Jobrhyme
Privacy Policy
Jobrhyme helps you tailor your resume to job postings. To do that it has to hold your resume, which is personal information. This policy explains what we collect, what we do with it, who else receives it, how long we keep it, and what you can do about it. "Jobrhyme", "we" and "us" mean Jobrhyme, the operator of jobrhyme.com. For your own account and its content, Jobrhyme is the controller under data protection laws such as the EU and UK GDPR: we decide how it's used, as this policy describes. For information a coach or other professional adds about their clients, Jobrhyme is a processor acting for that professional (section 5).
The short version: we use your information to run Jobrhyme for you. We don't sell it, we don't use it for advertising, and we don't let anyone use it to train AI models. You can download it, or delete your account and everything in it, at any time from Your account.
1. What we collect
What you give us
- Account details: username, email address, password (stored only as a one-way hash), the kind of account you chose, and when you agreed to our Terms.
- Resumes: what you upload or paste, including uploaded PDFs, and every saved version and edit. Resumes usually contain your name, contact details, work and education history, and anything else you include.
- Background: extra career details you add, including from a LinkedIn profile export you upload.
- Job postings: the links and text of postings you tailor against. When you give a link, our server fetches the page.
- Tailored results: the tailored resumes, the changes made, skill gaps, your notes and application status, and your edits.
- Messages: feedback you send us, and replies to our emails.
- Waitlist: if you join the waitlist on our home page instead of signing up, your email address.
- Payment status: if you subscribe, our payment processor (Stripe) handles your card. We receive and store only a customer reference, your plan, and the subscription's status and dates. We never see or store your card number.
Information about other people
- Clients: career coaches and other professionals can add their clients' resumes and details. We handle that information on the professional's behalf (see section 5).
- Share links: anyone you send a share link to can view that resume and leave comments, with a name they choose.
- Upload links: someone you send an upload link to can upload their resume and a note to your account.
Collected automatically
- Server logs: IP address, browser type, pages requested, times, and errors. We use them to run the service, keep it secure, and limit abuse, for example the number of sign-ups from one network.
- Usage records: how many AI tasks your account has run, to apply plan limits.
- Cookies: see section 7.
We don't buy information about you from anyone, and we don't look you up anywhere.
Sensitive information
We don't ask for health information, disability, religion, political or union activity, sexual orientation, ethnicity, immigration status, photos, or your age or date of birth, and you don't need any of them to use Jobrhyme. Resumes sometimes include some of these anyway, for example a veteran's disability rating or a volunteer role at a place of worship. Please leave out anything sensitive you don't want processed. If you include it, we treat it like the rest of your resume: we use it only to provide the service you asked for, and it goes to Anthropic with the rest of the resume whenever our AI works on it: reading an uploaded PDF (the whole file is sent), importing Background, tailoring, and summarizing your skill gaps (section 3). Editing it out of a resume creates a new version, and earlier versions and jobs tailored from them still contain it; to remove it everywhere, use Delete earlier versions on your Resumes page (with the jobs tailored from them) and, if you uploaded a PDF, Delete the uploaded PDF, which still has the original text; or delete the resume, or your account.
2. How we use it
- To provide Jobrhyme: digitize and store your resume, tailor it to postings, show you what changed and what gaps you have, make PDFs, and run share and upload links.
- To send emails you need: account, security and billing messages, comment notifications, and replies to you. If we ever send marketing email, it will have an unsubscribe link.
- To charge for paid plans and apply plan limits.
- To keep Jobrhyme secure and working: prevent abuse, investigate problems, and fix bugs.
- To improve Jobrhyme, using your feedback and overall usage. We do not train AI models on your resumes.
- To comply with the law and enforce our Terms.
Legal bases (EEA and UK)
If you're in the European Economic Area or the United Kingdom, GDPR requires a legal basis for each use. Ours are:
| What we do | Legal basis |
|---|---|
| Run your account: store, digitize and tailor resumes, make PDFs, share and upload links, and the emails the service needs | Contract: it's the service you signed up for (Art. 6(1)(b)) |
| Sensitive details you choose to put in a resume | Your explicit consent (Art. 9(2)(a)), given by including them after the notice where you upload; you withdraw it by deleting them as described above |
| Charge for paid plans and apply plan limits | Contract (Art. 6(1)(b)) |
| Keep payment and tax records | Legal obligation (Art. 6(1)(c)) |
| Security: server logs, sign-in limits, abuse prevention, error reports | Our legitimate interest in keeping Jobrhyme and its users safe (Art. 6(1)(f)) |
| Waitlist: tell you when you can sign up | Your consent, given by joining; ask us to remove you at any time (Art. 6(1)(a)) |
| Improve Jobrhyme from your feedback and overall usage, and count sign-ups per short link | Our legitimate interest in a service that works and in knowing which channels bring people in (Art. 6(1)(f)) |
| Clients' information added by a professional | The professional's basis; we process it for them (section 5) |
Where we rely on legitimate interests, we've weighed them against your privacy: none of them involve advertising, profiling or selling, and you can object (section 8).
3. AI processing
Tailoring, digitizing PDFs, importing Background and summarizing your skill gaps across jobs use Claude, an AI model made by Anthropic. Your resume (for an upload, the whole PDF), the posting and related details are sent to Anthropic's API to produce the result. Under Anthropic's commercial terms, Anthropic does not use this data to train its models, and keeps it only as long as those terms allow, for example for safety and abuse monitoring.
AI output can be wrong. Jobrhyme shows every change it makes so you can check it, and you decide what to download or send. Jobrhyme suggests text; it makes no decision about you, and nothing it does has a legal or similarly significant effect on you, so there is no automated decision-making in the GDPR's sense (Art. 22).
4. Who receives your information
We share information only as described here. We do not sell personal information or share it for cross-context behavioral advertising.
| Who | What | Why |
|---|---|---|
| Anthropic | Resume (or uploaded PDF), posting, Background and skill-gap content in each AI request | AI tailoring, digitizing, import and gap summaries |
| Stripe | Email, name, and what you buy; your card details go straight to Stripe | Payments and subscription management |
| Resend | Your email address and the email's content | Sending our emails |
| Job posting sites | A request from our server (not your browser) for the posting link you give | Reading the posting |
| People you choose | The resume behind a share link, or what you send through an upload link | Sharing you start |
Anthropic and Resend act as our processors, only on our instructions, and each offers its customers data processing terms covering confidentiality, security and deletion. Stripe processes payments for us, and is also an independent controller for some payment data, for example to prevent fraud and meet financial laws, under its own privacy policy. All three are in the United States. Job posting sites and the people you share with receive only what you choose to send them.
We may also disclose information if the law requires it, to protect the rights, safety or property of our users, the public or Jobrhyme, or as part of a merger, acquisition or sale of assets. In a sale we would require the buyer to honor this policy.
5. Coaches and other professionals
When a professional adds a client's information, the professional decides what is collected and why, and Jobrhyme processes it on their behalf, only to provide the service to them. Only the account that added a client can see or work on that client's information. The professional must have the client's permission (see our Terms). If you're a client and want your information accessed or deleted, ask your professional. They can delete it in Jobrhyme at any time. You can also contact us: we'll pass your request to the professional, and help them carry it out.
6. How long we keep it
- Your account and its content: until you delete it, or we close the account under our Terms.
- After you delete it: removed from the live service at once. Copies in backups are deleted as the backups age out: 30 days on our server and 90 days in our off-site copy.
- Sign-in sessions: until you sign out or the session expires (2 weeks); expired sessions are deleted nightly, and deleting your account signs you out everywhere.
- Server logs: 30 days.
- Waitlist emails: 12 months, or until you ask us to remove yours.
- Records of failed page fetches (the posting link and why it couldn't be read): 90 days.
- Payment records: when you delete your account we also delete your customer record at Stripe, with your saved card. Stripe keeps invoices and payment history as tax and financial laws require.
These periods are enforced by a nightly cleanup.
7. Cookies
We use only the cookies Jobrhyme needs to work. There are no advertising or cross-site tracking cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
sessionid | Keeps you signed in and holds your work in progress | Until you sign out, or 2 weeks |
csrftoken | Protects forms from cross-site request forgery | 1 year |
messages | Shows one-time notices such as "Saved" | Until shown |
All three are strictly necessary, so they don't need your consent. (Jobrhyme's own staff can also set a logo_variant cookie to preview logo designs; it's never set for anyone else.) When you arrive through one of our short links (for example from a video), the link's name is carried in the page address, not in a cookie, so we can count sign-ups per channel; if you sign up from that page, your account records which link it was.
Do Not Track: we don't track you across other websites, so a browser's Do Not Track or Global Privacy Control signal doesn't change what we do. We honor both in that we never sell or share your information for advertising.
8. Your choices and rights
- See and download: everything is visible in the app, and Your account downloads all of it as a file.
- Correct: edit your resumes, Background and results in the app, or contact us.
- Delete: delete your account and all of its data from Your account, or delete individual jobs, clients, your resume, or its earlier versions (on your Resumes page).
- Email: you can opt out of any marketing email. Account, security and billing emails are part of the service.
In the EEA and the UK
Under the GDPR you also have the right to:
- Access your information and get a copy: the download above has everything in your account; ask us for anything else we hold about you, such as server logs;
- Rectification of anything that's wrong, and erasure (the delete above);
- Restrict our use of it while a request or complaint is being resolved;
- Portability: the download is a machine-readable file (JSON, plus your PDFs);
- Object to any use based on our legitimate interests (section 2). Tell us which, and we'll stop unless we have compelling grounds, such as stopping abuse;
- Withdraw consent where we rely on it (sensitive details, the waitlist), as described in section 1, without affecting what came before;
- Complain to a data protection authority: in the EU, the one where you live or work (the list of EU authorities); in the UK, the Information Commissioner's Office. We'd appreciate the chance to fix it first.
We answer requests within one month. Contact us to make one (section 13).
In the United States
Depending on where you live, state law may give you further rights, such as to know what we've collected, to opt out of sales or targeted advertising (we do neither), or to appeal a decision about your request. Contact us to make a request. We'll verify it's you, using your account, and won't treat you differently for exercising your rights. California residents: we don't disclose personal information to third parties for their direct marketing.
9. Security
Jobrhyme uses encrypted connections (HTTPS). Passwords are stored only as hashes, access to the servers and admin tools is limited to the operator, and backups are kept off the public internet. No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires, including, where the GDPR applies, the data protection authority within 72 hours of learning of it.
10. Children
Jobrhyme is for people 16 and older, and we don't knowingly collect information from anyone younger. If you believe someone under 16 has an account, contact us and we'll delete it.
11. Where your information is
Jobrhyme is run from the United States and stores your information there, as do Anthropic, Stripe and Resend. If you're in the EEA or the UK, using Jobrhyme means your information goes to the US. Transfers to those providers rely on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or otherwise on the European Commission's Standard Contractual Clauses (and the UK Addendum) in the provider's data processing terms. Ask us and we'll tell you which applies to each.
12. Changes to this policy
If we change this policy, we'll post the new version here and update the date. If a change matters, for example a new kind of sharing, we'll email account holders before it takes effect.
13. Contact
Jobrhyme · app.jobrhyme@gmail.com. Signed-in users can also use Feedback. Use the same address for any privacy request or question, including from the EEA or the UK.