Privacy Policy

Account Information. When you register, we collect your name, email address, and hashed password. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Resume Data. Content you upload or create, including work history, education, skills, and other resume fields. This data is stored in our database and transmitted to AI providers to deliver resume tailoring features.

Interview Prep Data. If you use voice-based interview practice, your browser sends the audio answer to our backend for transcription and delivery analysis. We do not store raw voice recordings. We may store the resulting transcript, answer feedback, scores, and delivery metrics such as words per minute and filler-word rate with your interview session history.

Usage Data. We collect anonymized analytics such as pages visited, features used, and session duration to improve the Service. We use Vercel Analytics for this purpose.

Feedback Data. Feedback may include an optional page screenshot only when you choose to attach one. A screenshot can contain resume, job-search, or other information visible on the page; you can review, annotate, or remove it before submitting.

Payment Data. Billing is handled by Stripe. We do not store your credit card number. Stripe provides us with a customer ID, payment status, and billing email. We store your credit balance and an account ledger of grants, purchases, debits, and refunds.

We use your personal information to:

• Provide, operate, and maintain the Service.
• Process your resume data through AI models (e.g., OpenAI) to deliver tailoring, scoring, and content suggestions.
• Transcribe interview practice audio, generate interview feedback, and calculate delivery metrics when you use voice-based practice.
• Send transactional emails (account verification, password resets, credit-pack purchase receipts).
• Process one-time payments and maintain your credit wallet.
• Improve the Service through aggregated, anonymized usage analytics.
• Respond to support requests.

We do not use your resume data to train AI models. Your content is processed in real time and is not retained by our AI providers beyond the duration of the API request.

We do not sell, rent, or trade your personal information. We share data only with the following categories of service providers, solely to operate the Service:

• AI Providers (OpenAI) — to process resume content, interview answers, and transient interview audio for AI features.
• Payment Processor (Stripe) — to handle one-time credit-pack purchases and any remaining legacy billing.
• Email Service (Resend) — to send transactional emails.
• Hosting & Infrastructure (Vercel, AWS) — to host and deliver the Service.
• Error Monitoring (Sentry) — to detect and fix bugs (anonymized error data only).

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of JobVouch or its users.

We implement industry-standard security measures including:

• Passwords are hashed using bcrypt before storage.
• Verification codes (OTPs) are SHA-256 hashed with attempt limits and expiry.
• All data in transit is encrypted via TLS/HTTPS.
• API authentication uses secure HTTP-only cookies with short-lived access tokens and rotating refresh tokens.
• Database access is restricted and credentials are stored as environment variables, never in source code.

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

JobVouch uses the following cookies:

• Authentication cookies (access_token, refresh_token) — essential for keeping you logged in. These are HTTP-only, secure, and same-site cookies.
• Analytics cookies (Vercel Analytics) — anonymized usage data to improve the Service.

We do not use advertising cookies or third-party tracking pixels.

You have the right to:

• Access your personal data stored in your account at any time.
• Export your resumes in PDF or DOCX format.
• Delete individual resumes or your entire account from the Settings page. Account deletion permanently removes all associated data from our systems.
• Correct inaccurate information in your profile or resumes at any time.
• Withdraw consent by closing your account. This will end processing of your data.

To exercise any of these rights, use the in-app controls or contact us at support@jobvouch.co.

We retain your account and resume data for as long as your account is active. If you delete your account, we permanently remove all associated personal data within 30 days.

Raw voice recordings submitted for interview practice are processed transiently for transcription and are not retained by JobVouch. Stored interview transcripts, feedback, scores, and delivery metrics are kept with your interview session history while your account remains active and are removed with your account data if you delete your account.

Anonymized, aggregated data (e.g., total number of resumes created) may be retained indefinitely for analytics and service improvement purposes.

Billing records may be retained as required by applicable tax and financial regulations.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect. The "Effective date" at the top of this page indicates when the policy was last revised.

Continued use of the Service after the effective date constitutes acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or how your data is handled, contact us at:

Email: support@jobvouch.co