Privacy
Short version: we keep the minimum needed to rank jobs for you, for 24 hours as a guest, and you can delete it all with one click.
Last updated
The file is never stored. We keep the extracted text only, for the deep check.
Guest data lasts 24 hours. Profile, saved jobs and tracker are then deleted.
The AI step is optional. It sends text to a free AI provider; switch it off when you upload.
One click deletes everything. Delete my data works any time.
What we store
- Your resume file: never. The upload is read in memory and discarded. It never touches our disk.
- The text extracted from it, so the deep check can quote your resume lines. Not kept if you turn the AI step off.
- The parsed profile and your preferences: titles, years, level, skills, places, salary floor, dealbreakers.
- Saved jobs and tracker stages, with any notes you write.
- Fit reports you make, with the job description or link you pasted into Check a JD.
- A guest session cookie (
jl_sid): a random token, stored on our side only as a one-way hash. - A notes cookie (
jl_notes): which tips and sign-in suggestions you have already seen or dismissed, so they don't repeat. It names nobody. - If you sign in: the email and name your sign-in provider shares, which providers you use, and when you last visited. With Gmail job alerts connected, a read-only Gmail token.
Where your data is stored
JobLens and everything it stores run on a server we run on Amazon Web Services (AWS) in Mumbai, India. Pages reach you through Vercel and Amazon CloudFront, which pass requests through and keep no copy of your profile.
Daily disk snapshots of that server stay in the same AWS region for 7 days, so something you delete can stay in a snapshot for up to 7 days before it is gone for good.
For signed-in accounts we are adding an encrypted backup copy in Supabase (Ireland), so an account survives a server failure. It is not switched on yet: today everything stays on that one server. Once it is switched on, Supabase will act as our processor: it will hold that copy for us and may not use it for anything else. Guest data will never be copied there.
What is encrypted
- Encrypted: your Gmail token, always. Once the Supabase backup copy is switched on, it will also hold encrypted: your resume text, profile and preferences, your notes, the jobs you saved or brought in, and your fit reports with any job descriptions you pasted.
- Not encrypted in that backup copy, once it runs: your email, name, sign-in providers, stages and dates, so the copy can be matched to your account when you sign in.
- On the server itself the database is not encrypted field by field; it is reachable only by JobLens, never published.
How long
Guest sessions end 24 hours after your first upload. When they end, the profile, resume text, saved jobs, tracker, fit reports and any cached AI results made from your resume are deleted by the retention purge. A new upload replaces your previous profile straight away.
If you sign in, your data is kept until you delete it: from your account or Delete my data. Signing out keeps it for your next sign-in. A sign-in lasts 30 days and renews while you use JobLens.
The AI step
With the AI step on, your resume text is sent to a free AI provider (Google's Gemini API free tier first, with free models on OpenRouter as a fallback) to refine the parsed profile and to run the deep check. Free tiers may use submitted data to improve their services, so turn the AI step off if that matters to you. With it off, nothing leaves JobLens: you get the rules-based profile and the first-pass scores.
What we never do
- Sell or share your data, or use it for advertising.
- Use third-party analytics, ad pixels or trackers.
- Ask for your password on any job platform.
- Apply to jobs on your behalf.
Delete everything now
Delete my data removes your profile, resume text, saved jobs, tracker, the jobs you brought in (from job alerts, the extension or pasted links, including private copies only you could see), paired browsers, fit reports, cached AI results and your session or account, and shows you what was deleted. Once the Supabase backup is switched on, deleting will also delete the backup copy there.
Job listings
Jobs come from public company career pages and job-board APIs. Each job links back to its original posting, and closed postings are marked as closed.