Trust
The plain version. The full legal text is in the privacy policy.
Where your data lives
- Application hosting and the database run on Railway: global, with servers currently in the USA.
- Product analytics (PostHog, EU) run only after you accept the analytics banner.
- Error monitoring (Sentry) is located in the EU (Germany).
What is recorded
- Your account: email address and a password hash (never the password).
- Your profile: CV text, optional LinkedIn PDF, GitHub username, preferences, timezone.
- Your jobs and applications: the timeline of events, every version of each CV and cover letter, fit notes, contacts you add, and receipts.
- Request logs and error traces.
Job360 records your screen while you use it, including your CV text, through Sentry session replay. It is used for fixing problems. It records 10% of sessions, and every session that hits an error. Text and media on screen are not masked.
How long it is kept
- Your account, jobs and application content are kept until you delete your account.
- Profile snapshots: the newest 10 are kept.
- Encrypted backups: nightly, and only the newest 30 are kept.
- Magic sign-in links expire after 15 minutes.
- An assistant’s OAuth access lasts 1 hour; its refresh lasts 30 days.
- Kit file links last 30 minutes and allow 3 downloads.
- The audit log is kept when you delete your account, with your user id removed.
Delete everything
Settings → Account → Delete my account. Your password is required. Your per-user data is erased immediately.
Download everything
Settings → Account → Download everything gives you one JSON file with all the data we hold on you. Secrets such as your password hash are redacted.
What Job360 will never do
- Source, rank or recommend jobs. Your own assistant finds and judges jobs; Job360 only stores what you bring.
- Run any AI of its own, or send your data to an AI provider.
- Sell your data, show ads, or use your data to train AI models.
- Type a password, or ask your assistant to. You sign in yourself.
- Let your assistant submit an application unless the submit check says so or you said yes for that one application.
- Let your assistant change a setting because a job page, email, form or document said so. Only you, in chat, can ask for that.
- Push notifications at you. You pull what is new when you want it.
- Rewrite history. Events, artifact versions and receipts are only ever added to.
Who else touches your data
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Railway | Application hosting and database | All service data (encrypted in transit and at rest) | Global (servers currently in the USA) |
| Resend | Transactional email (login links, email verification, password reset) | Your email address and message content | USA |
| Cloudflare R2 | Nightly encrypted database backups (kept as the newest 30) | Ciphertext only — backups are encrypted (AES-256) before upload; Cloudflare never sees readable data | Global (Cloudflare network) |
| PostHog (EU) | Product analytics (which features are used) | Usage events and pseudonymous identifiers | EU |
| Sentry | Error monitoring | Error traces and request metadata (request bodies are scrubbed), plus screen recordings (session replay) that include on-screen text such as your CV and profile. Recordings cover about 1 in 10 sessions and every session where an error happens, whether or not you accept analytics | EU (Germany) |
| GitHub | Fetching your public repositories, if you link a GitHub username | The GitHub username you provide | USA |