Privacy Notice

This Privacy Notice explains how ibraheem mohyuddin ("we", "us", "our"), operating JobTrakr+ (the "Service"), collects, uses, and protects your personal data. We act as the data controller for personal data processed through the Service.

1. Personal data we collect

• Account data: name, email address, login credentials, and authentication tokens (including via Google sign-in).
• Application data you provide: job applications, company and role details, notes, status, CVs you upload, and CV analyses.
• Gmail data (if you connect it): read-only access to mailbox messages you authorize us to scan. Initial import searches recent job-related messages; incremental updates classify new messages, and unrelated messages are discarded from application tracking. Credentials are stored encrypted and you can disconnect Gmail in Settings.
• Support and communications: messages you send us.
• Usage and device data: pages visited, features used, IP address, device and browser identifiers, and basic telemetry for security and reliability.
• Cookies: essential cookies required for sign-in and session management.

2. Why we use it (purposes and legal basis)

• Provide the Service (contract): create your account, sync Gmail, store applications, run CV analyses.
• Security and fraud prevention (legitimate interests): detect abuse, protect accounts.
• Improve the Service (legitimate interests): debugging, aggregate analytics.
• Customer support (contract / legitimate interests).
• Legal compliance (legal obligation): tax, accounting, responding to lawful requests.

3. Who we share it with

• Paddle.com — our Merchant of Record for sales, subscription management, payments, tax compliance, and invoicing. Paddle is an independent data controller for payment data it collects directly from you at checkout.
• Lovable Cloud — hosting, secure data storage, and authentication.
• Google — only if you connect Gmail; we use Google's APIs subject to their terms.
• AI providers — for CV analysis and job-email classification; CV text and relevant email content are sent to generate analysis and application updates.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

4. International transfers

Some of our service providers (including Paddle and Google) may process data outside your country, including in the UK, EEA, and United States. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep personal data for as long as your account is active and as long as needed to provide the Service. When your account is deleted, we delete or anonymize associated personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention reasons (typically up to 7 years for billing records held by Paddle).

6. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data; to object to certain processing; and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority. We aim to respond to requests within one month. To exercise these rights, contact us through the in-app support channel.

7. Security

We use industry-standard technical and organizational measures, including encryption in transit, access controls, and least-privilege access to the database. No system is perfectly secure; please use a strong password and keep your credentials confidential.

8. Cookies

We use only essential cookies required for sign-in, session management, and security. We do not use third-party advertising or tracking cookies. Paddle's checkout may set its own cookies as described in its privacy notice.

9. Children

The Service is not intended for children under 16. We do not knowingly collect personal data from children.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be highlighted in the Service or by email.

11. Contact

For privacy questions, contact ibraheem mohyuddin via the in-app support channel. For billing-related personal data held by Paddle, contact Paddle at paddle.net. See also our Terms and Refund Policy.