Privacy Policy

What we collect

• Account data — your name, email address, and an identifier from your sign-in provider (Microsoft or Google).
• Profile data you provide — work history, education, skills, career goals, uploaded resumes, and writing samples.
• Application data — jobs you save, application stages, notes, tags, reminders, and documents JMD generates for you.
• Email data (only if you connect your mailbox) — the sender, subject, and short preview of recent messages, used to detect application updates. Messages are first screened locally; only messages that could be job-related are sent to our AI provider for classification. We store classification results and, for messages matched to one of your applications, limited metadata (sender and subject). We store an encrypted refresh token to read your mailbox; we never store full email bodies and we never send email on your behalf.

How we use it

Solely to provide JMD's features: searching and matching jobs, generating documents and insights with AI, tracking your applications, and sending you in-app notifications. We do not sell your data, show ads, or use your data for marketing.

Service providers

Your data is processed by these providers on our behalf:

• DigitalOcean — hosting and database (encrypted in transit and at rest)
• Anthropic — AI processing of profile, job, and screened email content; API data is not used to train Anthropic's models by default
• Microsoft (Graph API) — reading your mailbox, only if you connect it
• JSearch (RapidAPI) — your job search queries
• Exa — company and role names, for the networking feature

Security and retention

Traffic is encrypted with TLS. Mailbox tokens are encrypted at rest with AES-256-GCM. We keep your data while your account is active. Disconnecting email deletes the stored tokens immediately; revoking JMD's access from your Microsoft or Google account settings also cuts off access on the provider side.

Your rights

You can access and edit your profile in the app, download a copy of your data, and delete your account yourself at any time, in Settings. Deleting your account explains exactly what it removes. If you can't sign in, email [email protected] and we'll do it for you within 30 days.

Google user data

If you sign in with Google, JMD's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Reports and feedback

When you report a problem, flag an AI result, or send feedback, we keep: what kind of report it is; the job listing, AI feature or page it's about; what you wrote; the page you were on; and whether it came from the website or an app. If you're signed in, your plan and a reference to your account go with it, and a flagged AI result is identified by its application — the generated text itself is not copied into the report. Your email address is included only when you ask for a reply.

So that one person counts once per problem, we store a one-way code made from your account (or a random code held only by your browser) and the problem. It can't be reversed, and your reports about different problems don't share one. To limit abuse we also keep a one-way, daily-changing code of your network address, cleared after two days. Reports become tickets in JMD support's system; a report is deleted 180 days after anyone last reported the same problem, and the support ticket is kept. Deleting your account detaches your reports from it.

Children and changes

JMD is not directed at children under 16. We may update this policy; material changes will be reflected in the date above. Questions: [email protected].