Privacy Policy

JobMatch.AI is operated by RC Inc. ("we", "us"), which is responsible for your personal information (the "controller" under GDPR). This policy covers the website at https://jobmatchai.rcinc.app, the app, the browser extension and the desktop app.

• Privacy contact: admin@rcinc.app
• Person accountable for privacy: OWNER TO CONFIRM: name or title of the person accountable for privacy (PIPEDA Privacy Officer)
• Address: OWNER TO CONFIRM: registered office address (street, city, province, postal code, Canada)
• EU representative: OWNER TO CONFIRM: EU Article 27 representative name and address, or confirm one is not required
• UK representative: OWNER TO CONFIRM: UK representative name and address, or confirm one is not required

Account information

• Your email address and name.
• If you sign in with Google: your Google name, email address, profile picture and Google account identifier. We never receive your Google password.
• If you complete the optional profile: age, gender, country, experience level and industry.

Content you give us, and what we generate from it

• Résumés — the text of résumés you add (the Résumé Bank reads files in your browser and saves the text), and any file you upload through the app's file-upload route.
• Job descriptions and links you optimise against, save or capture with the extension.
• Generated documents — refined and tailored résumés, ATS reports and cover letters.
• Applications — tracked applications and your notes; Auto Apply campaigns (job titles, location, schedule, send time and timezone) and the applications they prepare and send.
• Live Interview Assist — the session details you enter (company, role, job description, your instructions and claims to avoid); each interviewer question as transcribed and the answer shown to you, including lines held back and why; the facts you lock (such as whether you are still in your current job, notice period, earliest start date, salary stance, work authorisation and office preference); and the stories you write down. If you press Solve screen, one still image of the screen or window you share is sent through our AI gateway for that analysis. JobMatch does not save that image to your account or write it to disk.
• Interview Coach — new practice sessions are saved privately to your account: interview questions, submitted answers, coach answers and advice, scores and feedback, résumé context and job description. Question-linking metadata includes the interview stage, topics and matching terms. You can review and download saved sessions, and optionally select them as reference material for Live Interview intelligence. Coaching and résumé content is not sent to our public search provider.
• Support — messages you send us, any help-chat conversation you attach, and ratings you give help articles or assistant answers (with the question and answer rated). Help-chat conversations are otherwise not stored on our servers.

Audio

When Live Interview Assist listens, or you answer the Interview Coach out loud, audio streams directly from your device to AssemblyAI, which converts it to text in real time. The audio does not pass through our servers and we never store it. What your own microphone picks up during a live interview is used during the session only and is not saved to your account.

Payment information

Card payments are made on Stripe's hosted checkout. We never see or store your card number. We keep the payment's amount, status and Stripe's record of the checkout session, and your wallet balance and transactions.

Usage and device information

• Sessions and security: your IP address and browser (user agent) when you sign in; IP addresses and email addresses in rate-limit records.
• Activity: pages you visit while signed in, and events such as running an optimisation (with the company name), a job search (with the search terms), a job capture (with the posting link) or a download.
• AI usage logs: which task ran, the model, token counts, cost, timing and any error — not the text of your request.
• Website analytics, only if you accept them: the pages you view (the address without anything after a ? or #), the page title, and Google Analytics' default measurements such as approximate location, browser, device and how you arrived, collected by Google Analytics on our behalf. We don't send your name, email, account identifier or résumé to it. Your answer is stored in this browser and you can change it any time with Cookie settings in the footer. See the Cookie Policy.

From the browser extension and desktop app

• Extension: the job pages you choose to capture and application forms opened from a prepared job. It may re-read that remembered tab after navigation so it can refill later steps; unrelated tabs are ignored. If you start Live Interview Assist from the toolbar, its separate window can transcribe a meeting tab you explicitly share and can capture one still image of the source tab when you press Solve visible tab. The image is sent for that analysis and is not stored. The extension stores its connection token and short-lived prepared-job tab context in extension storage.
• Desktop app: the device name and platform, and a device token stored encrypted on your computer. A screen frame is captured only when you press Solve screen or use its shortcut; it is held in memory for the analysis request and is not stored by the desktop app.

Cookies and similar technologies

See our Cookie Policy.

We don't ask for sensitive information such as health, religion, ethnicity or sexual orientation. Résumés sometimes contain it anyway; please leave it out unless you want it on your applications. Work authorisation or immigration status, if you choose to lock it for Live Interview Assist, is used only to answer that question for you during interviews.

Under GDPR and UK GDPR we need a legal basis for each use. Under PIPEDA we rely on your consent, which you give by using the Service for these purposes, and you may withdraw it (which may mean we can no longer provide some features).

• To provide the Service you ask for — storing your résumés, generating documents, searching jobs, preparing and sending applications, coaching and live assistance, support. Basis: performance of our contract with you.
• To run billing and credits. Basis: contract; legal obligation for tax and accounting records.
• To keep the Service secure — sign-in, rate limits, fraud and abuse prevention. Basis: legitimate interests in protecting users and the Service.
• To improve the Service — understanding which features are used and where they fail, measuring AI cost and performance. Basis: legitimate interests. We use usage logs, not the content of your documents, for this.
• To send service emails — sign-in codes, Auto Apply run reports, support replies. Basis: contract. We don't send marketing emails without your consent.
• To meet legal obligations and respond to lawful requests. Basis: legal obligation.

Where we rely on legitimate interests, you can object — see section 10.

We use AI models to generate and check text and, when you explicitly request screen analysis, to analyze the single screen image you share. For each task, only the content that task needs is sent to our AI gateway (CheaperInference), which passes it to a model provider such as OpenAI, Anthropic or Google and returns the result. We do not use your content to train AI models. OWNER TO CONFIRM: confirm with CheaperInference and each model provider their retention period and that API data is not used for training, then state it here

We do not make decisions about you that have legal or similarly significant effects by automated means. Auto Apply chooses which postings to prepare using criteria you set, and you can pause it at any time. Read more in our AI Transparency statement.

We share personal information only:

• with the service providers listed in section 7, who process it for us under contract and only on our instructions;
• with employers, when you submit an application with Auto Apply or with the extension (and then only the application itself);
• with web search providers, who receive job-search terms or the company, role and application/interview topic used for professional context, never your résumé or saved interview stories;
• when the law requires it, or to protect rights, safety and the Service;
• in a business transfer (such as a merger or sale), with notice to you;
• otherwise, with your consent.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

• Vercel — Hosts the website and runs the application servers and background job queues. Data: All data you send to or receive from JobMatch.AI passes through it.
• Neon — Our database. Data: Your account, content, usage and billing records.
• CheaperInference — AI gateway: routes each AI task to a large language model. Data: The text a task needs — for example your résumé and a job description — and the output.
• Model providers reached through CheaperInference (OpenAI, Anthropic, Google) — The large language models that generate text for each AI task. Data: The same task text, passed on by the gateway.
• AssemblyAI — Real-time speech-to-text for Live Interview Assist and speaking answers in the Interview Coach. Data: Audio streamed directly from your device, and the resulting text. We do not store the audio.
• Stripe — Card payments, on Stripe’s own hosted checkout page. Data: Your email address, account identifier, the purchase, and the card details you give Stripe directly.
• Bunny.net — File storage and delivery. Data: Files you upload through the app’s file-upload route (for example a résumé file read on the server).
• Cloudflare — Sends our emails (sign-in codes, Auto Apply reports, support replies); runs part of job search and caches its results; creates text embeddings to rank job results; serves a PDF-reading library to your browser. Data: Email addresses and email content; job-search terms and locations; the text of job postings; your IP address when your browser loads the library.
• Google — Sign in with Google (when you choose it), and the web fonts your browser loads. Data: For sign-in: your Google name, email address, profile picture and account identifier. For fonts: your IP address and browser details.
• Google Analytics — Website analytics: which pages are used. Loaded only after you accept analytics; until then nothing is sent to it. Data: The address of the page you view (no query string), its title, your IP address and browser details (Google does not log or store IP addresses in Analytics), and approximate location, device and how you arrived. (Only where the service is switched on.)
• GitHub (GitHub Actions) — Runs the Auto Apply worker that submits applications to open employer forms at your chosen send time. Data: The details needed to submit an application: your contact details, tailored résumé and cover letter, and the posting.
• Job search providers — Supply job postings and professional web context: remote-job feeds (such as Remotive, RemoteOK, Arbeitnow, Himalayas, Jobicy), job-listing services (such as JSearch, Adzuna, Jooble, USAJOBS, TheirStack), employer job boards, and web search services (such as Serper, SerpApi, Brave, Google Programmable Search, Tavily). Data: Your search terms and location only — never your résumé or account details. (Only where the service is switched on.)
• Employers and their application systems — Receive your application when Auto Apply or an authorised extension flow submits it, or when you submit it yourself. Data: The application: your contact details, tailored résumé and cover letter, and any answers on the form.

We choose providers who protect data to a standard at least equivalent to this policy. OWNER TO CONFIRM: confirm a data processing agreement is in place with each provider listed

We are based in Canada, and our providers store and process data in other countries, including the United States. Our database region is: the United States (Amazon Web Services, US East — Northern Virginia).

Canada is recognised by the European Commission as providing adequate protection for commercial organisations. For transfers of EU or UK personal information to countries without such recognition, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or a provider's certification under an approved framework. Personal information held abroad may be accessible to the courts and authorities of that country.

• Your content (résumés, documents, jobs, applications, campaigns, interview sessions, locked facts, stories) — until you delete it or your account. You can delete most items yourself at any time.
• Account information — while your account is open.
• After you delete your account — removed from our active systems within OWNER TO CONFIRM: number of days, e.g. 30; copies in backups are overwritten within OWNER TO CONFIRM: backup retention period.
• Billing records — for as long as tax and accounting law requires.
• Session, security and rate-limit records (including IP addresses) — OWNER TO CONFIRM: retention period, e.g. 12 months — and schedule the purge job, which does not run automatically today.
• Activity and AI usage logs — OWNER TO CONFIRM: retention period.
• Support tickets and feedback — OWNER TO CONFIRM: retention period, e.g. 24 months after the ticket is closed.
• Audio — never stored. Screen-analysis images — not stored by JobMatch. Interview Coach conversations — not stored.

Wherever you live, you can ask us to access, correct, delete or export your personal information, and to stop or limit certain uses. We won't treat you differently for using these rights.

Canada (PIPEDA)

You can access and correct your personal information and withdraw consent, subject to legal and contractual limits. You can complain to the Office of the Privacy Commissioner of Canada.

European Economic Area and United Kingdom (GDPR, UK GDPR)

You have the rights to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office).

California and other US states (CCPA/CPRA and similar laws)

• Categories we collect: identifiers (name, email, IP address); commercial information (credit purchases); internet activity (usage logs); professional or employment information (résumés, applications); audio (processed in real time, not stored); and, only if you provide it, work authorisation status. Sources, purposes and recipients are described above.
• Your rights: to know, access, correct and delete; to opt out of sale or sharing (we do neither); and to limit use of sensitive personal information (we use it only to provide the Service).
• You may use an authorised agent; we will verify both you and the agent.

How to exercise your rights

Email admin@rcinc.app or use Talk to a person in the help chat and choose Privacy & my data. We verify your identity — usually by replying to your account's email address — and respond within the time the law requires (generally 30 days, or one month under GDPR). There is no self-service account deletion or full data export yet, so these requests are handled by our team.

We protect your information with measures including encryption in transit (HTTPS), session tokens that are stored only as hashes and kept in cookies page scripts cannot read, rate limits on sign-in, access controls, and payment handling by Stripe so card data never reaches us. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

The Service is not for anyone under 16. We don't knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

The Service links to job boards, employers' sites and other services, and some images on our home page load from third-party sites (which receive your IP address and browser details). Their own privacy policies apply to them.

When we change this policy we update the date at the top. If a change materially affects how we use your personal information, we will tell you in the Service or by email before it takes effect.

• Company: RC Inc.
• Address: OWNER TO CONFIRM: registered office address (street, city, province, postal code, Canada)
• Privacy contact: admin@rcinc.app
• Person accountable for privacy: OWNER TO CONFIRM: name or title of the person accountable for privacy (PIPEDA Privacy Officer)