Privacy Policy

What we collect

Account info you give us (name, email, phone), your uploaded resume, your job preferences, the personality-quiz answers, and the cover letters / tailored resumes our AI generates for you. We also collect:

• Application records — every job we apply to on your behalf, plus the bot's step-by-step audit log.
• Inbound employer emails forwarded to inbox@loveyournextjob.com via your routing alias (only emails you forward — we do not read your general inbox).
• Your subscription status, and a billing customer ID from whichever processor you subscribed through. We never hold your card number: on the web Stripe holds it, and for a subscription bought in the iOS app Apple handles payment entirely — we receive only a confirmation that the subscription is active.
• Optional LinkedIn / Indeed session cookies you paste into Settings to enable Easy Apply / Indeed Apply. Stored encrypted at rest, hard-expired after 30 days, never logged.

What we do with it

We use your data exclusively to run the application-preparation, status-tracking, and notification features you signed up for. We don't sell your data, don't share it with advertisers, and don't use it to train external models.

AI: what we send to Anthropic, and when

Some features need a large language model. We use one provider for this: Anthropic PBC, through the Claude API. Anthropic is the only AI service we send your personal data to.

We ask first.The first time you sign in, the app shows you this same disclosure and asks your permission. Until you grant it, nothing about you is sent to Anthropic — the block is enforced on our servers, not just in the interface. You can withdraw permission at any time under Account → AI & your data, and AI features stop immediately.

What is sent, and how we got it:

• Your résumé, as you uploaded it or as you built it in the app — including the name, email, phone number and location printed on it.
• Your profile and job preferences, as you entered them: target titles, locations, salary range, work authorization, and your personality-quiz results.
• Job postings you act on — the description text of a role you tailor to, score your fit against, or apply to. We collect these by indexing employers' public job boards.
• Screener answers you have given, and any résumé or cover-letter text you ask us to edit or rewrite.

Every use it is put to:

• Reading an uploaded résumé and turning it into structured profile data.
• Tailoring your résumé and writing cover letters for a specific job.
• Scoring how well you fit a role, and ranking your job matches.
• Drafting answers to employer screener questions while preparing an application (you approve them before anything is sent).
• Interview preparation and practice questions.

What is never sent: your password, your payment details, and the LinkedIn / Indeed session cookies you may paste into Settings.

Equal protection.We share this data only under terms that require Anthropic to protect it to a standard equal to our own. Anthropic processes it under its Commercial Terms of Service and Data Processing Addendum, which currently prohibit training on customer content and require confidentiality. Anthropic's published retention policy states that API inputs and outputs are deleted within 30 days, except where content is flagged under its usage policy or retention is legally required. Anthropic's privacy policy is at anthropic.com/legal/privacy.

Subprocessors

We only share personal data with third-party service providers who are contractually required to meet privacy and security protections consistent with our own obligations.

We share data with:

• Neon — managed Postgres for our application database.
• Vercel — hosting and serverless function runtime.
• Anthropic — Claude API for AI generation (resume tailoring, cover letters, screener answers).
• Resend — outbound email + inbound email webhook.
• Twilio — SMS notifications (only with your verified phone number).
• Stripe — payment processing and subscription billing for subscriptions bought on the web.
• Apple — payment processing and subscription billing for subscriptions bought in the iOS app.
• Browserbase — the managed cloud browser that opens an employer's application page and fills it with your profile, resume, and cover letter when you ask us to apply.
• ScaleSERP — licensed web-search API. Used only if you ask us to build your résumé from public sources, and only after you tick the consent box on that screen; it receives the name, city, employer, school and LinkedIn profile URL you give there (the LinkedIn URL is used only to search for your own public profile — we never open LinkedIn itself). Off entirely if you never use that feature.
• Upstash — Redis for rate-limiting.

Your rights

Settings → Danger Zone → Download my data gives you a JSON export of everything we hold. Settings → Delete Account permanently wipes your account and all owned data — single action, no soft-deletion, no shadow copies.

California residents (CCPA / CPRA): you have the right to know what personal information we collect, request deletion, correct inaccurate data, opt out of any sale or sharing, and limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, use the Settings controls above or email us — verification is via the email on your account.

EEA / UK residents (GDPR / UK GDPR): the lawful basis for processing your data is the performance of the service you contracted with us (Art. 6(1)(b)). You have the right of access, rectification, erasure, restriction of processing, data portability, and to object. You may lodge a complaint with your national supervisory authority. International transfer mechanism: our subprocessors operate in the US; data is transferred under the EU-US Data Privacy Framework where applicable, or standard contractual clauses otherwise.

How long we keep your data

Active account data is retained for as long as your account exists. When you delete your account, all user-owned rows are removed from our database within 30 days; the only exceptions are:

• Stripe holds payment records for its own retention period (typically 7 years for tax / dispute resolution); we cannot delete those on your behalf.
• Inbound employer emails that were already forwarded to your account before deletion remain in our routing logs for up to 90 days for delivery troubleshooting, then auto-purge.
• Anonymized aggregate metrics (counts only, no identifiers) may be retained indefinitely.

Cookies

We use a session cookie for authentication (set by NextAuth) and nothing else. No advertising cookies, no cross-site trackers, no third-party analytics that identify individuals.

Browser extension

Our optional Chrome/Edge browser extension (“Assisted Apply”) helps you fill job-application forms on employer ATS sites. It is strictly a convenience layer over the data you already gave us:

• After you paste an access token from your account settings, the extension calls our API to fetch your ownprofile fields (name, contact info, screener answers, résumé, tailored cover letter) and offers to fill them into the form on the page you're viewing.
• It reads the current application page only to locate the right form fields and to detect when you've submitted. It does not read your browsing history, collect data from other sites, inject ads, or sell or share any data.
• It never clicks Submit for you — you review every value and submit the application yourself.
• The access token and your extension preferences are stored locally in your browser (chrome.storage). Uninstall the extension or clear its storage to remove them.

Who operates this service (data controller)

LoveYourNextJob is a trade name of The O-Huffman Group LLC, an Arizona limited liability company (Arizona trade name registration 9493764), located at 1846 E Innovation Park Dr #5007, Oro Valley, AZ 85755. The O-Huffman Group LLC is the data controller responsible for the personal information described in this policy and the merchant of record for subscription charges.

Contact

Questions, requests, or concerns: hello@loveyournextjob.com