Legal Notice & Privacy Policy

Legal Notice

Privacy Policy

Data controller

Ilya Bondarenko (see Legal Notice above) is the data controller for personal data processed through JobScorer.

What we process, and why

• Account information (email, OAuth profile) — necessary to provide the service.
• Résumé content, cover-letter style samples, additional profile notes, generated cover letters, Screening Answers, Match explanations, and job-search preferences — necessary to generate and show Fit Scores and application materials on your behalf. We encrypt these contents.
• Aggregated, non-identifying usage data (Vercel Analytics — cookie-free, no personal identifiers) — legitimate interest in understanding product usage.
• A pseudonymous anti-abuse marker for the signup bonus — legitimate interest in preventing repeat claims of promotional credits after account deletion.

Sharing your data

We share data with a small number of processors, only to the extent necessary to provide the service: an AI provider that processes résumé, cover-letter, and job-description content to generate Fit Scores and application materials; an analytics tool that receives redacted, pseudonymous call diagnostics; an authentication provider if you sign in with a third-party account; an email provider for magic-link sign-in; and a hosting provider for the application, database, and cookie-free aggregated analytics. None of them may use your data for their own purposes, and we do not sell personal data to third parties.

Data retention

Data for active accounts is retained for as long as the account exists. Deleting your account immediately and permanently deletes your profile, resumes, and cover letters — there is no retention window for that account data. If you have not signed in for 12 months, your account is automatically deleted the same way, so inactive data does not accumulate indefinitely. To prevent repeated claims of the free signup bonus, we retain a keyed, pseudonymous email marker for up to six months after the bonus is claimed. We do not retain the email itself in this marker, and delete it automatically when the period ends.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. If you are a California resident, the CCPA gives you the right to know what data we hold, request deletion, and opt out of the sale of personal data — we do not sell personal data to third parties.

To exercise any of these rights, use the contact form from the address on your account (or provide other evidence you control it — we ask because acting on someone else's data at a stranger's request would itself be a privacy failure). Deletion requests for a signed-in account are also self-service any time from account settings, with no waiting period. For access, rectification, or a request made by email, we confirm receipt, log the request and its outcome, and respond within one month (GDPR) / 45 days (CCPA). If any of the data covered by your request was shared with a processor listed above, we forward the request to them (or delete/export on their behalf where their tooling allows it) as part of the same response — you do not need to contact them separately.

Cookies

We do not use tracking cookies. The only cookie set is a strictly-necessary session cookie for sign-in, exempt from consent requirements under the ePrivacy rules. Vercel Analytics identifies visits with a rotating hash, not a cookie.

Complaints

You have the right to lodge a complaint with a data protection supervisory authority.