ThatJob

Privacy Policy

Effective date: March 4, 2026 · Last updated: March 4, 2026

1. Introduction

ThatJob ("we," "us," or "our") operates the website at thatjob.ai and the related web application (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and your rights regarding that information. By accessing or using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account data — name, email address, and password when you create an account.
  • Profile & resume data — work experience, education, skills, contact details, and any other information you add to your profile or upload via resumes.
  • Job application data — job descriptions, company names, and related details you enter to track applications.
  • Payment data — billing name and payment method details are collected and processed by our payment processor, Stripe. We do not store full card numbers on our servers.
  • Communications — any messages you send us via email or the in-app support form.
  • Survey / onboarding responses — e.g., how you heard about ThatJob (referral source), used for product analytics.

2.2 Information Collected Automatically

  • Usage data — pages viewed, features used, timestamps, and interactions with the Service.
  • Device & browser data — IP address, browser type, operating system, and device identifiers.
  • Cookies & similar technologies — session cookies for authentication, and analytics cookies to understand usage patterns. See Section 8 below.
  • UTM / referral parameters — marketing attribution data from inbound links (e.g., utm_source, utm_medium, utm_campaign), stored in your browser's local storage and passed to our payment processor as metadata.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To personalize your experience (e.g., AI-tailored resumes, match scores, interview preparation).
  • To process payments and manage subscriptions.
  • To send transactional emails (e.g., email confirmation, password resets, billing receipts).
  • To respond to support inquiries.
  • To analyze usage trends and improve product quality.
  • To detect, prevent, and address fraud or security issues.
  • To comply with legal obligations.

3.1 Service Providers

We share data with the following providers solely to operate the Service: Supabase (database & auth), Stripe (payments — see Stripe Privacy Policy), Resend (transactional email), and Vercel (hosting). We do not sell your personal information to any third party.

4. Data Shared with Third-Party AI Providers

Core features of ThatJob are powered by artificial intelligence. To deliver these features we transmit certain user-provided content to third-party AI model providers. Currently we use OpenAI (GPT-4o).

4.1 What Data Is Sent

When you use an AI-powered feature (resume tailoring, cover letter generation, match scoring, outreach email drafting, interview preparation, resume parsing, or professional summary generation), the relevant inputs — such as your resume content, job descriptions, and company details — are sent to OpenAI's API for processing. We only send the minimum data necessary to produce the requested output.

4.2 How AI Providers Handle Your Data

OpenAI processes data sent via their API under their API Data Usage Policy. As of the effective date of this policy, OpenAI states that data submitted through the API is not used to train their models and is retained for a limited period (typically 30 days) for abuse and misuse monitoring, after which it is deleted. We encourage you to review OpenAI's policies directly for the most current information.

4.3 Your Choices

Use of AI features is voluntary. If you prefer not to have your data processed by third-party AI providers, you may choose not to use those specific features. The core job-tracking and contact management features of the Service do not require AI processing.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements). Stripe and OpenAI may retain data according to their own retention policies.

6. Data Security

We implement commercially reasonable technical and organizational safeguards to protect your data, including encryption in transit (TLS), encrypted storage, and role-based access controls. However, no method of electronic transmission or storage is 100 % secure, and we cannot guarantee absolute security.

7. Cookies & Local Storage

We use essential cookies to manage your authenticated session. We may also use analytics cookies or similar technologies to understand how users interact with the Service. You can configure your browser to refuse cookies, but doing so may impair certain Service functionality. We use browser local storage to persist marketing attribution data (UTM parameters) across page navigations during the signup flow; this data is cleared after checkout.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing activities.
  • Receive a portable copy of your data.
  • Withdraw consent at any time (where processing is based on consent).

8.1 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and its amendments, including the right to know what personal information we collect, the right to delete, the right to opt out of the "sale" or "sharing" of personal information, and the right to non-discrimination for exercising these rights. We do not sell or share (as defined under CCPA) your personal information. To exercise your rights, contact us at the address below.

To exercise any of these rights, email us at support@thatjob.ai. We will respond within the timeframe required by applicable law.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top and, where appropriate, notify you by email or through the Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@thatjob.ai

Governing law: State of California, United States

See also our Terms of Service.