Privacy Policy
Last updated: March 29, 2026
1. Introduction
DollarJobHunt ("we", "us", "our") respects your privacy and is committed to protecting the personal data of our users across all regions we serve: the United States, Canada, the United Kingdom, Australia, and New Zealand.
This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights regarding your personal information. It applies to all users of our website and services at dollarjobhunt.vercel.app ("Service").
2. Data Controller
DollarJobHunt is the data controller responsible for your personal data. For any privacy-related inquiries, contact us at:
3. Data We Collect
3.1 Information You Provide
| Data Type | Details | Purpose |
|---|---|---|
| Account information | Full name, email address, password (hashed) | Account creation, authentication, communication |
| Resume data | Uploaded resume file (PDF/DOCX) and AI-extracted structured data (skills, experience, education) | AI-powered job matching and scoring |
| Search preferences | Job titles, locations, salary preferences, keywords | Executing job searches on your behalf |
| Payment information | Processed by Stripe — we do not store credit card numbers, only Stripe customer/session IDs | Processing credit purchases |
3.2 Information Collected Automatically
| Data Type | Details | Purpose |
|---|---|---|
| Usage data | Pages visited, searches performed, features used | Service improvement and analytics |
| Device information | Browser type, operating system, screen resolution | Ensuring compatibility and debugging |
| Log data | IP address, access times, referring URLs | Security monitoring and abuse prevention |
| Cookies | Authentication session cookies (essential, no tracking cookies) | Maintaining your logged-in session |
4. Legal Basis for Processing
We process your personal data on the following legal bases, depending on your jurisdiction:
- Contractual necessity: Processing required to provide the Service you have signed up for (account management, search execution, credit transactions).
- Consent: Where you have explicitly consented, such as accepting our Terms of Service during sign-up.
- Legitimate interests: Service improvement, security monitoring, and fraud prevention, where these interests do not override your fundamental rights.
- Legal obligation: Where processing is required to comply with applicable laws (e.g., tax records for transactions).
5. How We Use Your Data
We use your personal data to:
- Create and manage your account
- Parse your resume using AI (Claude by Anthropic) to extract structured data for job matching
- Execute job searches and return scored, filtered results
- Screen job listings for potential scams using AI classification
- Process credit purchases via Stripe
- Send transactional emails (welcome, purchase confirmation, low credit alerts) via Resend
- Monitor and improve Service performance and security
- Comply with legal obligations
6. AI Processing
We use AI services (Claude by Anthropic) to process your data in the following ways:
- Resume parsing: Your uploaded resume is sent to the Anthropic API to extract structured information (job titles, skills, experience, education). The extracted data is stored in our database to power job matching.
- Scam screening: Job listing details are sent to the Anthropic API to classify postings as safe, warning, or blocked.
- Job-resume scoring: Your extracted resume data and job listing details are sent to the Anthropic API to generate a compatibility score.
Anthropic processes data in accordance with their privacy policy and data processing agreement. Data sent to Anthropic is used solely for generating responses and is not used to train their models. We do not sell your data to any AI provider.
7. Third-Party Service Providers
We share your data with the following third-party processors, only to the extent necessary to provide the Service:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Authentication, database, file storage | Account data, resume files, search data | United States |
| Stripe | Payment processing | Email, payment details | United States |
| Anthropic (Claude) | AI resume parsing, scam detection, job scoring | Resume text, job listing details | United States |
| Resend | Transactional email | Email address, name | United States |
| Vercel | Hosting and CDN | IP address, request logs | Global (edge network) |
| RapidAPI (JSearch) | Job listing aggregation | Search queries (no personal data) | United States |
We do not sell, rent, or trade your personal data to any third party for their marketing purposes.
8. International Data Transfers
Our Service infrastructure is primarily hosted in the United States. If you are located outside the United States (including the UK, Canada, Australia, or New Zealand), your personal data will be transferred to and processed in the United States.
We ensure adequate protection for international transfers by:
- UK users: Relying on Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or the UK International Data Transfer Agreement (IDTA), as applicable.
- Canadian users: Ensuring third-party processors provide a comparable level of protection as required under PIPEDA.
- Australian users: Taking reasonable steps to ensure overseas recipients handle your data in accordance with the Australian Privacy Principles (APPs).
- New Zealand users: Ensuring data is transferred only to countries or organizations that provide comparable safeguards under the Privacy Act 2020.
9. Data Retention
- Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion request.
- Resume files and parsed data: Deleted within 30 days of account deletion or upon your request.
- Search history and results: Retained for as long as your account is active to allow you to revisit past searches.
- Payment records: Retained for 7 years as required for tax and legal compliance.
- Server logs: Automatically purged after 90 days.
10. Your Privacy Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
All Users
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Data portability: Request your data in a structured, machine-readable format.
United Kingdom (UK GDPR)
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you additionally have the right to:
- Object to processing based on legitimate interests
- Restrict processing in certain circumstances
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
- Not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you
United States (CCPA/CPRA — California Residents)
If you are a California resident, the California Consumer Privacy Act (as amended by CPRA) grants you the right to:
- Know what personal information we collect, use, disclose, and sell
- Delete your personal information
- Opt out of the sale or sharing of personal information — we do not sell or share your personal information as defined by CCPA/CPRA
- Non-discrimination for exercising your privacy rights
- Correct inaccurate personal information
- Limit use and disclosure of sensitive personal information — we use sensitive personal information (resume data) only to provide the Service
To exercise these rights, contact us at support@dollarjobhunt.com. We will respond within 45 days as required by law.
Canada (PIPEDA)
Under the Personal Information Protection and Electronic Documents Act, you have the right to:
- Access your personal information held by us
- Challenge the accuracy and completeness of your data and have it amended
- Withdraw consent for data processing (which may limit your ability to use the Service)
- File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca
Australia (Privacy Act 1988)
Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:
- Access your personal information
- Request correction of inaccurate, out-of-date, incomplete, or misleading data
- Complain about a breach of the APPs — we will respond within 30 days
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
New Zealand (Privacy Act 2020)
Under the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs), you have the right to:
- Access your personal information
- Request correction of your personal information
- Request deletion when there is no lawful reason for retention
- Be notified of privacy breaches that pose a risk of harm
- Lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz
11. Exercising Your Rights
To exercise any of the rights described above, email us at support@dollarjobhunt.com with the subject line "Privacy Rights Request". We will:
- Verify your identity before processing the request
- Respond within the timeframe required by your applicable law (generally 30–45 days)
- Fulfill the request free of charge (unless the request is manifestly unfounded or excessive)
12. Cookies
We use only essential cookies required for the Service to function:
- Authentication cookies: Maintained by Supabase Auth to keep you logged in. These are strictly necessary and do not require consent under cookie laws.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking or behavioral advertising.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption in transit (TLS/HTTPS) for all connections
- Encryption at rest for database storage (provided by Supabase)
- Row-Level Security (RLS) policies ensuring users can only access their own data
- Hashed passwords (never stored in plain text)
- Service-role access controls separating admin and user-level database operations
- Payment data handled entirely by PCI-DSS compliant Stripe — we never see or store card numbers
While we take reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
14. Children's Privacy
The Service is not directed at children under 16 (or under 13 in the United States as per COPPA). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly. If you believe a child has provided us with personal data, contact us at support@dollarjobhunt.com.
15. Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:
- UK: Notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.
- Australia: Notify the OAIC and affected individuals as soon as practicable, as required by the Notifiable Data Breaches (NDB) scheme.
- New Zealand: Notify the Privacy Commissioner and affected individuals as soon as practicable, as required by the Privacy Act 2020.
- Canada: Notify the OPC and affected individuals as soon as feasible, as required by PIPEDA's breach reporting requirements.
- United States: Comply with applicable state data breach notification laws.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
17. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
You also have the right to lodge a complaint with your local data protection authority (see Section 10 for details).
For our Terms of Service, please visit our Terms of Service page.