Privacy Policy

Last updated: 2026-05-08

GoodJob is a personal CRM for the job hunt. This policy describes what data we collect, where it's stored, who we share it with, and how you can control it.

What we collect

• Account email — used to sign in and send reminder emails you ask for.
• OAuth tokens (if you sign in with Google or LinkedIn) — used to authenticate without a password.
• Gmail tokens (only if you connect your Gmail) — read-only access to detect replies on threads you tag.
• Jobs you save — title, company, URL, and description text, either entered manually or extracted by our Chrome extension when you click Save.
• Contacts you add manually or that the AI surfaces from a saved job — name, title, email, LinkedIn URL, source.
• Notes, reminders, and resumes you create.
• Activity log — events like “added a job” or “moved to applied” so we can show your weekly activity chart.

We do not collect:

• Your browsing history. The Chrome extension only reads the page content of the tab you're actively on, and only when you click its icon. It never runs in the background.
• Job postings you didn't explicitly save.
• Anything from sites unrelated to job postings.

Where it's stored

All your data lives in a Supabase database hosted in US East (AWS us-east-1). It's encrypted in transit (TLS) and at rest. Row-level security ensures only you can read or modify your own data.

What we share with third parties

We use a small set of vendors to run the service. We do not sell your data, and we do not share it with advertisers or recruiters.

• Supabase (database, auth, storage) — hosts your data.
• Vercel (hosting) — serves the app and API routes. Vercel doesn't access your job data.
• Anthropic (Claude API) — when you save a job, the description text is sent to Claude to extract skills, hiring contacts, salary range, and similar fields. Per Anthropic's policy, data sent via API is not used to train models.
• Groq (LLM API) — used for some AI enrichment paths. Same data minimization (only job description text).
• Resend (transactional email) — sends reminder emails. Receives only your email address and the reminder text.

Cookies

We use cookies for:

• Session authentication (Supabase auth cookies, HttpOnly, secure)
• Remembering your sidebar pin state and similar UI preferences

We do not use third-party analytics or advertising cookies.

How to delete your data

• Delete a job, contact, reminder, or resume: open it on your dashboard and click delete.
• Delete your account entirely: emailsupport@good-job.app and we'll wipe your account, profile, and all associated rows within 7 days.
• Disconnect Gmail: dashboard → Settings → Integrations → Gmail → Disconnect.
• Revoke OAuth access (Google or LinkedIn): your provider's account settings, then sign out of GoodJob.

Your rights (GDPR / CCPA)

If you're in the EU, UK, or California, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data
• Object to processing
• Take your data with you (data portability)

Email support@good-job.app to exercise any of these. We'll respond within 30 days.

Children

GoodJob is intended for people 16 and older actively searching for jobs. We don't knowingly collect data from anyone under 16.

Changes to this policy

We'll update this page if we change how we handle data and email you about material changes.

Contact

Questions? support@good-job.app