Privacy Policy

This Privacy Policy explains what personal information Jobsquire ("we", "us", "our") collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to jobsquire.ai and the Jobsquire web app (the "Service"). We have written it in plain language so it is easy to follow.

Jobsquire is a resume-tailoring service. You bring the resume and career history you already have, and we help you tailor them to specific job postings using artificial intelligence. Jobsquire is operated by DATAFRUIT LLC, based in California, United States.

For any privacy question or request, email us at hello@jobsquire.ai.

We collect the information below. You decide what to give us, and much of it is optional until you choose to use a feature that needs it.

• Account information. Your name and email address, a password (stored only as a salted hash) or your Google sign-in identifier if you sign in with Google, your email-verification status, and session data.
• Resume and career information. The resume file you upload (.docx or .pdf), the career history you paste in, and your structured profile. This often includes your name, contact details, work history, and education. You decide what to include.
• Job posting information. The job-post links and pasted job descriptions you submit so we can tailor your resume to them.
• Generated content. The tailored resumes we produce for you, and the underlying content behind them.
• Usage and cost data. Internal records of how much AI processing your account uses and its estimated cost, which we use to run the Service sustainably.
• Payment information. Your plan and subscription status and a Stripe customer identifier. Your card number is sent directly to Stripe and is never stored on our servers.
• Technical information. A session cookie to keep you signed in, your cookie-consent choice, where allowed a first-party analytics cookie (see Section 6), your IP address (used for rate limiting and abuse prevention), and, on our contact form, a bot-protection signal from Cloudflare Turnstile.

Please do not include sensitive personal information you do not want processed (for example health, religion, ethnicity, or similar details) in your resume or career history. We do not ask for it, and we do not need it to tailor your resume.

We use your information only to run Jobsquire. For users in regions with data-protection laws such as the GDPR, the legal basis for each use is shown in parentheses.

• To create and run your account and to provide the core service, including tailoring your resume (this is a contract you enter into with us to receive the Service).
• To process payments and manage your subscription (performance of our contract with you).
• To send you transactional email such as verification, receipts, and important service notices (performance of our contract with you).
• To keep the Service secure and available, including rate limiting, bot protection, and fraud and abuse prevention (our legitimate interest in protecting the Service and our users).
• To understand and manage AI usage and cost so we can run the business sustainably (our legitimate interest).
• To prevent fraud and to resolve disputes, including keeping a minimal record after account deletion as described in Section 7 (our legitimate interest and, where relevant, to establish, exercise, or defend legal claims).

We do not use your resumes or career history to build advertising profiles, and we do not use them to train our own AI models.

Jobsquire uses AI to understand and tailor your resume. When you upload a resume, save your career history, add a job posting, or generate a tailored resume, we send the relevant content you provided, including your resume, career history, and the job posting, to our AI provider, DeepSeek, which processes it to structure and tailor your resume. We only send what is needed to perform the task you asked for.

DeepSeek acts as our service provider for this processing. DeepSeek processes and stores the data submitted to its service on servers located in the People's Republic of China, and under its privacy policy it may retain that data and use it to improve and train its models. Please keep this in mind when deciding what to include in your career history, and do not include information you would not put on a resume, such as government ID numbers or financial account details. You can read DeepSeek's terms and privacy information at deepseek.com.

The AI helps you draft and tailor your own resume. It does not make any automated decision about you that produces legal or similarly significant effects. You review, edit, and decide what to do with everything it produces.

We share your information only with the service providers we rely on to run Jobsquire, and only so they can perform their service for us, under contracts that require them to protect your information and not use it for their own purposes.

• DeepSeek: AI processing that structures and tailors your resume. Receives the content you provide, including your resume, career history, and the job posting, and processes and stores it on servers in the People's Republic of China.
• Stripe: Payments and subscriptions. Your card details go directly to Stripe, a PCI DSS Level 1 certified provider; we keep only identifiers such as your customer ID and subscription status. Stripe also acts as an independent controller for fraud prevention and its own legal compliance.
• Resend: Transactional email delivery. Receives the recipient email address and the message contents.
• Supabase: Database hosting. Stores your account and application data, encrypted in transit and at rest.
• Cloudflare: Bot protection (Turnstile) on our contact form. Processes technical signals such as your IP address, a TLS fingerprint, and your browser's user-agent. It does not use cookies and, per Cloudflare, is not used to identify, profile, or advertise to you.
• Google: Optional "Sign in with Google". If you use it, Google shares your name, email address, profile picture, and a unique account identifier with us. We do not receive your Google password or access to your other Google data.
• PostHog: Product analytics. Receives pseudonymous usage events such as pages viewed and features used, tied to a random visitor identifier or, once you sign in, your account's internal ID, along with your IP address to process the event. We do not send your name, email address, resume content, or career history. Where analytics cookies are allowed (see Section 6), the visitor identifier is stored in a first-party cookie on our domain so we can recognize returning visits; where they are not, the identifier lives only in memory for the current browsing session and nothing is stored on your device.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not run ads or ad tracking. We may also disclose information if the law requires it (for example a valid legal request), or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy.

We use two kinds of cookies, both first-party (set by our own domain). We do not use advertising cookies or cross-site trackers of any kind.

• Essential cookies. A session cookie keeps you signed in, a small cookie remembers your cookie choice itself, and Cloudflare Turnstile helps us tell real users from bots on our contact form. These are strictly necessary to run the Service, so they are always on.
• Analytics cookies. Optional first-party cookies set by our analytics tool, PostHog (names beginning with "ph_", kept for up to one year). They store a random visitor identifier so we can count unique visitors, understand how people move through the site, and improve it. They are not used for advertising and do not follow you to other sites.

Whether analytics cookies are on depends on where you are. If you visit from the European Economic Area, the United Kingdom, or a region we cannot identify, we ask first: analytics cookies stay off until you choose "Accept all" in the cookie banner, and choosing "Reject all" keeps them off while we measure only anonymous, session-scoped usage that stores nothing on your device. Everywhere else, analytics cookies are on by default and you can turn them off at any time. Either way, you can change your choice whenever you like via Cookie settings (also linked in the site footer), and your choice is remembered for a year.

We honor the Global Privacy Control (GPC) browser signal: when your browser sends it, analytics cookies stay off unless you explicitly accept them. We do not sell or share your personal information, so GPC's sale and sharing opt-out is already satisfied by default.

While your account is active, we keep the information described above so we can provide the Service.

When you delete your account, we delete your resumes, career history, profile, job postings, and generated resumes, including the underlying files and records, and we cancel any active subscription right away.

We keep two limited things after deletion. First, a record of AI usage and cost with your name and email removed, which we use for accounting and which we do not try to link back to you. Second, a minimal record of your name and email address, which we keep to prevent fraud and abuse, to resolve billing or legal disputes, and to help recover an account that was deleted by mistake. We keep this minimal record for no more than three years after deletion, unless an active dispute, investigation, or legal obligation requires us to keep it longer.

Some information held by our providers (for example Stripe payment records) is kept under their own retention practices, which we do not fully control. Copies of deleted data may also remain briefly in routine encrypted backups before they age out.

We protect your information using standard security measures. Connections to Jobsquire are encrypted in transit using HTTPS, passwords are stored only as salted hashes, our database host encrypts data at rest, and access to production systems is limited to those who need it. No online service can be completely secure, so we cannot promise absolute security, but we work to protect your information and to respond quickly if a problem occurs. Please use a strong, unique password.

Depending on where you live, you have rights over your personal information. If you are in the European Economic Area, the United Kingdom, or Switzerland, these include the rights to access, correct, delete, restrict, and port your information, to object to certain processing, and to withdraw consent where we rely on it. If you are a California resident, these include the rights to know, delete, and correct your personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be treated differently for exercising your rights.

The right to opt out of the sale or sharing of personal information does not require any action here, because we do not sell or share your personal information. Your privacy choices on this site are: the cookie banner and the Cookie settings link for analytics cookies, the Global Privacy Control browser signal (which we honor as an analytics opt-out), and account deletion in the app. California's Delete Act sits with data brokers; we are not one.

You can delete your account and its data at any time from the billing settings in the app. To exercise any other right, email us at hello@jobsquire.ai. To protect your information, we will take reasonable steps to verify your identity before we act, usually by confirming control of your account email. We will not deny you service or treat you differently for exercising your privacy rights, and we will respond within the timeframes required by law.

Jobsquire is operated in the United States, and most of our service providers are based in the United States. Our AI provider, DeepSeek, processes and stores data on servers in the People's Republic of China, so the content you submit for AI processing is transferred there. If you use Jobsquire from the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to and processed in the United States and, for AI processing, in the People's Republic of China. Where we transfer personal information out of these regions, we rely on legal transfer mechanisms such as Standard Contractual Clauses approved by the European Commission or, where a provider is certified, the EU-US Data Privacy Framework.

Jobsquire is intended for adults. You must be at least 18 years old to use it. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has used Jobsquire, contact us and we will delete the information.

If a data breach affects your personal information, we will investigate promptly, and we will notify the relevant authorities and you where the law requires it, within the timeframes set by applicable law.

We may update this policy from time to time. When we do, we will change the date at the top of this page. If the changes are significant, we will give you notice, for example by email or a notice in the app. Your continued use of Jobsquire after an update means you accept the revised policy. See also our Terms of Service.

For any privacy question or request, email hello@jobsquire.ai. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority, though we ask that you contact us first so we can try to resolve your concern.