Privacy Policy

What we collect

• Account details. A username, an email address, and a password (stored only as a salted scrypt hash — we never store your plaintext password). Your email is used for registration, email verification, and password reset.
• Job-search content you provide. Resumes you upload, the profile and interview answers you build with Coach, job descriptions you paste or link, application status, notes, referrals, and next steps.
• Generated artifacts. The tailored résumés, cover letters, fit analyses, and interview-prep materials Coach produces, including the compiled PDFs.
• Optional voice input. If you choose to dictate, the audio you record is sent for transcription (see Voice transcription below).
• Usage records. We record per-account language-model token usage for cost accounting and abuse prevention.

We do not run third-party advertising or analytics trackers, and we do not sell your data.

Where your data is stored

Your account, job-search content, and generated artifacts are stored server-side on infrastructure the operator controls (the application database and generated PDFs live on a hosted server volume). Encrypted, off-site database backups may be retained for disaster recovery. Stored data stays on our servers except where it is transmitted to the specific third-party processors described below to perform a function you requested.

Language-model processing

The core features — the interview, fit analysis, résumé and cover letter authoring, and interview prep — work by sending the relevant parts of your profile, the job description, and your instructions to a large-language-model provider, which returns generated text.

The text-generation providers we use are US-based providers running open-weight models, selected on the basis that they do not train on customer data. We send a provider only what a given request needs (for example, your profile and the job posting for a fit analysis). The provider that backs a given feature can change over time as the operator selects models, but the non-training, open-weight standard above is the bar every text-generation provider is chosen against.

The one exception is voice transcription — see the next section.

Voice transcription (the exception)

If you use the optional dictation feature, the audio you record is sent to OpenAI’s gpt-4o-transcribemodel to convert speech to text. This is a deliberate, called-out exception to the non-training / open-weight provider standard described above: transcription uses a hosted OpenAI model rather than an open-weight one. Your audio is processed by OpenAI under their terms to produce the transcript, which is then handled like any other text you typed. Voice input is entirely optional — if you don’t use dictation, no audio is sent anywhere.

Transactional email

We send transactional email — account verification links and password-reset links — through Resend, an email delivery provider. To send these messages, your email address and the message contents are transmitted to Resend. We do not send marketing email to your account address through this path. (If you joined the public waitlist on the landing page, that is a separate list used only to notify you at launch.)

Billing

Paid subscriptions, when enabled, are handled by Stripe. Stripe collects and processes your payment details directly under its own privacy policy; we do not receive or store full card numbers. We retain only the subscription-state identifiers needed to know whether your account is in good standing. Billing enforcement is not active for all accounts today and is enabled only when the operator turns it on.

Third parties who process your data

• Language-model providers (US-based, open-weight, non-training) — text generation for the interview, fit analysis, document authoring, and prep.
• OpenAI (gpt-4o-transcribe) — only if you use optional voice dictation.
• Resend — sending verification and password-reset email.
• Stripe — payment processing, when billing is enabled.
• Hosting and edge infrastructure — the providers that run the application server, database storage, and the public site/CDN.

Each processor receives only what is needed for its function, and acts under its own privacy terms.

What we promise — and what we don’t

We promise to:

• Send your job-search content to third parties only to perform a function you asked for (generation, transcription, email, billing), as described above.
• Choose text-generation providers against the non-training, open-weight standard, and call out the voice-transcription exception plainly.
• Store your password only as a salted hash and never sell your data.
• Delete your data on request (see below).

We do not promise:

• That any third-party processor’s practices match ours — their handling is governed by their own terms.
• That generated documents are accurate or complete; Coach is built to avoid inventing claims, but you are responsible for reviewing anything you send to an employer.
• That the service is free of bugs, downtime, or data loss beyond what reasonable backups protect against.

Your choices and data deletion

You can clear your chat transcript and reset your data from within the app. To request export or full deletion of your account and its data, or to ask any privacy question, email support@jobhunt.coach. We will action deletion requests for the data under our control; copies already transmitted to a processor (for example, an email already delivered by Resend or a payment record held by Stripe) are subject to that processor’s retention.

Changes to this policy

If we change how data is handled, we will update this page and its effective date. Material changes that affect what is collected or who processes it will be reflected here before they take effect.

Contact

Questions about this policy or your data: support@jobhunt.coach.

See also our Terms of Service.