Privacy Policy

Who we are

jobauto.io ("the Service") is operated by an individual based in the United States ("we", "us"). For anything in this policy, including a request to see or delete your information, write to crystalline.face@gmail.com.

This policy covers the website at jobauto.io and everything it does. It applies to you whether or not you create an account.

What you give us

Everything below is given by you. We do not buy information about you, and we do not collect it from anywhere else.

• Your CV. The text you paste, or a PDF, DOCX, or TXT file you upload for us to read the text out of.
• Job descriptions and notes. The posting you paste and any instructions you add in the optional notes box.
• Profile details, if you fill them in. Name, email, phone number, date of birth, location, LinkedIn, Google Scholar, ORCID, portfolio or website, work history, skills, and anything you type into the free-text box.
• Account details. The email address you sign in with.
• Saved applications, if you use the tracker. The company, the job title, the status you set, the job description, and the tailored CV and cover letter.

Where it is kept

In your browser. The Service stores your information in your own browser's local storage on the device you are using, in the keys below. There is no user database behind the site, and no account of yours sitting on a server somewhere.

Three things follow from this, and they cut both ways. Your information is not exposed by a breach of our servers, because it is not on them. It does not follow you to another device or another browser. And anyone who can use your device can open the Service and read it, so please lock your device.

What happens when you press Generate

Your CV, the job description, your notes, and any profile details you have saved are sent to our server, which passes them to an AI provider to be rewritten for that posting. The tailored CV and cover letter come back to your browser. The same happens on a smaller scale when you use AI rewrite on a passage you have selected.

We do not store any of it. Our server holds your text only in memory for as long as the request takes, writes nothing to a disk or a database, and keeps nothing once the response is sent. If you want to keep a tailored CV, save it to the tracker or download it.

Files you upload

A CV you upload is read on our server to pull the plain text out of it, and that is all. The file is never written to disk, never stored, and never sent to an AI model as a file. Only the text goes on to be tailored, and only when you press Generate. Uploads are limited to 8 MB, and to PDF, DOCX, or TXT.

Who else is involved

We keep this list as short as we can, and it is the whole list.

• OpenRouter, which routes your CV and the job description to the AI model that rewrites them, and on to that model's provider. Their handling is governed by the OpenRouter privacy policy. We do not control how a model provider uses what it receives, which is the honest reason for the warning in section 2.
• Vercel, which hosts the site and runs the code. Like any web host, it records standard request information such as your IP address, the time, and the page requested.
• Google Fonts, which serves the typeface the site is set in. Your browser fetches it from Google, so Google can see your IP address and which page you were on.

There is no analytics, no advertising network, no tracking pixel, no session recorder, and no data broker. We do not sell your personal information and we do not share it for anyone's advertising, which under California law also means we do not "share" it as that law defines the word.

Cookies

The Service sets no cookies at all. The browser storage described in section 3 is not a cookie: it is never sent to us automatically, it cannot be read by another website, and nobody can use it to follow you around the internet. That is why you have never seen a cookie banner here.

Logs

When something breaks, our server writes a line for us to read, and those lines are deliberately dull: which step failed, which AI model was being used, what the error was. Your CV, your cover letter, the job description, and your email address are never written into them.

How long we keep things, and how to delete them

Because your information sits in your browser, it stays until you remove it. Nothing expires on its own, with one exception below.

• A saved application: delete the row in the tracker.
• Your saved CV: untick "Remember my CV" on the composer.
• Everything, including your profile and account: clear site data for jobauto.io in your browser settings. Signing out on its own does not do this, so that your work is still there when you sign back in.
• The one exception: if you cancel Pro, your saved applications are held for 60 days so they are waiting for you if you come back, and are deleted automatically after that.

If you would like help with any of this, or want written confirmation of what is held, write to crystalline.face@gmail.com.

Your rights

Depending on where you live, you may have the right to know what personal information is held about you, to get a copy of it, to correct it, to delete it, and not to be treated differently for exercising any of those rights. We honour these requests wherever you live rather than checking your address first.

In practice the answer to most requests is the same: what is held about you is in your browser, listed in section 3, and you can read, change, or delete all of it yourself at any time. If you are in the United Kingdom or the European Economic Area, note that using the Service sends your text to AI providers that may process it in the United States, and that our basis for processing is performing the service you asked for. You can withdraw from that at any time by not using it.

Security

The site is served over HTTPS, so what you send is encrypted in transit. Holding no copy of your documents is itself the main protection: there is no store of CVs here for anyone to steal. What we cannot protect is the device in your hands, or an AI provider's own systems. No service can promise perfect security, and we will not pretend otherwise.

Children

The Service is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has used it, write to us and we will help remove anything involved.

Changes to this policy

If this policy changes, the date at the top changes with it. If a change materially affects what happens to your information, for instance if we ever begin storing documents on a server, we will say so plainly on the site before it takes effect.