Privacy Policy

The document was created July 2019.
The last update to this document was May 2025.
Current as of today.

Cookies

Cookies are small text files that the website stores locally on your computer. Cookies allow us to recognize your computer the next time you visit us. By doing so, Jobicy is able to improve the user-friendliness of the website and to adjust the website to your needs. Most Internet browsers are set to accept these cookies automatically.

The type of personal information we collect as a result of a cookie is specific to your computer and may include the Internet Protocol (IP) address, the date and time you access our website, and what parts of the website are visited. We collect the foregoing personal information to monitor the usage and usefulness of our website, for statistical purposes, and to send you information about our company and our (new) products and services, which suit your interests.

You may set your browser to notify you when you receive a cookie or to refuse receiving it. You can also withdraw your consent at all times by re-entering our website and selecting the right options. By changing settings, you can also determine that your browser will not accept cookies from this website. Be aware that in such events you may no longer be able to use all the possibilities and features of our website.

Collection of data, purpose and recipients

For the purposes of the General Data Protection Regulation (GDPR) and related data protection laws, Jobicy acts as the Data Controller of your personal information. We collect and process personal data when you provide it to us (e.g., name, city, phone number, and e-mail address) through registration, completion of forms, or email communications.

We process your data based on the following legal grounds under Article 6(1) of the GDPR:
– Contract Performance (Art. 6(1)(b)): To process orders, deliver services, create your account, and manage job listings.
– Consent (Art. 6(1)(a)): For sending optional direct marketing messages and setting non-essential cookies.
– Legitimate Interests (Art. 6(1)(f)): To prevent fraud, ensure website security, and provide an optimal user experience.

International Data Transfers

Some of our third-party service providers (including Stripe, PayPal, Cloudflare, OpenAI, Anthropic, and Google) are located outside the European Economic Area (EEA), primarily in the United States. Whenever we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by relying on the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs) approved by the European Commission.

Public Profiles and Public Content

Jobicy gives users control over the visibility of their professional profiles. If you choose to make your profile public, the information displayed on that profile is considered publicly available information.

Public profiles and job listings may be accessible to anyone on the Internet and may be discovered through search engines, AI-powered search services, large language models (LLMs), web crawlers, aggregators, archives, and other third-party services.

These third parties operate independently from Jobicy. Once public information has been indexed, cached, copied, or referenced by a third party, changing your profile visibility or deleting information from Jobicy may not result in its immediate removal from third-party services.

If you do not want your profile information to be publicly accessible, you can change your Profile Visibility settings. See Profile Visibility and Removing Your Information from Search Engines for more information.

Your Data Rights (GDPR Compliance)

At all times, you have the right to object to the use of your data for direct marketing purposes. Under applicable data protection laws, including the GDPR, you have the right to request access to, rectification of, or deletion (Right to be Forgotten) of your personal data if such data is incorrect or irrelevant. You also have the right to restrict processing and the right to data portability.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

For any of these purposes, please submit your official request via our Contact Form. Please begin your message with “PRIVACY REQUEST:” so our team can process it promptly.

Retention period

Jobicy will not retain personal data obtained through this website for longer than necessary to fulfill the purposes for which it was collected, unless there are compelling legitimate grounds or statutory legal obligations requiring us to retain the data for a longer period.

Delete Your Account and Data

When you delete your account, we make every effort to remove your personal information from all of our systems. However, some historical data, like previous support requests you submitted, will be retained for customer support purposes. After deleting your account, your data will no longer be accessible or recoverable, and you will no longer receive notifications from Jobicy about your account.

Deletion of personal data will be processed only after receiving confirmation about it. This process is fully automated; it is useless and unnecessary to contact our support team. All steps are performed independently in the User’s personal account.

1. Log in to your account.
2. In the left sidebar menu, navigate to My Settings.
3. At the bottom of the Account Data page, under “Delete account”, click Delete my data and account.
4. Follow the steps in the app to delete your account.
5. Once you confirm the deletion, your account and all associated data are deleted immediately and cannot be recovered. This process is fully automated; no additional action is required afterwards.

Once terminated, we will make reasonable commercial efforts to permanently delete your account and all the data associated with it, including your Listings from our Website. While this information may be temporarily retained in residual backups, we cannot recover your data once you have closed your account.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Website Managers can access:

• Order information like what was purchased, when it was purchased, and
• Customer information like your name and email address.

Our team members have access to this information to help fulfill orders and support you.

Payments

Jobicy uses industry-leading payment processors for the secure, PCI-compliant handling of credit card information for both our subscription plan payments and our payment forms.

Stripe

Stripe handles collecting, transmitting, processing, and storing credit card information for our customers when they upgrade to a paid plan. Stripe only processes this information to support the needs of Jobicy. Additionally, Stripe is available as a payment provider option to our customers on all plan levels to enable the creation of forms that collect payment. When you first connect your organization to Stripe, we share your name, email address, and organization name with Stripe to facilitate quickly creating a new Stripe account. You can learn more about how Stripe protects your personal information in the Stripe Privacy Policy.

PayPal

PayPal is available as a payment provider option to our customers on the Team and Enterprise plans. When you first connect your forms to PayPal, we share your name, email address, and organization name with PayPal to facilitate quickly creating a new PayPal account. You can learn more about how PayPal protects your personal information in the PayPal Privacy Policy.

Notice of Breach of Security

We will notify you if there was a breach of your personal information.

If a security breach causes an unauthorized intrusion into our system that materially affects you or your organization’s information, then we will notify you as soon as possible and later report the action we took in response.

Safeguarding Your Information

We work hard to keep your information safe and secure. Please do your part and protect your account password.

We take reasonable and appropriate measures to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the personal information. We rely on Cloudflare to safeguard the physical and technical security of your information, and we have documented and enforced organizational controls to limit access to, and to protect your information.

Jobicy accounts require an email address and password to log in. You must keep your email address and password secure, and never disclose them to a third party. If you feel like the security of your account has been compromised, you must inform us immediately so we can take protective measures to safeguard your information.

AI Tools

What We Mean by “AI Tools”

On Jobicy we provide features powered by machine-learning models (e.g., résumé scoring, cover-letter generator, interview practice).

Data We Process

When you use an AI feature we may process: (a) the prompts you type or upload; (b) generated outputs; (c) usage logs (timestamps, IP, device).

Why We Process It

We use this data to deliver the requested output, monitor for abuse, troubleshoot, and improve model quality. We do not sell your prompts or outputs to third parties or use them to train unrelated public models.

Third-Party Model Providers

Some features call external APIs (currently OpenAI, Anthropic, Google Gemini). These providers process data only to deliver the service and are bound by confidentiality and security obligations.

Automated Decision-Making

AI outputs are suggestions only. We do not make fully automated decisions with legal or similarly significant effects on you.

How Long We Keep It

Raw prompts and outputs are retained for 30 days unless you explicitly save them to your profile; logs are kept for up to 90 days for security auditing.

Sensitive Data Warning

Do not input highly sensitive personal data (e.g., health records, government IDs). If you do, you acknowledge you have no expectation of privacy beyond what is stated here.

Security

All AI traffic is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Children

AI features are offered only to users 16 years or older; we do not knowingly process data of minors below this age.

Jobicy Copilot and Notifier Browser Extension

This section explains how Jobicy processes information when you use the Jobicy Copilot and Notifier browser extension (“Extension”). It supplements the other provisions of this Privacy Policy.

Information stored locally in your browser

The Extension uses local browser storage to save settings and provide its features. Depending on the features you use, locally stored information may include:

• Job categories, geographic preferences, keywords, notification settings, update frequency, theme, and saved jobs;
• A cached copy of the Jobicy candidate profile that you choose to connect;
• Optional application details, such as your phone number, address, work authorization preferences, availability, professional links, time zone, referral source, and other common application answers;
• A resume or CV file that you choose to save in the Extension;
• Voluntary demographic and Equal Employment Opportunity (“EEO”) answers;
• AI consent preferences, Extension settings, temporary application state, and account usage information;
• A randomly generated Extension device identifier and an authorization token used to connect the Extension to your Jobicy account.

This information remains in the browser until you remove it through the Extension settings, clear the Extension’s storage, or uninstall the Extension.

The Extension does not obtain or store your Jobicy password.

Job alerts and vacancy information

To retrieve matching jobs, the Extension sends selected search parameters, such as job category, geographic region, and keywords, to the Jobicy API. Jobicy uses this information to return relevant vacancies and operate notifications.

Saved jobs and notification preferences are stored locally in the browser.

As with other requests made to Jobicy, our servers may receive standard technical information, including an IP address, browser and user-agent information, request timestamps, and security or error information. Such data is handled in accordance with the other provisions of this Privacy Policy.

Connecting a Jobicy profile

Connecting a Jobicy candidate profile is optional. When you initiate profile synchronization while signed in to Jobicy, the Extension may receive profile information such as:

• Name and email address;
• Professional headline and profile summary;
• City, country, and remote-work preferences;
• Skills, languages, work experience, and education;
• Job preferences and professional profile links;
• Jobicy account plan and Copilot usage allowance.

A copy of this information is stored locally so that the Extension can fill supported application forms.

Jobicy issues an Extension authorization token that ordinarily expires after 30 days. Jobicy stores a protected hash of the token together with a random Extension device identifier, creation time, and expiration time. You can revoke the token by disconnecting your Jobicy profile in the Extension settings.

Disconnecting your profile removes the synchronized profile and authorization information from the Extension. Locally saved application details, EEO preferences, and resume files remain on the device until you remove them separately.

Application form access

When you use Copilot on a job application page, the Extension may inspect form controls and limited job context necessary to identify fields and determine whether they can be filled.

This may include:

• Field labels, field types, available selection options, and required-field indicators;
• Job title, company name, job description, and application page title;
• The application page URL with query parameters, login details, and URL fragments removed;
• Technical information needed to recognize an applicant tracking system or an embedded application form.

The Extension does not submit an application automatically. You are responsible for reviewing all inserted information and choosing whether to submit the form.

Locally filled application information

Common personal and application details saved in the Extension are inserted directly into supported form fields in your browser. These locally saved details are not transmitted to Jobicy or OpenAI as part of the AI autofill request.

Your locally saved resume or CV is not uploaded to Jobicy or sent to OpenAI by the Extension. It is inserted directly into a supported file-upload field when you initiate autofill.

Once information or a resume is inserted into an employer’s application page, it may be accessible to that employer, its applicant tracking system, and scripts operating on that page. Their processing of your information is governed by their own privacy notices and terms. Jobicy does not control how third-party employers or applicant tracking systems collect, use, or retain application data.

Voluntary EEO and demographic information

The Extension allows you to save optional answers to commonly encountered voluntary self-identification questions, including gender identity, race or ethnicity, sexual orientation, transgender status, disability status, and veteran or military status.

EEO autofill is disabled by default and must be enabled separately by the user.

These answers:

• Are stored locally in the browser;
• Are not synchronized with your Jobicy profile;
• Are not sent to Jobicy or OpenAI for AI generation;
• Are never inferred or guessed by the Extension;
• Are inserted only when the Extension can match an explicitly saved answer to a recognizable form option.

After an answer is inserted into an employer’s form, it becomes subject to the privacy practices of that employer and its applicant tracking system.

Optional AI-assisted answers

AI assistance for custom professional questions is disabled until you explicitly enable it in the Extension settings.

When AI assistance is enabled and you request autofill, Jobicy may process and send the following information to OpenAI:

• Relevant portions of your synchronized Jobicy candidate profile, such as your name, professional summary, skills, experience, education, languages, and career preferences;
• The job title, company name, and relevant job description;
• The application question, field type, and available answer options;
• A sanitized version of the supported ATS application page address.

The AI request does not include your locally saved resume file, phone number, home address, voluntary EEO answers, or other locally stored sensitive application details.

Jobicy instructs the AI not to invent qualifications, employers, experience, achievements, dates, personal circumstances, or other unsupported facts. Questions involving sensitive personal information, consent, signatures, salary decisions, work authorization, medical information, criminal history, or instructions prohibiting AI use are intended to be left for the user.

Jobicy sends OpenAI API requests with response storage disabled. OpenAI states that API data is not used to train its models by default. However, OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring unless stricter data controls apply. Additional information is available in the OpenAI API data controls documentation.

Jobicy temporarily caches generated answers for up to 10 minutes. This allows the same result to be reused without generating and charging for another AI request. The cache automatically expires.

Usage limits and service protection

Jobicy maintains temporary account-level counters to enforce minute and rolling daily AI usage limits, show remaining usage, prevent abuse, and maintain service availability.

These records may include the Jobicy account identifier, number and timing of AI requests, applicable account plan, limit reset time, and technical error information. Locally filled fields and eligible cached answers do not consume new AI requests.

Browser permissions

The Extension requests only the browser permissions needed to:

• Store settings and locally saved application information;
• Retrieve jobs and communicate with Jobicy;
• Display badge and desktop notifications;
• Check for matching jobs at the selected interval;
• Detect supported application forms, including compatible forms embedded in frames;
• Read and fill form fields when the user initiates autofill;
• Open Jobicy pages or job application pages at the user’s request.

The Extension does not collect general browsing history. Temporary access to the active page may be used when you explicitly ask Copilot to inspect or fill that page.

Your controls

You can use the Extension without connecting a Jobicy candidate profile, although profile-based and AI features will not be available.

At any time, you can:

• Disable AI-assisted custom questions;
• Disable voluntary EEO autofill;
• Disable the floating autofill button;
• Disable browser notifications;
• Disconnect your Jobicy profile and revoke the Extension token;
• Remove your locally stored resume;
• Clear locally saved application details and EEO answers;
• Clear saved jobs;
• Uninstall the Extension.

Deleting information from the Extension does not delete information that you have already submitted to an employer or applicant tracking system. Requests concerning information held by an employer or ATS provider must be directed to that third party.

For questions or requests concerning information held by Jobicy, please use the contact details provided in this Privacy Policy.

Questions & Concerns

We are committed to resolving any privacy concerns that you may have regarding your data.

If you have any questions about the privacy, security, or accuracy of your information, please submit a request through our official Contact Form. Please note, our team only considers questions directly related to the privacy or accuracy of your information. Any extraneous requests will be rejected.

Privacy and cookie settings