Privacy Policy

Last updated July 23, 2026 · 14 sections · ~8 min read

1.Information We Collect

We collect information you provide directly and information generated by your use of the service. Most of it is optional — the more you give us, the more the scoring and analysis can do, but the choice is yours.

Account Information: Name and email address provided during registration, plus your time zone so scheduled emails arrive at a sensible hour.
Resume Content: Resume files you upload to the Resume Library and the text extracted from them.
Profile Data: Headline, location, phone number, professional summary, skills, work history, education, and an optional photo — most of it synthesized by AI from your resumes, all of it editable by you. If you use the student on-ramp, this also includes your school and field of study.
Job Search Activity: Search terms, job results returned, jobs you save or apply to, application status, notes, and follow-up dates.
Compensation and Offer Data: Anything you enter into Real Pay Analysis, Offer Comparison, or Negotiation Prep — salary history, base pay, equity, retirement and health benefits, time off, and perks. You choose what to enter; none of it is required to use the service.
Career Content You Write: Story Bank entries, negotiation preparation responses, interview plans, and career trajectory maps.
LinkedIn Connections: If you use Network Radar, the connections file you upload. This is information about other people, so it gets its own section below.
Support Conversations: Messages you send to the in-app support assistant, and any feedback you leave on its answers.
Outcome Feedback: When you optionally respond to a prompt asking whether you heard back after applying, we store the outcome (e.g. “No response”, “Interview”, “Offer”).
Referral Information: Your referral code, and the code of whoever referred you, so credits land in the right account.
Technical Information: Your IP address and basic browser information, used to rate-limit abusive traffic and block bots. IP addresses are hashed before being stored as counters — we do not keep a log of the addresses that visit us.
Payment Information: Payment transactions are processed by Stripe. We never see or store your card details.

2.How We Use Your Information

We use your information to provide and improve Job Marshal:

To match your resume against live job postings and produce AI fit scores and gap analysis.
To synthesize a unified professional profile from your uploaded resumes.
To power the features you choose to use — offer comparison, negotiation prep, interview planning, Story Bank, and career trajectory mapping.
To process payments and manage your credit balance.
To send you the account, security, and service messages described in Your Rights.
To keep the platform reliable and to block abuse, spam, and bot traffic.

Aggregate Insights

Two features combine data across users. Both operate on counts, never on identities:

Score calibration. Your outcome feedback is pooled with everyone else's to measure how well match scores predict real results for similar roles and seniority levels. The pooled statistics are not linked to your identity.

Community insights. We aggregate the locations attached to saved jobs into regional counts, so job seekers can see where hiring activity is concentrated. Only totals are stored, a minimum number of distinct users is required before any location appears at all, and nothing traces back to an individual account.

3.Resume Data

Your resume files are stored securely in Firebase Storage. Resume text is extracted and stored in Firestore solely for job matching and profile synthesis. You may delete any resume at any time from the Resume Library page, and deleting your account removes all associated resume data.

4.AI Processing

Scoring, profile synthesis, and several other features work by sending your content to third-party AI providers: Google (Gemini models and embeddings) and Anthropic (Claude). Messages you send to the in-app support assistant are processed by Anthropic.

We want to be precise about what this means, because it is easy to overstate. Your resume text is sent exactly as written. We do not redact or anonymize it, because the analysis depends on reading the complete document. Resumes normally contain your name, contact details, employers, and schools — so this content identifies you, and we are not going to claim otherwise.

What we do not send alongside it: your account password, your payment information, or your search history. This processing is governed by Google's and Anthropic's API terms.

AI-generated scores, gap analysis, and recommendations are informational. They are not employment, legal, or financial advice, and they are not a guarantee of any hiring outcome.

5.Your LinkedIn Connections

Network Radar is optional. If you turn it on, you upload the Connections.csv file that LinkedIn exports, and we show you which of your contacts list an employer you are currently looking at.

What we store from that file

First name, last name, current company, and LinkedIn profile URL — nothing else. We deliberately discard the job-title column, and we do not import email addresses, phone numbers, or connection dates.

These people are not Job Marshal users and have not agreed to anything, so we hold their information to a stricter standard than our own. We never contact them, never build profiles on them, never use their information to market anything, and never sell or share it. It is visible only to you, used only to answer “who do I know at this company?”, and it is never sent to our AI providers.

You can delete every connection you have uploaded at any time from Account Settings, and doing so removes them completely. Deleting your account removes them as well.

If you are one of these contacts and you would like your information removed from our systems, email us at contact@jobmarshal.com and we will remove it. You do not need a Job Marshal account to make that request.

7.Data Security

We use industry-standard security measures including Firebase Authentication, encrypted data transmission (HTTPS), HTTP-only session cookies, server-side session management, email verification on new accounts, and bot protection on public forms. No security system is perfect — we encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.

8.Cookies and Tracking

We do not use advertising cookies, and we do not run ad pixels, retargeting tags, or cross-site tracking of any kind. What we do set:

Session cookie: An HTTP-only cookie that keeps you logged in. Required for the service to work.
Navigation marker: A short-lived cookie recording how you arrived at your dashboard, cleared immediately after it is read.
Browser storage: If you arrive through a referral link we store that code in your browser for 30 days, and we remember your tracker sort and view preferences. Both stay on your device.

Microsoft Clarity

We use Microsoft Clarity on our public marketing pages to understand how people navigate the site — which sections get read, where layouts break, where visitors get stuck. Clarity is a session-replay tool: it records page content along with clicks and scrolling, and it sets its own cookies to recognize a returning browser.

Because of that, we deliberately do not load Clarity anywhere behind sign-in. It does not run on your dashboard, resume library, profile, searches, tracker, offers, or negotiation prep, so your resumes, salary figures, and offer details are never captured in a recording. It also does not run on the sign-in and sign-up pages. We do not use Clarity for advertising.

If your browser sends a Global Privacy Control (GPC) signal, we do not load Clarity at all, and none of its cookies are set. See California Privacy Rights below.

9.Data Retention and Deletion

Your account data is retained as long as your account is active. You may delete your account at any time from Account Settings. Here is exactly what happens when you do:

Immediately: Your account is disabled and you are signed out. You can no longer sign in, and your data is inaccessible through the app.
For 30 days: Your data is retained but dormant, so you can change your mind and reactivate. This grace period exists because account deletion is easy to do by accident and impossible to undo.
After 30 days: An automated job permanently deletes your resume files, profile, searches, applications, offers, connections, and authentication record. This is irreversible and we cannot recover anything afterward.

If you want your data gone sooner than 30 days, email us and we will purge it manually. Separately, aggregate statistics that never contained your identity — such as pooled score-calibration figures — are not tied to your account and therefore survive its deletion. Abuse-prevention counters are keyed to a one-way hash and hold nothing but a timestamp and a count — there is no readable IP address in them to delete.

10.Minimum Age

Job Marshal is intended for job seekers aged 16 and older. You must be at least 16 to create an account.

The service is not directed to children under 16, and we do not knowingly collect personal information from them. If we learn that we have collected information from someone under 16, we will delete the account and its data promptly. If you are a parent or guardian and believe your child has created an account, contact us at contact@jobmarshal.com and we will remove it.

11.Your Rights

You have the right to access, correct, export, or delete your personal data at any time. Most of it you can do yourself, without asking us:

Export everything — Account Settings builds a downloadable archive of your profile, searches, applications, purchases, offers, comparisons, negotiation prep, Story Bank, and interview plans.
Correct inaccurate information directly within the app on the Profile page.
Delete individual resumes from the Resume Library, or your uploaded connections from Account Settings.
Delete your account and all associated data from Account Settings.
Withdraw consent for AI processing by deleting your resumes.
Control which emails you receive from Account Settings, or unsubscribe using the link in any reminder email.

12.California Privacy Rights

This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Residents of other states with comparable privacy laws have substantially the same rights and may use the same contact method below.

We do not sell or share your personal information

We have not sold personal information, and we have not shared it for cross-context behavioral advertising, in the preceding twelve months — including the personal information of consumers under 16 years of age. We do not run advertising pixels or retargeting tags. Because we do not sell or share, we are not required to display a “Your Privacy Choices” opt-out link, and we do not display one.

Subject to the exceptions in the statute, you have the following rights:

Right to Know: Request the categories and specific pieces of personal information we have collected about you, the sources, and the purposes for collecting it.
Right to Delete: Request deletion of the personal information we hold about you. You can do this yourself at any time from Account Settings.
Right to Correct: Request correction of inaccurate personal information. Most fields are directly editable on your Profile page.
Right to Portability: Receive a copy of your personal information in a portable, machine-readable format. Account Settings will build one for you on demand.
Right to Opt Out of Sale or Sharing: We do not sell or share personal information, so there is nothing to opt out of. If that ever changes, we will post a “Your Privacy Choices” link and honor opt-outs before any such activity begins.
Right to Limit Sensitive Information: We do not use or disclose sensitive personal information for any purpose beyond providing the service you requested.
Right to Non-Discrimination: We will never deny service, charge a different price, or provide a different level of quality because you exercised any of these rights.

Global Privacy Control

We honor the Global Privacy Control (GPC) browser signal. When your browser sends it, we do not load Microsoft Clarity — our only third-party analytics tool, and one we already limit to public marketing pages — and none of its cookies are set. Because the signal is read from your browser on each visit, you may need to re-enable it on every browser and device you use, and it may not persist if you clear your browser data.

How to Exercise Your Rights

Email contact@jobmarshal.com with the request you would like to make. We will verify your identity by confirming control of the email address associated with your account before acting on a request to know, correct, or delete. You may also use an authorized agent, in which case we may ask for proof of the agent's authority and separate verification of your own identity. We respond within 45 days and may extend once by another 45 days where permitted, with notice to you.

Shine the Light

Under California Civil Code § 1798.83, California residents may request information about disclosures of personal information to third parties for those parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

13.Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

14.Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

contact@jobmarshal.com— we typically respond within 24–48 hours.