or other legally significant decisions about you. Those decisions are made by employers, not by us. The Fit Score and AI drafts are tools that help you decide where and how to apply, and you approve every application before it is submitted — a genuine human in the loop, and that human is you. You can ask us for a human review of any decision that affects you, ask us to explain how a feature works, or ask us to correct your information, and we will not penalize you for asking.

Opting out of AI. You can turn off AI-generated drafts and continue to apply manually. If you opt out of profiling, we will not compute a Fit Score for you or auto-submit an application on your behalf, and we will offer a manual path.

A fuller, plain-language explanation is in our AI Transparency Notice, which also covers the transparency rules under laws such as the EU AI Act (Art. 50), the California CPPA automated-decision rules, Colorado’s SB 26-189, and Brazil’s LGPD Art. 20. Because the fair-chance and health-gap information you add is used to help you, this Notice explains it honestly and does not imply it is walled off.

11. Auto-Apply and applying on your behalf

How Auto-Apply works. When you approve a specific application, you instruct Jobeezy to complete and submit that one application on your behalf, using the information you reviewed. We act as your agent, only on applications you approve (there is no mass-apply), submit only what that application needs, and you can cancel this authority at any time in settings. Jobeezy is not your legal or career adviser, is not the employer’s agent, and does not guarantee interviews or offers.

How we sign in to employer systems. For most applicant-tracking systems, we apply as a guest — we do not use your personal login credentials. For Workday only, because Workday requires a candidate account, Jobeezy creates a candidate account for you, generates and securely vault-stores a password for it, and uses a Jobeezy-managed email alias. We never apply “using your account credentials.”

Managed cloud browsers. Applications are filled and submitted by isolated, per-run cloud browsers operated by our vendor Browserbase. If an employer’s page presents a CAPTCHA, our vendor 2captcha helps solve it — it receives the page URL and CAPTCHA site key, not your profile data.

Screenshots and session recordings. During an Auto-Apply run, the cloud browser captures full-page screenshots of the employer’s form and a session recording (trace). These prove the application was submitted and help us fix errors. Because they capture the employer’s own form, they can include information the form displayed or that was entered into it. A vision AI model (OpenRouter, with Anthropic as fallback, under no-training terms) reads screenshots to understand and fill the form. These artifacts are stored in Cloudflare R2 and are deleted when your data is deleted (see Retention). Our automation never fills demographic/EEO fields on an employer form.

The point of no return. Once an application is submitted, the employer becomes an independent controller of your data under its own privacy policy, and we cannot recall the application. For more on the agency relationship, see our Terms of Service.

12. Sensitive personal information

Some of the data you may give us is “sensitive” under privacy laws. This includes: your work-authorization, immigration, or citizenship status; driver’s-license status answers; race, ethnicity, sex/gender, veteran, and disability self-ID (EEO answers); fair-chance/criminal-record information; health-adjacent information (a medical reason for an employment gap; disability); and financial information (salary and offers). We only ask for these when they help you apply, and only if you choose to provide them.

How we limit sensitive data. We use your sensitive information only to deliver the Services you request — for example, to tailor and submit your own applications — and we do not use it to infer characteristics about you. Your EEO answers are never used to infer anything, never used to score you, and never sent to any AI. Because we do not use or disclose your sensitive information to infer characteristics about you, and use it only to provide the Services you request, we are not required to and do not post a “Limit the Use of My Sensitive Personal Information” link — but you may still ask us to limit it and we will honor your request.

We are not a background-check or credit-reporting company. Jobeezy is not a consumer reporting agency, does not prepare, furnish, or assemble “consumer reports” or background checks, and our Fit Scores and AI-drafted materials are not “consumer reports” under the federal Fair Credit Reporting Act (FCRA) or similar laws. Any fair-chance or background information you choose to add is used only to help you prepare and submit your own applications.

Consumer health data. The only health-adjacent data we collect is a medical/medical-leave reason you may give for an employment gap, and disability information in your voluntary EEO self-ID. We do not sell any health-related data. If you are in a state with a consumer-health-data law (such as Washington’s My Health My Data Act, Nevada’s SB 370, or Connecticut’s health-data rules), you may contact privacy@jobeezy.com to exercise your rights over this data, and we will not share it without your consent.

13. How long we keep personal data

We keep your information for as long as your account is open and you are using Jobeezy, and then only as long as we need it. When you delete your account, we lock it right away and remove your personal information from our active systems within about 30 days. Some things are handled differently:

• Diversity/EEO answers are deleted immediately when you ask us to delete your account — we don’t wait the 30 days.
• Auto-Apply screenshots and session recordings are deleted from storage together with the rest of your data.
• Résumés and generated documents are kept for up to 12 months and are deleted when you delete your account.
• Security and audit logs are kept for up to about 13 months to help us investigate problems; archived audit logs may be kept for up to 7 years where the law requires.
• Subscription and tax records are held by Apple, Google Play, and RevenueCat under their own rules. We keep only your subscription status; we revoke paid entitlements on deletion but cannot delete the stores’ billing and tax records.
• Backups are retained on a rolling basis under our providers’ standard backup rotation and are overwritten in the ordinary course; data no longer accessible in production is purged from backups as they cycle. We do not use backups to rebuild a deleted account.
• Analytics that is aggregated or de-identified so it can no longer be linked to you may be kept to improve the Services; identifiable analytics events are kept no longer than needed for the purpose.
• Do-not-contact / unsubscribe records and a small record that a deletion happened are kept so we can honor your choices and prove the deletion. If you joined a marketing or waitlist list, that email may be kept until you unsubscribe.

Applications you already submitted to an employer live in the employer’s system and cannot be recalled by us. When you close your account, we hard-delete your Clerk sign-in identity at the time of your request — there is no “log in again to reactivate” path, so please export anything you want to keep first.

14. Security

We use reasonable technical and organizational measures to protect personal data, including: encryption in transit (TLS 1.2 or higher); encryption at rest (AES-256, provider-managed on MongoDB Atlas and Cloudflare R2); least-privilege access controls; structured audit logging; dependency pinning and review; isolated, per-run cloud-browser sessions for Auto-Apply; and a documented incident-response process. Your password is handled by our authentication provider, Clerk, and is never stored by Jobeezy in plaintext. We store no payment-card data. Your diversity/EEO answers are isolated from scoring and AI, and content sent to our AI providers is under no-training terms with zero retention where the provider supports it.

We are not currently SOC 2 or ISO 27001 certified; any such program is on our roadmap only, and we will not claim a certification we do not hold. No service can be 100% secure. If you believe your account has been compromised, contact us right away at security@jobeezy.com. Security researchers acting in good faith under our responsible-disclosure guidelines may report issues to the same address without fear of legal action.

15. If there is a data breach

If a security breach affects your personal information in a way that is likely to put you at risk, we will let you know without undue delay, as required by the laws that apply to you. We’ll tell you, in plain language, what happened, what information was involved, what we’re doing about it, and steps you can take to protect yourself. We’ll send this by email and/or an in-app notice, and we’ll notify regulators and authorities where the law requires. The exact timing depends on the laws where you live and how long it takes us to safely understand what happened; some laws let us pause a notice briefly at a law-enforcement agency’s request or while we secure our systems, and we won’t use that to delay longer than the law allows.

EEA / UK / Switzerland: where a personal-data breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, consistent with Articles 33 and 34 of the GDPR. Where required, we will also notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware. Brazil: where an incident may cause you relevant risk or harm, we’ll notify you and the ANPD within the period Brazilian law requires.

16. International data transfers

Jobeezy is offered in, and directed to people in, the United States. We process personal data in the United States, and our vendors may process it in the United States and other countries. If you are outside the United States, your data will be transferred to and processed in the United States, which may not offer the same level of protection as your home country.

• EEA / UK / Switzerland. We rely on the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and the Swiss addendum, together with a transfer-impact assessment and supplementary measures where needed. Where a vendor is certified under the EU–U.S. Data Privacy Framework, we may also rely on that framework for that vendor; we do not rely on it where it does not apply.
• Brazil. We rely on contract-performance necessity, your specific highlighted consent where required, and ANPD standard clauses in our vendor contracts.
• Canada / Québec. We use the accountability model — contractual comparable protection and transparency that data goes to the United States and may be accessed by U.S. authorities; for Québec we complete a privacy-impact assessment before a transfer.
• Australia. We take reasonable steps so overseas recipients handle your data consistently with the Australian Privacy Principles.

17. Children and teens

You must be at least 16 years old to create an account and search for jobs on Jobeezy. You must be at least 18 years old (or the age of majority where you live, if higher) to use Auto-Apply or to purchase Jobeezy Plus, because those involve submitting binding applications and entering an auto-renewing contract. We do not knowingly collect personal data from children under 16 in the United States, or from anyone below the local digital-consent age in the EEA/UK. If you believe a child has provided us with personal data, contact privacy@jobeezy.com and we will delete it.

18. Cookies and similar technologies

Our websites (jobeezy.com and app.jobeezy.com) use a small number of cookies and similar technologies for security, functionality, and analytics. The mobile app does not use browser cookies; it uses device identifiers and SDKs (such as PostHog and Sentry). Where the law requires (EEA/UK/Brazil), we ask for your consent before setting non-essential cookies, and you can change your choice at any time. Full details, including a table of each cookie and storage key, are in our Cookie Policy. See also Your Privacy Choices.

19. Advertising and analytics

As of the effective date of this Policy, we do not run advertising-tracking pixels on the Services, we do not allow third parties to drop advertising cookies, and our Android app blocks the advertising ID. We use first-party and product analytics — PostHog (server and mobile), Google Analytics 4 (with IP anonymization on the marketing site, and server-side events), and Google Firebase analytics on mobile — to understand which features and pages work and to fix problems. On our marketing site, PostHog is configured with session recording and autocapture; on the web app it is not. We also use Sentry for error and crash diagnostics. We honor the Global Privacy Control (GPC) signal on our websites as an opt-out of any sale or “sharing.” There is no widely adopted “Do Not Track” standard, so we do not respond to DNT signals; we honor GPC instead.

20. Your privacy rights

Depending on where you live, you have some or all of these rights over your personal data:

• Know / access — get a copy of the data we hold about you.
• Correct — fix inaccurate or incomplete data.
• Delete — ask us to delete your data, subject to lawful exceptions.
• Portability — receive your data in a structured, machine-readable format (we provide JSON).
• Opt out of sale and of “sharing” for cross-context behavioral advertising — we do neither, but we honor the opt-out.
• Opt out of targeted advertising and of profiling in furtherance of decisions with legal or similarly significant effects.
• Limit the use of sensitive personal information (California) — see Sensitive personal information.
• Restrict or object to processing, and withdraw consent (EEA/UK/Switzerland).
• Human review of automated decisions — ask a person to review, explain, or reconsider, and not be subject to a solely-automated significant decision.
• Non-discrimination and non-retaliation for exercising your rights.
• Appeal a denied request, and lodge a complaint with your data-protection authority or attorney general.

In some states you have extra rights: for example, Minnesota and Oregon residents can ask for a list of the specific third parties we disclosed their data to, and Minnesota residents can question the result of a profiling decision.

21. How to exercise your rights

You can access, export, correct, or delete your data in three ways: in the app (Profile → Delete account or Export my data), on the web at app.jobeezy.com or jobeezy.com/delete-account/, or by email to privacy@jobeezy.com.

• Timing. We acknowledge requests within 10 business days and respond within 45 days, extendable once by another 45 days for complex requests, with notice to you. In the EEA/UK/Switzerland, we respond within one month, extendable by up to two further months for complex or numerous requests.
• No fee, no account needed. Requests are free unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, with an explanation. You do not need a Jobeezy account to make a request, and we will not over-collect data to verify you.
• Verification. We verify your identity to a reasonable degree of certainty (higher for deletion and sensitive requests), usually by confirming control of the email on file. Because we are an online-only business, we do not maintain a toll-free number.
• Authorized agents. You may use an authorized agent. An agent with a valid power of attorney may act for you; an agent without one may be asked for your signed permission, and we may verify you directly.
• Data export format. We deliver your data as a JSON file inside a ZIP, emailed to you as an attachment. It includes your profile, applications, saved jobs, seen jobs, and outcomes.

22. Your Privacy Choices

We do not sell or “share” your personal information. Because we do not sell or share personal data for cross-context behavioral advertising, we are not required to post a “Do Not Sell or Share My Personal Information” link — but you always have the choice, and we honor it.

• Global Privacy Control (GPC). On our websites, we detect and honor the GPC browser signal as an opt-out of any sale or sharing, and where feasible we confirm that we recognized it. There is no OS-level GPC on mobile, so the app provides equivalent opt-out controls in its settings rather than reading a GPC signal.
• Cookies. Use the “Cookie Settings” control in our website footer to change your cookie choices at any time.
• Nevada. Nevada residents may submit a verified request not to sell certain covered information by emailing privacy@jobeezy.com. We do not sell your information.
• Marketing. Turn off marketing email using the unsubscribe link in any message, or in your settings.

23. Regional disclosures

23.1 California (CCPA / CPRA)

The categories of personal information we collect map to Personal data we collect; our purposes are in How we use personal data; recipients are the vendors in the Sub-processors section, employers you authorize, and payment processors. In the preceding 12 months we have not sold or “shared” any category of personal information and have not used or disclosed sensitive personal information beyond the purposes permitted by law. California residents have the rights in Your privacy rights and may exercise them as described in How to exercise your rights, without discrimination. A fuller California-specific notice — including the disclosure matrix, sensitive-data handling, minors, GPC, automated decisions, and appeals — is in our California Privacy Notice.

23.2 Other U.S. states

If you reside in Texas (our home state, under the Texas Data Privacy and Security Act), or in Virginia, Colorado, Connecticut, Utah, Oregon, Montana, Minnesota, Maryland, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Indiana, Kentucky, Rhode Island, or another state with a comprehensive consumer privacy law, you have rights substantially similar to those in Your privacy rights — to access, correct, delete, and obtain a portable copy of your data, to opt out of targeted advertising, sale, and profiling for significant decisions, and to appeal a denied request. We honor these rights through the channels in How to exercise your rights; to appeal, reply to our response email or write to privacy@jobeezy.com with the subject “Appeal.” State-specific notes: Oregon and Minnesota residents may request a list of the specific third parties to whom we disclosed their data; Minnesota residents may question the result of a profiling decision; Maryland residents get strict data-minimization and a ban on the sale of sensitive data and of minors’ data. We do not sell sensitive data in any state, and we treat work-authorization, immigration, and citizenship status as opt-in sensitive data everywhere.

23.3 European Economic Area, United Kingdom, and Switzerland

The data controller is Jobeezy, Inc., 800 Brazos St., Suite 400, Austin, TX 78701, USA, contactable at privacy@jobeezy.com. Our legal bases are in Legal bases; our international-transfer safeguards are in International data transfers. You have the rights to access, rectify, erase, restrict, object, and port your data, to withdraw consent, and to rights concerning automated decisions and profiling, and you may lodge a complaint with your local supervisory authority. Representatives. Jobeezy is offered only in the United States and does not offer goods or services to, or monitor the behavior of, people in the EEA, the UK, or Switzerland; on that basis we have not designated an EU or UK representative under Article 27 GDPR or a statutory Data Protection Officer. If that changes, or if we are otherwise required to designate one, we will do so and publish their contact details here. In the meantime, please direct all requests to privacy@jobeezy.com.

23.4 Brazil (LGPD)

Jobeezy acts as the controller (“controlador”) under Brazil’s Lei Geral de Proteção de Dados. Our legal bases map to the LGPD’s hipóteses legais; for sensitive data (criminal, health, race) we rely on your specific, highlighted consent. You have the right to a review of decisions made solely by automated processing (Art. 20). Our Data Protection Officer / Encarregado can be reached at privacy@jobeezy.com. A Portuguese-language version of this Policy is available on request.

23.5 Canada and Québec

If you are in Canada, we handle your data under PIPEDA (and Québec’s Law 25). We obtain express consent for sensitive information such as criminal-record or background data, use the accountability model for cross-border transfers, and complete a privacy-impact assessment before a Québec transfer. You may contact our Privacy Officer at privacy@jobeezy.com, and Québec residents have rights to be informed about and to request human review of automated decisions.

23.6 Australia

If you are in Australia, we handle your personal information under the Privacy Act and the Australian Privacy Principles, obtain your consent for sensitive information (including criminal-record data), take reasonable steps for overseas disclosures, and follow the Notifiable Data Breaches scheme. From 10 December 2026 we will describe our use of automated decision-making in this Policy as the APP rules require. Contact privacy@jobeezy.com.

24. Changes to this Policy

If we make material changes, we will notify you at least 30 days before they take effect through an in-app banner, an email, and an entry in our changelog. Non-material changes (such as clarifications) may be made at any time and are reflected in the “Last updated” date at the top of this page. Changes to our list of sub-processors are posted on our Sub-processors page.

25. How to contact us

Privacy questions, data-subject requests, and complaints: privacy@jobeezy.com
Security disclosures and breach reports: security@jobeezy.com
Legal notices, our Data Processing Addendum, subpoenas, and law-enforcement requests: legal@jobeezy.com
Subscription and billing questions: billing@jobeezy.com
General questions and support: hello@jobeezy.com
Postal: Jobeezy, Inc., 800 Brazos St., Suite 400, Austin, TX 78701, USA.

For business/controller-to-controller relationships, see our Data Processing Addendum. For an accessible version of this Policy or to request an accommodation, see our Accessibility Statement.