Privacy policy

What we collect

• Your email address, which you log in with (we email you a one-time code; there is no password), and, if you add them, your name, mobile number and the kinds of jobs you want.
• The CV details you enter: experience, education, skills, languages and job preferences.
• Versions of your CV that you tailor to a job role, and which version you sent with each application.
• CV photo (optional). If you add a photo to your CV, we keep one 480 × 480 copy of it, with camera and location data removed, until you remove it or delete your account. It appears only on your CV (the CV picture, the PDF, and the CV that employers you apply to see), and only while 'Show photo on my CV' is on. We never send your photo to any AI provider, and we never use it for job matching or CV tailoring.
• Your job applications and their status, and, if you unlocked a listing from another job site before we stopped showing those listings, which listings you unlocked.
• Your credit balance and what each credit was used for.
• For each purchase: the pack, the amount, the date, whether it was paid, refunded or disputed, the payment service's reference for it, and the email address the confirmation went to. Never your card details.
• The job applications you track on your dashboard, and the cover letters and screening answers written for you on a job's Apply page.
• If you send an application by email from our site: a record of each one (the job, the employer's address, when it was sent and whether it was delivered or bounced). Addresses and domains that bounce or complain are kept on a do-not-email list so we never write to them again.
• If you connect our Chrome extension: for each connected browser a token, stored only in a scrambled (hashed) form, with its name (for example “Chrome · Windows”) and when it was last used. It lasts 30 days or until you disconnect it. We also keep the links and work-permission answers you save for the extension.
• To keep the service safe and affordable: a record of each AI request (which AI service and model, the feature, its size, cost and whether it worked, but not your text), and the internet (IP) address of each AI action you ask for, which is cleared after about 2 days. When you delete your account, the AI request records no longer point to you.
• When you log in: the one-time code is stored only as a scrambled (hashed) value, with the IP address that asked for it, and deleted after about a day. Counts of login attempts per email address and IP address are also kept for about a day, to stop abuse.
• The pictures and PDF files of your CV that we make for you, kept for about 30 days so they load quickly.
• For employers: company name, business registration number and hiring contact.

What we do not keep

• Uploaded CV files are read once, in the CV builder or to find matching jobs, and are never stored.
• We do not ask for, or store, your NIC, passport or bank details.
• Card details go straight from the card form to our payment services, Stripe (or PayHere, when you pay on its page). We never see or store your card number, expiry date or security code.

Anonymous visit statistics

To improve the site we count visits in our own system: pages viewed, the type of device, the country and where a visit came from. Visitors who are not logged in are counted with a random anonymous id, never by name. We do not use third-party trackers or advertising cookies.

Who can see your CV

Only employers you apply to, and only the version of your CV you sent them. Your CV is not public and we do not sell or rent your data to anyone. When AI is used to write or tailor your CV, the text you provide (and, when tailoring, the job advert) is sent to one of our AI providers (listed below) only to produce the CV and is not used to train their models.

Uploading a CV to see matching jobs

When you upload a CV to see which jobs match it, the PDF file is read in memory and never stored. We keep the details we read from it (such as your name, contact details, work history and skills) and the list of jobs it matched, so you can see your results. When AI reading is switched on, the text of the PDF is sent to our AI provider only to read it, and is not used to train their models. If you upload without an account, only the browser you used can open the results, for 7 days; after that they can no longer be opened and are deleted. If you are logged in as a job seeker, or sign up afterwards, the upload is kept with your account until you use “Delete my upload” or delete your account; if you had no CV yet, the details also become your CV, which you can edit and which stays until you delete your account. To prevent abuse, we record the internet (IP) address of each upload for about 2 days.

Your rights

• See and correct your details at any time from your dashboard.
• Delete your account and your data from your dashboard, instantly. We keep only your email address (or, for older accounts, your mobile number), to record that its starter credits and free first application were already used, so they are not given again.
• Ask us what we hold about you, or withdraw consent, by emailing us.

Services that process data for us

We share only what each service needs to do its job for us, and they may not use it for anything else.

• Stripe: card payments. Your card details, and your name and email address with the payment, go to Stripe.
• PayHere: card payments in Sri Lanka, when you pay on its page.
• Resend: sends our emails (login codes, payment confirmations, and applications you send by email).
• Groq, Cerebras and Anthropic: the AI services that read the text you give us to build, tailor or match your CV and to write cover letters. We try them in that order.
• Vercel: hosts the website.
• Neon: our database, where your account and CV are stored, in Singapore.

Where data is stored

Our database is in Singapore (Neon). The services above may process data in other countries, including the United States. Data is protected by encryption in transit and access controls.

How payments and refunds work is explained in our Terms of use and Refund policy.

Contact us

Questions or requests about your data, including asking what we hold or deleting it:

Business

[Company legal name], trading as Jobify

Address

[Registered business address, Sri Lanka]

Email

support@jobify.lk

Phone

[Support phone number]