Who runs Jobhuntz
Jobhuntz is built and run by Soma Shekar Keesari. It tailors your CV and cover letter to a job description, checks every claim in the result against your own CV, and keeps a tracker of your applications.
TODO(owner): state whether you operate as an individual or a company, your country or region, and the e-mail address people should use for privacy questions.
What we store
Everything below is kept in your account and only you can read it. Nothing is shared with other users.
- Your account. Your e-mail address and how you sign in (e-mail and password, Google or GitHub), handled by Supabase. We never see your password.
- Your master CV as you pasted or uploaded it, the profile extracted from it (name, contact details, education, projects), your eligibility answers (right to work, location, years, degree, availability), the claims registry (which skills you hold at production, project or learning level), your positioning variants, project links, document preferences and project pool.
- Your application tracker. For each row: company, role, dates, status, salary, your notes, the job description you pasted, the tailored CV and cover letter you saved with it, the CV file you uploaded as the one you sent, the interview prep pack, and the transcript and feedback of each mock interview. The mock interview stores text only: your voice is turned into text in your browser and no audio is sent or stored.
- Company research you request, cached in your account for seven days.
- Provider keys you add in Settings, encrypted (AES-256-GCM) before they are stored. Only a short hint is ever shown back. We never log a key.
- Usage counters (how many tailors you have run today and on the free credits) and any feedback you send through the feedback button. Feedback is write-only: it is not shown back to you and is not in the export.
Who processes it
- Supabase hosts the database, sign-in and file storage.
TODO(owner): name the Supabase project region (for example “EU West, Ireland”).
- Vercel hosts the app. Its servers see your IP address and keep ordinary server logs.
- Anthropic (Claude)receives the text of your CV, the job description and your eligibility answers when a run uses our free credits, so that it can write and check the result. Anthropic's API terms do not allow training on this data.
- OpenRouter or Google Geminireceive the same text only when you have added your own key in Settings and a run uses it. OpenRouter's free models may use what you send to train their models; the Settings page says so beside the key.
- Company researchfetches the company's public website and job board from our server. Nothing about you is sent to the company.
- The mock interviewer's voice runs in your browser. Your browser downloads the voice model from Hugging Face and a library from jsDelivr; they see your IP address, never your text.
- Upstash (rate limiting), when configured, sees only your account id and a request count.
We do not use analytics or advertising trackers. There is no third-party JavaScript on these pages.
Cookies and local storage
One or more session cookies keep you signed in. Your browser's local storage holds the run you are working on, your practice ratings and a game counter so a reload loses nothing; signing out or deleting your account clears them.
How long we keep it
Until you delete it. Deleting your account removes every row and file listed above at once.
TODO(owner): state how long server logs and database backups are retained (Vercel and Supabase defaults unless you have changed them).
Your rights and your controls
- Export. Settings → Your data → Download everything gives you a JSON file of every table above except the write-only feedback.
- Delete. Settings → Your data → Delete my account removes your account, every row and every uploaded file, immediately and permanently.
- Correct. Everything is editable in the app: Customize for your CV and answers, the tracker for applications.
If you are in the UK or the EU you also have the rights of access, rectification, erasure, portability, restriction and objection under data-protection law, and the right to complain to a supervisory authority (in the UK, the Information Commissioner's Office).
TODO(owner): confirm the governing data-protection law (UK GDPR is assumed) and the contact address for exercising these rights.
Changes
When a feature changes what is stored or who processes it, this page changes with it and the date at the top moves. See also the terms of use.