Privacy Policy

This policy explains what information JobAssistUI collects, why, and what your choices are. The short version: we store the job-search records you create so we can show them back to you and export them, if you use the AI tools we send your resume and job posts to Anthropic to process them, if you use Apply for me a cloud browser run by Browserbase fills in the application form, we use a payment processor for billing, and we do not sell your data.

1. Information we collect

• Account: your email address, used to sign you in with one-time links.
• Activity records: the job-search entries you create — dates, employer names, job titles, methods, results, notes, URLs — and any evidence screenshots you upload.
• Settings: your state, weekly target, reporting period start day, and (if you use Apply for me or the Indeed extension) the answer template you fill out.
• Resume (if you use the AI tools): the resume file name, its text, and the profile built from it (name, contact details, work history, education and skills). If you upload a PDF, we also keep the original file in private storage so Apply for me can upload it to job applications. Only you can reach it. When you upload a new resume or paste one in, the old file is replaced or deleted.
• AI usage: a count of AI requests per day, used to enforce the daily limit.
• Billing: subscription status and billing history via Stripe. Your card number is collected and stored by Stripe, not by us.
• Technical: standard server logs (IP address, browser type, pages requested) kept for security and debugging.

2. AI tools (Guided)

When you use the AI tools, we send your resume (the PDF or text you give us) and the job posting you pick or paste to Anthropic, which runs the AI model. Anthropic processes it to return the result and does not use it to train its models. If you paste a job link, our server fetches that page to read the posting. Job lists come from public company career sites and job boards.

We save your resume profile so you don't have to upload it each time. The tailored resume, cover letter and answers are drafts made for you to copy and edit. When you tap "I applied", we add that job to your activity log. We never submit an application for you.

Apply for me. When you start it for a job, we open the company's application form in a cloud browser run by Browserbase. We fill in the form from your resume profile and answer template, and may upload your resume file. Questions we can't fill from those are sent to Anthropic along with your resume so the AI can draft an answer. Browserbase runs the browser, so it sees the application page and the answers being filled in. You see the same live page on our site and press submit yourself. The browser session is closed when you finish or after 15 minutes. If you submit, we add the job to your activity log.

The optional Indeed extension reads the job-application page you are working on in order to fill in form values. It uses your JobAssistUI account only to fetch your answer template, check your subscription, and record an activity-log entry when you confirm an application. It never submits an application without you present and confirming.

3. How we use information

We use your information solely to operate the Service: signing you in, storing and displaying your records, generating exports, tracking your weekly count, processing payments, preventing abuse, and responding to support requests. We do not sell your personal information and we do not use your records for advertising.

4. Service providers

We rely on a small number of processors to run the Service: Supabase (database, authentication, and file storage), Anthropic (AI processing of resumes and job posts), Browserbase (runs the cloud browser for Apply for me; it sees the application form and the answers being filled in), Stripe (payments), and Vercel (hosting). Each receives only what it needs to perform its role and is bound by its own privacy and security commitments.

5. Data retention and deletion

Your records are kept for as long as your account exists so your compliance history stays available to you. If you want your account and all associated data (records, screenshots, resume, settings) deleted, email us at the address below and we will delete them within 30 days. Billing records required for tax and accounting purposes are retained as required by law.

6. Security

Data is encrypted in transit, stored with per-user access controls (row-level security), and evidence files live in private storage buckets scoped to your account. No method of storage is 100% secure, but we design so that one user can never read another user's records.

7. Your rights

You can access and export your records at any time from the app (PDF/CSV). You can correct or delete individual entries yourself, and you can request full account deletion by email. Depending on where you live, you may have additional rights (access, portability, erasure) — email us and we will honor them.

8. Children

The Service is not directed to anyone under 18.

9. Changes

If we make material changes to this policy, we will notify you by email or in the app before they take effect.

10. Contact

Privacy questions or deletion requests: prs.educ01@gmail.com