Privacy Policy

What we collect

• Account data — your name, email address, and an identifier from your sign-in provider (Microsoft or Google).
• Profile data you provide — work history, education, skills, career goals, uploaded resumes, and writing samples.
• Application data — jobs you save, application stages, notes, tags, reminders, and documents JMD generates for you.
• Email data (only if you connect your mailbox) — the sender, subject, and short preview of recent messages, used to detect application updates. Messages are first screened locally; only messages that could be job-related are sent to our AI provider for classification. We store classification results and, for messages matched to one of your applications, limited metadata (sender and subject). We store an encrypted refresh token to read your mailbox; we never store full email bodies and we never send email on your behalf.

How we use it

Solely to provide JMD's features: searching and matching jobs, generating documents and insights with AI, tracking your applications, and sending you in-app notifications. We do not sell your data, show ads, or use your data for marketing.

Service providers

Your data is processed by these providers on our behalf:

• DigitalOcean — hosting and database (encrypted in transit and at rest)
• Anthropic — AI processing of profile, job, and screened email content; API data is not used to train Anthropic's models by default
• Microsoft (Graph API) — reading your mailbox, only if you connect it
• JSearch (RapidAPI) — your job search queries
• Exa — company and role names, for the networking feature

Security and retention

Traffic is encrypted with TLS. Mailbox tokens are encrypted at rest with AES-256-GCM. We keep your data while your account is active. Disconnecting email deletes the stored tokens immediately; revoking JMD's access from your Microsoft or Google account settings also cuts off access on the provider side.

Your rights

You can access and edit your profile in the app, and you can request a copy or full deletion of your data by emailing [email protected]. Deletion requests are honored within 30 days.

Google user data

If you sign in with Google, JMD's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children and changes

JMD is not directed at children under 16. We may update this policy; material changes will be reflected in the date above. Questions: [email protected].