Privacy Policy — JobAgent & Apply Co-pilot

Last updated: 2 August 2026

Draft. Items marked [[ LIKE THIS ]] are filled in once the company is registered. Have it reviewed before relying on it.

JobAgent collects job postings, scores them against your CV using AI, drafts motivation letters in your writing style, and helps you fill application forms. Apply Co-pilot is its Chrome extension. This policy covers the web app, the extension, the MCP connector and the optional local runner.

The data controller is [[ YOUR REGISTERED NAME ]], a sole trader established in Italy (VAT number / partita IVA [[ NUMBER ]], business address [[ ADDRESS ]]).

What we collect

Data	Why
Name and email address	To create and identify your account (collected through Clerk when you sign up).
Your CV file and the text extracted from it, plus any portfolio or case-study documents you upload	To score jobs against your real experience and ground the letters it drafts. This is the core of the Service.
Your profile and preferences — target roles, locations, salary floor, visa needs, writing style	To decide which jobs match you and how your letters should sound.
Jobs collected for you, their AI scores and reasons, saved letters, your searches, application status and notes	This is your working pipeline.
Credentials you choose to connect: your Claude (Anthropic) subscription token, and optionally your own Apify, Reed or OpenRouter API keys	So the AI and paid data sources run on your account rather than ours. Stored encrypted — see below.
Usage counters, and an audit log of security-relevant events (token regenerated, data exported, account deleted)	To enforce fair-use limits and to be able to answer "what happened to my account?".
Server logs	To operate and debug the Service. Query strings in access logs are scrubbed so access tokens never land in them.

We do not collect your browsing history, and we never ask for or handle card numbers, passwords, or government ID documents.

Legal bases (UK/EU GDPR)

Performing our contract with you — everything needed to run the Service: storing your CV and profile, scoring jobs, drafting letters, running your account.
Legitimate interests — keeping the Service secure and working: rate limits, abuse prevention, the audit log, short-lived server logs.
Legal obligation — keeping billing and tax records.
Consent — for each optional third-party account you connect (Claude, Apify, Reed, OpenRouter). Withdraw it any time by disconnecting in Settings.

Where your data lives

Database and backend: Railway, EU region (Frankfurt). All structured data lives there. It is a shared, multi-tenant database: every row carries an owner and every query is scoped to the signed-in account, so one user cannot read another's data.
Frontend: Vercel. The web interface stores nothing; it only calls the backend.
Extension: your own browser. It keeps your backend URL and your personal access token in Chrome's extension storage on your device.
Local runner (optional): runs entirely on your machine and keeps its configuration in your home directory.

We are established in the UK while the data is hosted in the EU; transfers between the two rely on the existing UK–EU adequacy arrangements. If you use the Service from elsewhere in the world, your data is still processed in those regions.

How your data is protected

Credentials you connect are encrypted at rest by the application, on top of the provider's own disk encryption.
Access tokens for the extension and the MCP connector are stored as hashes — the raw value is never what identifies you.
Every request is authenticated and scoped to one account; a request that would reach another account's row is refused.
You can revoke any token from Settings and it stops working immediately.

Who else processes your data

Who	What for	What they see
Anthropic	The AI itself — scoring, letters, form answers	The contents of each prompt at the moment it is made: relevant parts of your CV, profile and the job posting. We store nothing there. When you connect your own Claude subscription, that inference happens under your agreement with Anthropic.
Clerk	Sign-up, sign-in, sessions	Your email, name and authentication events.
Railway	Backend hosting and database (EU)	Hosts the data described above.
Vercel	Frontend hosting	Standard request metadata; no application data.
Stripe (once paid plans launch)	Payments	Your payment details, held by Stripe. We never see or store card data.
Apify, Reed, Arbeitnow and public job boards	Collecting job postings	Only the search terms you configure. Your CV and personal details are never sent to them.
Sentry (if enabled)	Error monitoring	Technical error details, with personal data suppressed.

What we never do

We do not sell or rent your personal data.
We do not use your CV, letters or job data to train AI models.
No advertising, no third-party analytics trackers.
We never submit a job application for you. The assistant fills the form and stops — the submit click is always yours.

What the extension accesses

The form on the page you are applying on: when you open the side panel and start filling, it reads the visible field labels, types and current values of that tab so the AI can propose answers. Only the active tab, only while you are using the panel.
Your profile and CV: fetched from your JobAgent account so the answers are grounded in your real experience.
It attaches your stored CV file to a form's upload field when you ask it to.

Uninstalling the extension removes everything it kept in Chrome storage.

Your rights

Under UK/EU GDPR you can request access, correction, deletion, restriction, objection and portability. Two of these are built into the app, so you do not have to ask us:

Export — download everything held under your account as JSON.
Delete — delete your account from the app. Credentials are revoked immediately and your data is kept for a 30-day grace period in case you want it back, then permanently removed. Records we must retain for tax or audit reasons are anonymised rather than deleted, so they no longer identify you.

You can also complain to a supervisory authority — in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority in the country where you live.

Retention

Account data: while your account exists, plus the 30-day grace period.
Server logs: 30 days or less.
Billing and tax records: as long as the law requires, anonymised once they no longer need to identify you.

Cookies

Only what is needed to keep you signed in — the session cookies set by Clerk. No advertising or tracking cookies.

Children

The Service is for adults (18+). We do not knowingly collect data from children.

Changes

If we change this policy materially we will tell you by email or in the app before it takes effect.

Contact

Privacy questions, or to exercise a right the app does not cover: [[ SUPPORT EMAIL ON YOUR OWN DOMAIN ]]

[[ YOUR REGISTERED NAME ]] · sole trader (ditta individuale) established in Italy · VAT number (partita IVA) [[ NUMBER ]] · business address [[ ADDRESS ]]
[[ UK REPRESENTATIVE (UK GDPR Art. 27) — you are established in the EU, so no EU representative is needed. But you offer the Service to people in the UK and you process CVs, which is not low-risk, so a UK representative may be required. Confirm with an adviser before launch. ]]