Privacy Notice

Effective July 6, 2026

Who we are

The Jobsmith (thejobsmith.net) is an independently operated job-search and resume-tailoring service based in the United States. This notice explains what personal information we collect, how we use and share it, and the choices and rights you have. It covers the website and the tools you use once signed in. Contact: [email protected].

Information we collect

Account information. When you create an account we collect your first and last name, email address, chosen username, and a securely hashed password (we never store your password in plain text). If you sign in with Google instead, we receive your name and email from Google to create and identify your account. We also record your confirmation that you're 18 or older.

Your content. The resume file you upload (converted to text), your career profile details, saved searches, the tailored ("forged") resumes and fit analyses we generate, and any outreach drafts you create.

Payment information. If you buy a subscription or forge pack, our payment processor (Stripe) collects and handles your card details directly — we never see or store your full card number. We keep only what we need to manage billing, such as your plan, a payment-processor customer/subscription identifier, transaction status, and the last part or type of card as returned to us.

Usage and technical information. Basic usage counts (such as how many forges you've run), your IP address and similar request data used for security and rate-limiting, and a random cookie identifier that keeps you signed in and your work available between visits.

Communications. Email you send us (support, feedback, deletion requests).

We do not use advertising cookies or third-party analytics/ad trackers, and we don't build advertising profiles.

How we use your information

We use your information only to run The Jobsmith for you: to create and secure your account; to generate your forged resumes and fit analyses; to restore your session and keep your forges downloadable; to process payments and manage subscriptions; to send account and transactional email (verification codes, password resets, billing and service notices); to enforce usage limits and prevent abuse; to provide support; to understand aggregate usage so we can improve the product; and to comply with law. We do not sell your personal information, share it with advertisers, or use it for anything beyond operating the Service.

AI processing

To generate your forged resume and fit analysis, we send the relevant text — your resume and the job description — to Anthropic's Claude API. Under Anthropic's commercial API terms, this data is not used to train their models by default. We send only what's needed to produce your output, and only when you run a forge or analysis.

How we share information

We share personal information only with the service providers ("processors") that help us run the Service, each receiving only what its function needs and only to provide services to us:

• Anthropic — AI generation of forged resumes and fit analyses.
• Stripe — payment processing and subscription billing.
• Resend — sending our transactional email (verification, password reset, billing/service notices).
• Railway — cloud hosting: runs the application and stores its database, including your account, career profile, and resume data.
• Cloudflare — DNS, content delivery, and security/DDoS protection for the website; it processes connection data such as your IP address as traffic passes through.
• Zoho Mail — the mailbox behind [email protected], which receives email you send us (support, feedback, and privacy requests).
• Google — only if you choose "Continue with Google" to sign in.

When you run a job search, search terms may be sent to third-party job boards or aggregators to return listings; we do not send your resume or account details to them. We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger, acquisition, or sale of the business (you'll be notified of any such change to this notice).

What you should not upload

Please do not include Social Security numbers, dates of birth, financial account numbers, or other sensitive identifiers in uploaded resumes — a normal resume doesn't need them and neither do we. Only upload a resume you have the right to use (yours, or one you're authorized to act on).

Cookies

We use a single essential cookie to keep you signed in and tie your session to your saved work. It's not used for advertising or cross-site tracking. Blocking it will prevent the Service from working. We don't use third-party advertising or analytics cookies.

How we protect your information

Passwords are stored hashed, never in plain text. Sensitive fields — including your resume text, forged output, and personal identifiers like your name and email — are encrypted at rest. We serve the site over HTTPS and apply access controls and rate limiting. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

Retention and deletion

We keep your information for as long as your account is active so your saved forges and profile stay available to you. You can delete your account at any time from the account page, or request deletion of everything we hold about you by emailing [email protected] — we'll confirm within a few days.

When you delete your account, your live data is erased immediately. Encrypted backup copies are retained for up to 14 days for disaster recovery and are then permanently removed. We may retain limited records where the law requires (for example, basic transaction records for tax and accounting).

Your choices and rights

You can, at any time: access and update your account details; download a copy of your data ("Download & restore my data" on the account page); cancel a subscription from your account; and delete your account and data. To exercise any right, use your account page or email [email protected]. We won't discriminate against you for exercising your privacy rights.

California privacy rights

If you're a California resident, you have the right to know the categories of personal information we collect (identifiers, account and profile content, commercial/transaction information, and internet/technical activity — all described above), to access and delete that information, to correct it, and to obtain a portable copy. We do not sell or "share" personal information for cross-context behavioral advertising, and we don't process it for targeted advertising, so there's nothing to opt out of on that front. To make a request, email [email protected]; we'll verify it against your account before acting.

Children

The Jobsmith is intended for adults. It is not directed to anyone under 18, and we don't knowingly collect information from anyone under 18. If you believe a minor has used the Service, contact us and we'll remove the account and data.

Where your data is handled

The Service is operated for, and offered only to, users located in the United States, and your information is stored and processed in the United States by us and our providers. The Service is not directed to, or intended for, individuals in the European Economic Area, the United Kingdom, or other regions outside the United States, and we do not offer it to them.

Changes to this notice

We'll update this notice as the product matures. Material changes will be reflected on this page with a new effective date and, where appropriate, noted in the app or by email.

Contact

Questions or privacy requests: [email protected]