What we collect
Information you give us

Account details: your name, email address and, if you sign in with Google or Microsoft, the profile photo and account email that service shares.
Your application profile: contact details, address, links (LinkedIn, GitHub, portfolio), current and past employers, education, desired salary and start date, and your answers to common application questions such as work authorization and sponsorship.
Optional self-identification: gender, race or ethnicity, veteran status and disability. We save these only if you tick the box on the Resume page agreeing that we may, and we record when you agreed and which version of this policy was in force. They are used only to answer the same voluntary questions on application forms, when you have switched on form filling and ask it to fill in a form. Only you can see them: people you share your job search with and our support staff never do. You can remove them at any time by unticking the box, which deletes them. Answers saved before we asked for this agreement are kept but not shown or used until you tick the box, and are deleted if you untick it.
Your resume: the file you upload. Its text is read in your browser to suggest profile details, or, on Pro with AI features on, by our AI provider (see How we share it), and you review the suggestions before anything is saved. We keep the file with your account for later. When you have switched on form filling, the extension attaches it to an application only when you ask it to fill in that form.
Your applications: the jobs you save or apply to and their postings’ descriptions, the answers each application form was submitted with (when you apply with the extension), notes, statuses, timeline entries and the contacts (such as recruiters) attached to them. When you, or someone you share with, deletes an application, we keep a copy of it with its timeline, contacts and files for 5 days so it can be restored from your activity; then the copy and its files are deleted. When two applications are merged, the one you keep takes the other’s timeline, contacts, files and notes, and we keep a copy of the other for 5 days in the same way, so the merge can be undone.
Files you keep with applications: documents you add on an application’s page, or email attachments you choose to keep with the extension, with the title and type (job description or something else) you give them. When you say a file is the job description, its text is read in your browser or the extension and saved as that application’s description. Files are deleted with their application or your account, or when you remove them.
AI results: when you run Match analysis or Suggest resume edits, we keep the result, which resume and job it used, when it ran and who ran it, and a count of the AI processing used, for your allowance and our costs. We also keep the AI’s reading of each resume file (the profile details it found) until that resume is deleted or you delete your account.
Candidate portal logins: the email and password for employer sites such as Workday, if you ask us to remember them. We do not create accounts on employer sites. Passwords are encrypted.
People you share with: the email address of each person you invite to your job search, their invite code, whether they accepted and the access you gave them. If someone invites you, we keep which job searches you can open.
Problem reports: when you use Report a problem on an application, we keep what you wrote and a copy of that job’s details as the Service has them (company, role, location, pay, links, description, status and dates), your browser type, the questions the application form asked, and whether a login is saved for that site. We do not include your notes, activity, contacts, form answers or saved logins.
Inbox feedback: if you tell us why an email in your Review inbox wasn’t relevant, we keep your note and what FAFJ had guessed about that email, and, only if you tick the box, the email’s sender, subject and a short excerpt, to improve how FAFJ sorts mail. Our staff can see these notes, and the email details only when you chose to include them. They are deleted with your account, or 12 months after we review them.
Match feedback: if you rate a Match analysis or its resume suggestions, we keep your rating and note, the job’s title and company, and the fit it gave, and, only if you tick the box, that analysis (which quotes your resume) and part of the job description, to improve our AI instructions. Our staff can see these, and the analysis only when you chose to include it. They are deleted with your account, or 12 months after we review them.
Payment details are handled by Stripe. We never see or store your card number. Stripe receives your email address, billing details and country to sell you the subscription and collect tax, under its own privacy policy.
Messages you send us, such as support requests and feedback.
Pro list: if you ask us to tell you when Pro opens, we keep your email address, where on the site you asked and, if you are signed in, your account. We use it only to tell you about Pro, and remove it when you delete your account or ask us at help@findafknjob.com.
Waitlist: if you are outside the countries we are open in and ask to hear when we open in yours, we keep your email address and the country your request came from, and use them only to tell you.


Information from services you connect

Email (Gmail or Outlook): when you connect a mailbox, we read messages to find ones about your applications, such as confirmations, recruiter replies, interview requests and rejections. For those, we store the sender’s name and address, the subject, the date, a short excerpt, the message and conversation identifiers your provider gives (so replies stay with the same application), and our reading of what the message means. A message we cannot match to an application goes to your Review inbox with up to the first 4,000 characters of its text. An application confirmation for a job you are not tracking yet adds that job, and an email from a recruiting firm about a different search than the one you are tracking adds that search as its own application. People at a company you are tracking may be saved as contacts, with a LinkedIn link from their signature if one is there. We do not store attachments from mail we read this way, and messages unrelated to your job search are skipped. We read the past 30 days when you first connect, further back (up to 6 months) when you ask for a past-email scan, and the past year of mail and meetings with a company or recruiting firm when you track its email with the extension or it is found to be recruiting for one of your applications.
Calendar (Google or Outlook): we read events, with read-only access (we never create, change or delete them), to find interviews and meetings with companies you are tracking, and store the event’s title, time, location, the join link of an online meeting (such as Zoom, Google Meet or Teams) and the organizer and attendees from that company. When a meeting moves or leaves your calendar, we update it on your timeline.
Forwarded email: if you turn on forwarding, you get a private address (like alex-7k2m9q4d@fafj.me). We read email you forward to it, by hand or with a forwarding rule, to add updates to your applications, the same way we read email from a connected mailbox: the sender, recipients, subject, date and text, its calendar invitations and its attachments (PDF, Word, RTF, text, OpenDocument and pictures, up to 2 MB each and 3 per email). We only take mail from mailboxes you’ve confirmed with a code. Forwarded email is never sent to an AI provider, and we never reply to it or send it on. For 30 days we keep a short record of what happened to each forwarded email (when it arrived and the result, not its content), to show you in Settings and to prevent abuse. A provider’s confirmation email, like Gmail’s forwarding confirmation, is shown in Settings for 7 days and then deleted.
Google Drive or OneDrive: when you save a job description there or export your applications to a Google Sheet, we ask for access only to the files we create in your Google Drive, or to our own app folder in your OneDrive. If you keep an exported Sheet up to date, we replace its “FAFJ applications” tab when your applications change (about every 30 minutes); your other tabs are never read or changed.
Sign-in with Google or Microsoft: the service shares your name, email address and profile photo, which we use to create and sign you in to your account.


Access tokens for connected accounts are encrypted. You can disconnect an account in Settings at any time, and you can also revoke our access from your Google or Microsoft account settings.
The browser extension

The extension reads job postings and application forms on the job sites where it runs, and on any other page only when you use it there. It sends us the job details when you save a job, click a posting’s Apply button or open an application form, including the posting’s description, pay and hiring team. It never submits an application for you. When you submit an application, it sends us the form’s questions and the answers they were submitted with, which we keep with that application so you can see what you told the employer; it never reads passwords or uploaded files. It leaves out, and never sends us, answers to questions about government ID numbers (such as a Social Security number), date of birth, voluntary self-identification (race, ethnicity, gender, sexual orientation, disability or veteran status), past pay, or bank and card details. Form filling, when you switch it on, fills in forms from your profile only when you ask it to, and when it meets a question that none of your saved answers covers, it reports the text of that question on its own, without your reply, so we can decide which new answers to support. In Gmail or Outlook on the web, it reads the email you have open only when you click the extension to track it, and sends us that email (its sender, recipients, date, subject, text and links) so we can save it with the job it is about, with its sender as a contact on that application. In Gmail it also lists that email’s attachments (not pictures pasted into the message or a signature). A document that looks like the job description is downloaded from the open Gmail page with your own session and its text is read in the extension and sent to us to fill in the job; the files you tick or mark as the job description are downloaded the same way and kept with that application (up to 10MB each) until you remove them, the application or your account. It does not read any other email.
Information collected automatically

We keep sign-in sessions and record when you last used the Service and the browser you signed in from, to keep your account secure and to understand usage. We use your IP address briefly to limit abuse and to check which country you are in; it is not stored with your account. When we cannot read a job page you saved, we note its link, with your account and device type, so we can improve reading. We use cookies and browser storage only for things the Service needs: keeping you signed in, remembering which account you last signed in with, carrying your sign-up choices and a referral link through sign-up, securing sign-in with Google or Microsoft, and settings such as your theme. We count page views with Cloudflare Web Analytics, which sets no cookies and does not identify you. Our fonts are served from our own site. We do not use advertising or cross-site tracking cookies, and we do not respond to “Do Not Track” signals because we do not track you across sites.
How we use it

To provide the Service: track your applications, keep statuses current, show your data to you and to the people you invite, and, where it is offered and you ask, fill in forms;
To run AI features you ask for, such as Match analysis and Suggest resume edits, which compare your resume with a job;
To communicate with you about the Service, including sign-in links, receipts, billing and security notices and replies to your requests;
To send you news, updates and announcements about FAFJ, unless you have turned them off, and to tell people who asked when Pro opens;
To secure the Service and prevent fraud and abuse;
To improve the Service, using usage information and aggregated data that does not identify you;
To comply with the law and enforce our Terms of Use.


AI features and model training

FAFJ’s AI features run only when you use them: when you tap an AI button, upload a resume on Pro so AI can fill your profile, or save a job from a link whose page we can’t otherwise read. We do not use your data (your resumes, applications, emails, calendar or anything from your connected accounts) to train AI models, ours or anyone else’s, and our AI provider does not use it for training either. AI results can be wrong or incomplete; check them before you rely on them.
Google user data

findafknjob.com’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail and Google Calendar data only to provide and improve the job-tracking features you can see in the Service; we do not use it for advertising, we do not sell it, and we do not transfer it to others except to the people you invite to your job search (who see the emails and meetings on your applications and in your Review inbox), as needed to provide the Service, to comply with the law, or as part of a merger, acquisition or sale of our business, and then only after asking for your explicit consent. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models. People at findafknjob.com do not read your mail or calendar unless you ask us to (for example, for support), it is needed for security or to comply with the law, or the data has been aggregated and made anonymous. Microsoft data is handled the same way.

Google user data is never used to develop, improve or train AI models. If a job description you choose to analyze came from your Gmail or Google Drive, it is sent to our AI provider only when you run that analysis, to produce the result for you.
How we share it

We do not sell your personal information and we do not share it for advertising. We share it only:

With service providers that run the Service for us, under contract: Cloudflare (hosting and storage; Turnstile, which checks the Contact page for spam; and Browser Rendering, a remote browser we use to open a public job posting you saved when we can’t read it any other way, which receives only that posting’s web address), Stripe (payments), Brevo (email delivery), and Google and Microsoft for the accounts you connect;
Domain registries (scam checks): to help you spot job scams, when an email about your job search comes from a company domain FAFJ hasn’t checked recently, FAFJ looks up that domain’s public registration date in the domain registries (RDAP, via IANA’s directory or rdap.org). Only the domain name (for example, acme.com) is sent, never your address, the sender’s address or the email itself. The registration date is kept for 30 days.
Anthropic (AI provider): when you tap Analyze my match or Suggest resume edits, we send the resume you chose, the job’s description, company and title, and where the application stands to Anthropic’s API to produce the result; and on Pro, when you upload or replace a resume (or tap Fill from resume with AI), we send that resume so the AI can propose profile details, which you review before anything is saved. When you save a job from a link and we can’t read its description from the posting page, we may send the page’s public text so the AI can copy the job description onto your job; this uses no AI credits and is limited to a few lookups a day. When you ask for missing company websites, we send the company names from your work history. Nothing is sent to it at any other time, or while you have AI turned off. Anthropic processes it under its commercial terms, which do not allow it to train its models on this data.
With people you invite to your job search, once they accept your invitation: they see your applications, their timelines, the contacts saved with them, your resumes and Resume Profile and your Review inbox, and people you give edit access can change your applications, resumes and Resume Profile and work your Review inbox. They never see your saved portal passwords, billing, settings, connected accounts or self-identification answers. They don’t see your emails or meetings unless you turn that on for them: without it they see that an email or meeting happened and when, and the application’s status, but not who sent it, the subject, the message, files that came with it, attendees, meeting titles, join links or your Review inbox. You can turn “Can see email and meetings” on or off for each person in Settings. If someone invites you, they see your name and email address;
With employers and sites you choose to send it to, when you submit their forms;
With OpenStreetMap’s place-lookup service, to show roughly how far a job is from home: your city and state or province (or ZIP or postal code) and the job’s city, never your street address;
With professional advisors, such as lawyers and auditors, when needed;
When the law requires it, or to protect the rights, safety or property of our users, the public or us;
As part of a merger, acquisition or sale of our business, in which case we will require the recipient to honor this policy.


Your choices

See and change your data: everything in your profile and applications can be edited in the app. You can also ask us at help@findafknjob.com for a copy of the personal information we hold about you, or to correct it, and we will answer within 30 days.
Export it: Settings has a download (JSON) of your applications, their timelines and contacts, on every plan; Pro can also export applications to Excel, CSV or a Google Sheet. Your resumes and files can be downloaded from their pages.
Disconnect: remove any connected mail or calendar account in Settings, or revoke access from your Google or Microsoft account. Removing a Google account in Settings also revokes FAFJ’s access at Google; Microsoft offers apps no way to do that, so we delete our stored access, and you can remove FAFJ from your Microsoft account at account.live.com/consent (personal) or myapps.microsoft.com (work or school). When you remove one in Settings you choose whether what it added (its emails or meetings on your timelines, its Review inbox messages and the people saved from it) is deleted too.
Forwarding: you can turn forwarding off, get a new address or remove a confirmed mailbox in Settings at any time, and stop forwarding in your email provider’s settings. People you share your job search with see forwarded email and its attachments only if you let them see your email.
Stop sharing: remove anyone you invited, or leave a job search someone shared with you, in Settings at any time.
Delete it: deleting your account in Settings permanently removes your profile, resume, applications, contacts, portal logins and connections, and ends any sharing. You can also ask us to delete your account and data by writing to help@findafknjob.com from the address on your account; we confirm it’s you, then delete it within 30 days and tell you when it’s done. Some records are kept after deletion as described under How long we keep it, and Stripe keeps its own payment records.
Email: we send messages about your account and the Service (sign-in links, receipts, billing and security notices) while you have an account. We also send news, updates and announcements (for example, when Pro opens) if the box was ticked when you signed up, or if you had an account when we started sending them. To stop them, switch off Email from FAFJ in Settings, use the unsubscribe link in any of those emails, or write to help@findafknjob.com. We act on requests within 10 business days.
Turn off AI: you can turn off all AI processing for your account in Settings. Nothing more is sent to our AI provider for it, and you can choose to delete the AI results already saved.
Someone acting for you: an authorized agent can make any of these requests for you. We’ll ask for your written permission for the agent to act, and we may ask you to confirm your identity with us directly.
If we say no: we’ll tell you why. You can appeal within 45 days by replying, or by writing to help@findafknjob.com with “Appeal” in the subject. Someone who didn’t make the first decision reviews it and answers within 45 days, explaining the result. If you’re still not satisfied, you can contact your state attorney general.
No penalty: we won’t deny you the Service, charge you a different price or give you a lower level of service because you exercised any of these rights.


How long we keep it

We keep your information for as long as you have an account, except the text of emails and calendar events: the body and preview of each message or meeting we read are deleted 12 months after its date, while the entry on your timeline (its subject, date, sender and the status it set) stays. If you leave Pro, your connections to Gmail, Outlook and calendars are paused, and 30 days later we delete our stored access to them (and, for Google, revoke it); what they already added to your applications stays. A resume you remove is kept for 5 days so you can restore it, then deleted. The text of forwarded emails is deleted 12 months after the email, like synced email; the entry on your timeline stays. Attachments from forwarded email are kept, encrypted, while the application they’re on exists, and are deleted with it or with your account. Files that came with a message waiting in your Review inbox are deleted a day after you clear the message. A forwarding address you replace or turn off stops working: mail to it is discarded for 30 days and refused after that. When you delete your account, we delete your data from the Service right away. Our hosting provider keeps a rolling history of our database so we can recover from mistakes, and deleted data drops out of it within 30 days. Your resumes and files are not kept in any backup: they’re deleted when you delete them, your account, or the application they belong to (after the 5 days in which you can restore them). We make no other copies. We may keep records we are required to keep by law, such as payment records held by Stripe. If you delete your account, we keep a one-way code made from your email address so a new account with the same email doesn’t get a second free trial. The account’s activity log (which changes were made, by whom and when, with the job’s company and role) is deleted after a year. Records of sharing and of our own administrative actions, which include the email addresses involved, are kept to protect the Service and the people you shared with; they hold no notes, documents, resumes, email contents or passwords. If you asked to hear about Pro or about opening in your country, we keep that request until we have told you or you ask us to remove it. Brevo keeps records of the emails it delivered for us for a limited time under its own policy.
Security

We use reasonable technical and organizational measures to protect your information. Among them:

Everything we store is encrypted at rest by our hosting provider. On top of that, we encrypt with our own key, kept separately from the data: the access tokens for email and calendar accounts you connect, portal passwords you ask us to remember, and your resumes and the files kept with your applications.
Sign-in sessions and email sign-in links are stored only as one-way hashes, and so is the browser extension’s token once the extension has collected it when you connect it.
The Service is served only over encrypted connections (HTTPS), and our pages tell browsers to run only our own code (and Cloudflare’s spam check on the Contact page and its cookieless page-view count), to limit what an injected script could do.
Apart from our own administrators, each request can reach only the data of the account it is for. People you share your job search with never see your portal passwords, settings or billing. When we look into a problem you report, we see the job’s details and your email address, not your notes, contacts, form answers or saved logins.
A small number of our staff can see account-level information to run and support the Service: your email address, plan, connected accounts and their sync status, and the company, role and status of your applications, and use it only to support you or keep the Service secure. They cannot see email or meeting content, notes or timeline entries you write, the people saved on your applications, form answers, files or portal passwords (except what you chose to include with inbox or match feedback), and every administrative change is recorded.


No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your personal information, we will tell you as the law requires.
Children

The Service is for adults looking for work and is not intended for anyone under 18, or under the age of majority where they live. If we learn an account belongs to someone that young, we will close it and delete its data.
Where your data is processed

We are based in the United States. By using the Service you understand that your information is processed in the United States and wherever our service providers operate.
Changes

If we change this policy in a material way, we will update the date above and ask you to review it when you next use the Service.
Contact

Questions about this policy or your data: help@findafknjob.com. Our privacy officer, who is re