Skip to main content

Privacy Policy

Last updated: 12 March 2026

This Privacy Policy explains how JobJam collects, uses, stores, and protects your personal data when you use jobjam.io and its services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable EU data protection law.

Important: JobJam is operated from Berlin, Germany. All user data is stored on Supabase infrastructure within the European Union.

1. Who We Are

  • Operator: JobJam
  • Location: Berlin, Germany
  • Email: hello@jobjam.io
  • Website: jobjam.io

Note: JobJam is currently operated as a sole trader pending UG registration. Legal entity details will be updated upon registration.

For GDPR purposes, JobJam is the Data Controller of your personal data.

2. What Data We Collect

We collect only the data necessary to provide the JobJam service.

2.1 Account Data

  • Email address - used for authentication and communication
  • Password (hashed and stored securely via Supabase Auth - we never see your plain-text password)

2.2 Resume & Career Data

  • Resume content you upload (PDF, DOCX, or TXT format)
  • Parsed resume data stored in structured JSON format
  • Job descriptions you paste into the platform
  • AI-generated evaluations, match analyses, and recommendations
  • Cover letters and optimized resume versions you generate
  • Application records including company, role, status, notes, and dates
  • Outcome data you voluntarily provide (interview, offer, rejection)

2.3 Payment Data

  • JobJam uses Stripe to process payments. We do not store your card details.
  • We receive confirmation of payment, the plan purchased, and the transaction amount from Stripe.
  • Stripe's privacy policy applies to payment processing: stripe.com/privacy

2.4 Usage Data

  • Pages visited, features used, and general usage patterns
  • Browser type, device type, and approximate location (country level)
  • We use Vercel Analytics for cookieless, privacy-friendly analytics. Vercel Analytics does not use tracking cookies, does not fingerprint users, and does not track individuals across sessions. No cookie consent banner is required.
  • We do not use advertising trackers or third-party marketing pixels

3. How We Use Your Data

We use your data solely to provide and improve the JobJam service:

  • To create and manage your account
  • To run AI evaluations of your resume against job descriptions
  • To generate tailored resumes, cover letters, and recommendations
  • To store your application history and provide application memory features
  • To process payments via Stripe
  • To send transactional emails (account confirmation, receipts)
  • To improve evaluation quality using anonymised, aggregated data

We do not sell your data. We do not use your data for advertising. We do not share your resume or career data with employers or third parties.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data on the following legal bases:

  • Contract performance - processing necessary to deliver the service you signed up for
  • Legitimate interests - improving platform quality using anonymised aggregate data
  • Legal obligation - maintaining records required by law
  • Consent - for any optional communications (you can withdraw at any time)

5. Data Storage & Security

  • All data is stored on Supabase infrastructure within the European Union
  • Data is encrypted at rest and in transit (TLS)
  • Authentication is handled by Supabase Auth with bcrypt password hashing
  • AI processing uses third-party APIs (Anthropic, OpenAI, Google). Data sent to these APIs is subject to their respective data processing agreements. We do not send identifiable personal information beyond what is required for the evaluation.
  • We maintain access controls and review security practices regularly

6. Data Retention

  • Account data - retained until you delete your account
  • Resume and application data - retained until you delete it or your account
  • Payment records - retained for 7 years as required by German tax law
  • Anonymised usage data - retained indefinitely for product improvement

7. Your Rights Under GDPR

As an EU resident, you have the following rights:

  • Right of access - request a copy of all data we hold about you
  • Right to rectification - correct inaccurate or incomplete data
  • Right to erasure - request deletion of your data (right to be forgotten)
  • Right to portability - receive your data in a machine-readable format
  • Right to restrict processing - limit how we use your data
  • Right to object - object to processing based on legitimate interests
  • Right to withdraw consent - for any consent-based processing

To exercise any of these rights, email: hello@jobjam.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Berlin data protection authority: Berliner Beauftragte fuer Datenschutz und Informationsfreiheit (BlnBDI).

8. Third-Party Services

JobJam uses the following third-party services to operate:

  • Supabase - database and authentication (EU region)
  • Stripe - payment processing (stripe.com/privacy)
  • Anthropic - AI evaluation processing (anthropic.com/privacy)
  • OpenAI - AI processing for JD parsing and chat (openai.com/policies/privacy-policy)
  • Google (Gemini) - resume parsing (policies.google.com/privacy)
  • Vercel - hosting and deployment (vercel.com/legal/privacy-policy)

Each provider operates under their own privacy policy and data processing agreements. We have selected providers with strong data protection practices.

9. Cookies

JobJam uses only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

10. Children's Privacy

JobJam is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact hello@jobjam.io and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on jobjam.io. The date at the top of this document reflects the most recent update.

12. Contact