Privacy Policy

What we collect

Account info you give us (name, email, phone), your uploaded resume, your job preferences, the personality-quiz answers, and the cover letters / tailored resumes our AI generates for you. We also collect:

• Application records — every job we apply to on your behalf, plus the bot's step-by-step audit log.
• Inbound employer emails forwarded to inbox@loveyournextjob.com via your routing alias (only emails you forward — we do not read your general inbox).
• Your Stripe customer ID + subscription status (the actual card number is held by Stripe, never us).
• Optional LinkedIn / Indeed session cookies you paste into Settings to enable Easy Apply / Indeed Apply. Stored encrypted at rest, hard-expired after 30 days, never logged.

What we do with it

We use your data exclusively to run the auto-apply, status-tracking, and notification features you signed up for. We don't sell your data, don't share it with advertisers, and don't use it to train external models. Your resume content is sent to the Anthropic API (Claude) only when you trigger AI generation; Anthropic's zero- data-retention policy applies on inputs.

Subprocessors

We share data with:

• Neon — managed Postgres for our application database.
• Vercel — hosting and serverless function runtime.
• Anthropic — Claude API for AI generation (resume tailoring, cover letters, screener answers).
• Resend — outbound email + inbound email webhook.
• Twilio — SMS notifications (only with your verified phone number).
• Stripe — payment processing and subscription billing.
• 2Captcha — captcha solving when an ATS form requires it (only the captcha challenge data is sent, never your personal information).
• Upstash — Redis for rate-limiting.

Your rights

Settings → Danger Zone → Download my data gives you a JSON export of everything we hold. Settings → Delete Account permanently wipes your account and all owned data — single action, no soft-deletion, no shadow copies.

California residents (CCPA / CPRA): you have the right to know what personal information we collect, request deletion, correct inaccurate data, opt out of any sale or sharing, and limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, use the Settings controls above or email us — verification is via the email on your account.

EEA / UK residents (GDPR / UK GDPR): the lawful basis for processing your data is the performance of the service you contracted with us (Art. 6(1)(b)). You have the right of access, rectification, erasure, restriction of processing, data portability, and to object. You may lodge a complaint with your national supervisory authority. International transfer mechanism: our subprocessors operate in the US; data is transferred under the EU-US Data Privacy Framework where applicable, or standard contractual clauses otherwise.

How long we keep your data

Active account data is retained for as long as your account exists. When you delete your account, all user-owned rows are removed from our database within 30 days; the only exceptions are:

• Stripe holds payment records for its own retention period (typically 7 years for tax / dispute resolution); we cannot delete those on your behalf.
• Inbound employer emails that were already forwarded to your account before deletion remain in our routing logs for up to 90 days for delivery troubleshooting, then auto-purge.
• Anonymized aggregate metrics (counts only, no identifiers) may be retained indefinitely.

Cookies

We use a session cookie for authentication (set by NextAuth) and nothing else. No advertising cookies, no cross-site trackers, no third-party analytics that identify individuals.

Contact

Questions, requests, or concerns: hello@loveyournextjob.com