Privacy Policy

1. The Short Version

• We use your resume to give you your score and, if you buy one, your plan or your rewritten resume.
• We never sell your data and never use it for advertising.
• Your resume text is sent to OpenAI to produce your results, with storage turned off. OpenAI does not train its models on it.
• Card details go to our payment provider, Dodo Payments. We never see them.
• You can have your account and data deleted at any time by emailing support@jobsecuritymeter.com.

2. What We Collect

• Your account: your email address, and your name if you sign in with Google.
• What you upload: the text read from your resume PDF and, if you add one, your LinkedIn PDF. We keep the text, not the file.
• Your results: your score, risks, strengths, quick wins and other output we generate, the job title, and your name as it appears on your resume.
• Premium roadmaps: your answers to the roadmap questions and the roadmap we write for you.
• Resume Maximiser: the free scan is not stored. If you continue to the rewrite step, we save the scan, your resume text, any job description you add, your answers to its questions and the rewritten resume.
• Job Autofill: the profile you write for the extension (see section 12).
• Purchases: the pack you bought, the amount, the currency, the payment reference and its status. Never your card details.
• Feedback and support: survey answers, ratings and comments you give us, and messages you send to support by email or through the chat bubble.
• Your email choices: which kinds of email you want from us.
• Technical data: your IP address, browser and device type, and the pages you visit, from our hosting, analytics and error reports. For a result made without an account, we also store your IP address with the result (see section 8).

3. How We Use It

• To run the service: producing your score, plan and rewrite, and saving them to your account.
• Free limits and abuse prevention: free analyses and scans are limited per IP address without an account and per account when signed in.
• Saving a result you made before signing up: the browser that made it gets a private code that lets it save the result to your new account.
• Identity check: we compare the name on your resume so premium re-evaluations stay with the same person.
• Payments: adding your credits and sending your receipt.
• Email: sign-in codes, receipts, and the updates you choose (section 7).
• Support: answering your questions.
• Benchmarks: anonymous scores, job titles and risk levels are used to show where a score sits among others. They are never shown with your name or resume.
• Improving the product: reading feedback and survey answers. We do not use your resume to train AI models.

4. How AI Processes Your Data

The text of your resume and LinkedIn profile, your answers and any job description you add are sent to OpenAI to produce your results. Every request is sent with storage turned off. OpenAI does not train its models on data sent through its API, and under its API policy it may keep requests for up to 30 days to detect abuse.

For a premium roadmap, OpenAI's web search also researches your job market live. That research step only receives general facts about your role - job title, industry, skills and region - never your name, your employer or your resume text. The sources it reads are linked in your roadmap.

5. Who We Share It With

Only the providers that run parts of the service, and only what each one needs:

• OpenAI: produces your analysis, roadmap and rewrite (section 4).
• Supabase: hosts our database and handles sign-in. Your account, results and autofill profile are stored there.
• Vercel: hosts the website, so it handles every request, including your IP address.
• Dodo Payments: runs checkout as the merchant of record. It handles your payment, billing details, sales tax and invoices.
• Resend: sends our emails, including sign-in codes, so it processes your email address and the message.
• ImprovMX: forwards emails you send to our @jobsecuritymeter.com addresses to our team's inbox.
• Heyo: runs the support chat bubble. It receives the messages you send there and basic details about your visit.
• Sentry: receives error reports when something breaks. These may include your IP address, the page you were on and your account identifier, so we can fix the fault.
• Google: Google Analytics measures overall traffic, such as which pages are visited and how people arrive. If you choose “Continue with Google”, Google also handles that sign-in.

We do not sell your personal information, and we do not share it for targeted advertising. We may disclose information when the law requires it, or to protect our users or the service. If the business is ever sold, your data would move with it under this policy.

None of the services in this list are used by the Job Autofill browser extension. Its network requests go only to us and to Supabase, as described in section 12.

6. Cookies and Storage on Your Device

• Sign-in cookies (Supabase) keep you signed in. The site needs these to work once you have an account.
• Analytics cookies (Google Analytics) measure overall traffic.
• Support chat (Heyo) may store an identifier so a conversation can continue.
• Your browser's own storage holds the progress of a Resume Maximiser scan, the id of your latest result, the private code that lets this browser save a result you made before signing up, a copy of your free-limit count, and - only while a payment is being confirmed - its checkout reference, removed once it is confirmed.

You can clear all of these in your browser settings. Blocking analytics cookies does not affect how the site works.

7. Emails

Always sent: sign-in codes and purchase receipts. You need these to use the service.

Your choice - on until you turn them off:

• Intelligence Feed: Weekly digest of layoff trends, automation risks, and new analysis from the blog.
• Product updates: New features and tools as they launch. A handful of emails a year, at most.
• Offers and upgrades: Occasional prompts to unlock a Premium Roadmap, plus any pricing offers.
• Account nudges: Reminders when you have unused credits sitting idle, and the odd request for feedback.

Every one of these emails has a one-click unsubscribe link, and you can change them all under Account → Settings → Email. We never sell or rent your email address.

8. How Long We Keep It

• Your account and what is in it: for as long as your account exists.
• Free results on an account: we keep your 10 most recent. Older free results are deleted automatically. Results you paid for - roadmaps and rewrites - are kept while your account exists.
• Results made without an account: after 30 days, unless you saved the result to an account, we remove the resume text, LinkedIn text, IP address and name from it. Only the anonymous score, job title and risk level remain, for benchmarks.
• Payment records: for as long as tax and accounting rules require, even after an account is deleted.
• Hosting logs and error reports: kept by those providers for a limited time under their own policies.

9. Your Choices and Rights

• See, correct or delete your data: email support@jobsecuritymeter.com from the address on your account. We act on requests within 30 days. Deleting your account deletes your results, roadmaps, rewrites, autofill profile and email choices; we keep only the payment records the law requires.
• Emails: turn any optional email off at any time (section 7).
• California residents: you have the right to know what we hold about you, and to have it corrected or deleted. We do not sell or share personal information, and we will not treat you differently for using these rights.
• EU and UK residents: you can also ask us to restrict or stop using your data, or to give you a copy in a portable format, and you can complain to your local data protection authority. We use your data to provide the service you asked for, for our legitimate interests (security, free limits, benchmarks and improving the product), and for optional emails, which you can turn off at any time.

10. Security

Every connection to the site is encrypted. Our database can only be reached by our own servers, never directly from a browser. Card details never touch our servers. Uploaded files are read as text and never run. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

11. Children

Job Security Meter is not meant for anyone under 16, and we do not knowingly collect their data. If you believe a child has used the service, email support@jobsecuritymeter.com and we will delete it.

12. The Job Autofill Browser Extension

Job Autofill is our optional Chrome extension. It fills job application forms from a profile you write yourself. It is a separate decision from using the website: you have to install it, and then explicitly connect it to your account.

The voluntary equal-opportunity questions

US application forms routinely ask for gender, race or ethnicity, veteran status and disability status. So the profile has a place to store answers to those four questions — and because they are more sensitive than anything else in it, they are treated differently:

• Every one of them defaults to “prefer not to say.” We never pre-select an answer on your behalf. If you leave that tab alone, there is nothing to store and nothing to fill.
• They are only ever filled into the equivalent voluntary question on a form — the same question the employer is already asking, and one you are always free to leave blank.
• They are never used for anything else. They are not part of your job security score, they play no role in any AI processing, they are not used for analytics or benchmarking, and they are never shared with anyone.
• You can clear them at any time from your account page, by setting each one back to “prefer not to say.”

If you would rather we did not hold this information at all, simply leave those four questions unanswered — every other part of autofill works exactly the same without them.

What the extension keeps on your own device

Four things, and nothing else. None of them ever leaves your browser except the sign-in token, which is sent back to us to prove the profile request is yours:

• A sign-in token for your account, so the extension can fetch your profile without asking you to log in again.
• A cached copy of our public form-layout list — the notes that tell the extension where the fields are on a given job site. It is the same file for every user and contains nothing about you.
• Where you dragged the button — which edge of the window you parked it on, and how far down.
• Which sites you have hidden it on, so it stays tucked away where you asked it to be.

Your profile itself is not saved to your device. It is fetched when a fill needs it and held in memory for up to a minute so that pressing the button twice does not mean waiting for the network twice.

What it does not do

The extension does not read the pages you visit. It looks at the form fields on a page to work out which of them it could fill, and that inspection happens entirely in your browser. Nothing about the pages you open, the jobs you look at, or the forms you fill is sent to us or to anyone else.

It contains no analytics and no tracking of any kind. There is no telemetry, no usage reporting, and no advertising or analytics code in the extension. It makes exactly three kinds of network request, all of them to us or to our own hosting: fetching your profile, fetching that public form-layout list, and renewing your sign-in token with Supabase, the database and authentication provider this site runs on. It loads no code from the internet at run time — everything it executes ships inside the extension and is reviewed by Google before you receive it.

What it is never used for

We do not sell this data, we do not use it for advertising, we do not build a profile of your browsing, and we do not transfer it to third parties. None of the AI processing described above touches it — your autofill profile is never sent to OpenAI or any other AI provider.

Why it asks for each permission

• Storage: to keep your sign-in token and a cached list of known form layouts on your device.
• Active tab and scripting: so that pressing “Fill this page” can reach the form in front of you, on a page we do not otherwise run on.
• Named job sites: the extension runs automatically on a fixed list of applicant tracking systems (Greenhouse, Lever, Ashby, Keka and similar) so the fill button is there when you need it.
• Any other site, only if you ask: most companies run their own careers page. You can grant one of those individually, from the extension itself. Nothing is granted at install, and you can revoke any of it from your browser's extensions page at any time.

Disconnecting and deleting

“Disconnect” in the extension removes the sign-in token from your device immediately. Your autofill profile can be cleared from your account page, and removing the extension removes everything it held locally. Deleting your account deletes the profile with it.

13. Where Your Data Is Processed

Our providers process data in the United States, Singapore and the other countries where they operate. Wherever it is processed, it is protected as this policy describes.

14. Changes to This Policy

When we change this policy, we update the date at the top of this page. If a change is significant, we will email account holders before it takes effect.

15. Contact

Questions about your data, or a request to see or delete it: support@jobsecuritymeter.com.