Privacy policy

Jobplanr ("we", "us") provides a job-search organization service through a web application at jobplanr.ai and a companion mobile application. This policy describes what personal data we collect, how we use it, how long we retain it, and the rights you have over it. The policy applies to both the web application and the mobile application.

1. Data we collect

From the mobile app

The mobile app collects your email address and password solely for the purpose of authenticating you against your Jobplanr account. Your password is transmitted over HTTPS to our authentication endpoint and is never stored on the device. After a successful login, the server issues a short-lived authentication token; the token is stored on your device using expo-secure-store, which uses the platform-provided secure storage (iOS Keychain or Android Keystore). The mobile app does not store your password anywhere on the device.

From the web app and API

When you create an account or use Jobplanr through the web or mobile app, our backend stores the following: your email address, a salted hash of your password (never the plaintext password), your first and last name if provided, and the records you create through the product (such as job opportunities, companies, contacts, and notes). All records you create are linked to your account and are not visible to other users.

Server logs

Our backend records standard web request logs, which include the requesting IP address, the user-agent string of your client, the requested URL, and a timestamp. These logs are produced by the underlying Django and Django REST Framework stack and are used for operational monitoring, debugging, and security review.

2. How we use your data

We use your data only for account authentication and product functionality — that is, to sign you in, to keep you signed in, and to store and display the job-search records you create. We do not use your data for advertising, profiling, or any purpose unrelated to the service.

3. Email

We only send transactional email — for example, account verification, password reset, and security notifications. We do not send marketing email. No marketing communications are sent from Jobplanr at this time. If this changes in the future, this policy will be updated and you will be notified before any marketing email is sent.

4. Third parties and data processors

We use the following third parties as data processors. We do not share your data with any other third parties, and we do not sell your data.

• AWS (Amazon Web Services) — we use AWS RDS to host the database that stores your account data and product records (data at rest), and AWS SES to deliver transactional email on our behalf.
• New Relic — we use New Relic for server-side application performance monitoring (APM) only. New Relic receives aggregate request-level performance data. We do not use any client-side analytics product.

5. Data retention

We retain your account data and the records you create for an indefinite period for as long as your account is active. Account and associated data are deleted on user request — when you ask us to delete your account (see section 7), we will remove your account and the associated product records from our active systems. Backups taken before the deletion request may retain copies for a limited period before they are rotated out per our standard backup lifecycle.

6. Data sharing

We do not sell your data. We do not share your data with any third party for marketing purposes. We do not transfer your data to any party outside the data-processor relationships described in section 4.

no sale of personal data. no sharing for marketing. No transfers outside the service-provider relationships above.

7. Your rights

You have the right to access the personal data we hold about you, the right to request correction of inaccurate or incomplete data, and the right to request deletion of your account and associated data. To exercise any of these rights, contact us at the address in section 8. We will respond within a reasonable time and verify your identity before acting on the request.

8. Contact

For any privacy question, complaint, or request to access, correct, or delete your data, contact us at support@jobplanr.ai.

9. Governing law

This policy is governed by the laws of the State of New York, in the United States. Any dispute arising in connection with this policy will be resolved under New York State law.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. If a change materially affects how we handle your data, we will notify account holders by email before the change takes effect.