jobeo.ai Privacy Policy
jobeo.ai helps you apply for jobs: it keeps your candidate profile, finds vacancies that match it, prepares resumes and cover letters, and — through the Chrome extension — fills employer application forms for you to review. This policy explains what data jobeo.ai handles, why, and what control you have over it.
jobeo.ai is operated by Yuriy Yevlakhov ("we"). Contact: [email protected].
Data you give us in the web app
When you create an account and use the app, we store what you enter or upload: your email address and password (stored as a hash), your candidate profile (personal details, experience, education, skills, languages, work authorization, expectations), your profile photo, your resume and cover letter files, the job-site searches you add, the vacancies found for you, your applications and their history, and your saved answers to recurring employer questions.
What the Chrome extension does with your data
The extension does nothing on a website until you click its icon in the browser toolbar. The click opens the panel in that tab, and the panel comes back on the next pages of the same site in that tab; on any other site the extension needs a new click. The panel reads the page's structure only to find an application form; the extension does not record your browsing.
| When | What is sent to the jobeo.ai server |
|---|---|
| You open the panel on a page | The page address, to check whether it belongs to a vacancy already in your jobeo.ai account. |
| A new tab is opened from a page with the panel, on a site where you have vacancies | The address of the page it was opened from, for the same check. Addresses of sites where you have no vacancies are never sent. |
| The panel is on a page of job listings from a site jobeo.ai supports as a job source | The page address, to check whether it is already one of your job sources. If you press the offer to add the page, the address is checked as described under “Links you add as job sources” and, if you send it, goes to an administrator for approval together with the page title. |
| You press “Auto-fill Application” | A description of the form: field labels, types, options and current values. Password field values are never sent. |
| You press “Mark application as sent” | The form address and, if the panel filled the form, the values its fields hold at that moment (without passwords and file contents), stored as the record of your application; answers you typed yourself are saved for reuse. If the panel did not fill the form, only the address of the page is sent. |
The extension never presses an employer's submit button; submitting is always your action. The extension downloads your own resume and cover letter from jobeo.ai to attach them to the form you are filling and to offer them as download links in the panel.
In your browser the extension keeps: an access token that links it to your jobeo.ai account (it expires after 30 days and is revoked when you sign out), the values the panel filled the form with, for up to 24 hours, so that a reload can fill the form again, which tab belongs to which vacancy until the tab or browser is closed, and the panel width you chose. Signing out of jobeo.ai removes everything except what is needed to revoke the token.
How we use data
- To provide jobeo.ai's features: matching vacancies to your profile, preparing documents, filling forms and tracking applications.
- To keep the service secure and working, and to account for the cost of the processing it runs.
- To protect the service from abuse: every link you try to add as a job source is checked, and a link the checks reject is logged (see below).
Links you add as job sources
A link you add as a job source is checked before anything is added: locally, and by OpenAI, which opens the address to judge whether it is safe and whether it is a page of job listings. An administrator then approves the link.
When a link is rejected by our security rules, the server writes one line to a log file on the server (not in the database): the time, your account's id, email address and role, your IP address, your country (as reported by our network provider, Cloudflare), your browser's User-Agent, where you added the link from, the link itself, the rule or the check's answer that rejected it, and the attempt number. We keep this log to protect the service and to block accounts that abuse it, and only administrators of the service can read it. Lines older than 12 months are deleted automatically.
We do not sell your data, do not use it for advertising, and do not use it to determine creditworthiness or for lending purposes. The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Who processes data on our behalf
- Anthropic — the AI model that assesses vacancies, prepares resumes and cover letters, and drafts form answers. It receives the parts of your profile, documents and the form description needed for that task.
- OpenAI — checks the links you add as job sources for safety and for being a page of job listings. It receives the link.
- Google Analytics, Contentsquare (formerly Hotjar) and PostHog (EU cloud) — measure how the web app is used: which screens are opened, clicks and scrolling. They receive your IP address, browser and device details and the addresses of the screens you open, and set their own cookies. Contentsquare and PostHog also record your sessions in the web app, including what the screens show — your profile, documents and applications; what you type into fields is masked.
- Hosting and infrastructure providers that store the jobeo.ai server and its database, and the network provider that delivers requests to it, which passes on your IP address and country.
We may also disclose data if required by law.
Retention and deletion
We keep your account data while your account exists. You can edit your profile and delete your documents, photo, saved answers, job sources and applications not yet sent in the app at any time. To delete your account and all data associated with it, write to [email protected]; we complete deletion within 30 days. Uninstalling the extension removes everything it stored in your browser.
The log of rejected links is kept for 12 months and then deleted automatically.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Contact us to exercise these rights. If you are in the EU/EEA, you may also lodge a complaint with your data protection authority.
Security
Data travels between the extension, the app and the server over HTTPS. The extension's access token is stored on the server only as a hash, and your uploaded files are served only to you.
Changes
We will update the effective date above when this policy changes, and notify you in the app about significant changes.