# Privacy policy

Last updated November 3, 2026

JOB is run by Joshua Fish, a sole trader (ABN 45 223 279 248), "we" or "us". This policy explains what personal information we collect, why, and what you can do about it. We handle personal information in line with the Australian Privacy Principles.

## What we collect

- **Account details:** your name, email address and password (stored only as a secure hash).
- **Your CV and profile:** the CV you upload and what we read from it, such as work history, education, skills, contact details and profile links, plus the job preferences and rules you set (roles, salary, locations, work rights).
- **Application answers:** your answers to common application questions, and the answers we prepare for each employer.
- **Activity:** the roles you match, queue, skip and apply for, and the status of each application.
- **Payment details:** handled by Stripe. We see your billing name, email and subscription status, but never your full card number.
- **Technical data:** the cookies needed to keep you signed in and remember your settings, and standard server logs (IP address, browser, pages requested).

We don't use advertising or third-party tracking cookies.

## Why we use it

- To run JOB: match you to roles, prepare your CVs, cover letters and answers, and submit the applications you choose.
- To bill your subscription and send you account emails, such as receipts and password resets.
- To keep the service secure, fix problems and improve it.

We only send you marketing email if you agree to it, and every marketing email has an unsubscribe link.

## Who we share it with

- **Employers you apply to**, and the job boards or applicant tracking systems they use. They receive your application, CV and answers. From then on their own privacy policy applies.
- **Service providers** that run parts of JOB for us, only for that purpose:
  - Anthropic, to process your CV and draft application content with AI. Our provider doesn't use this data to train its models.
  - Stripe, for payments.
  - Resend, to send email.
  - Our hosting and file storage providers.
- **Authorities**, when the law requires it.

We never sell your personal information.

Some of these providers store data outside Australia, including in the United States. We use providers that protect personal information to a standard comparable with the Australian Privacy Principles.

## How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile, CV and answers within 30 days, except records we must keep by law, such as payment and tax records. Applications already sent to employers are held by them under their own policies.

## Your choices and rights

- **See and correct:** most of your information is in your dashboard settings, where you can change it.
- **Delete:** you can delete your account from your settings at any time.
- **Ask us:** email us to get a copy of your information or to ask any privacy question.

If you have a complaint, email us first and we'll reply within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at [oaic.gov.au](https://www.oaic.gov.au).

## Security

We protect your information with encryption in transit, hashed passwords and access limited to what's needed to run the service. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll tell you.

## Changes

We'll update this policy if what we do with your information changes, and email you about significant changes.

## Contact

Email [support@trykelpe.com](mailto:support@trykelpe.com).