Privacy Policy

Product-specific data and device processing

The data Jobolar handles depends on the products and optional connections you choose.

• Job Search & Matching may process profile, target role, location, preference, opportunity, alert, and analytics data.
• Email Auto Apply may process the connected Gmail send token, selected application documents, public recipient address, application content, delivery metadata, schedule, and controls. The Gmail Send scope does not grant inbox-reading access.
• Smart Apply and the Chrome extension may read and process compatible external job-application form fields and page context in the active tab, browser-local Smart Form data, saved answers, selected résumé content, application answers, task status, and content you choose for AI generation or refinement. Sensitive fields, signatures, and unsupported flows may remain manual.
• Résumé and cover-letter tools may process uploaded or structured résumé content, Career Profile information, job descriptions, previews, generated documents, and usage records.
• Interview Assistant may process typed questions, microphone or system audio, transcripts, session context, selected résumé and role data, device tokens, and usage. Camera-based delivery coaching is processed on-device where the product states this.
• Live support is optional. Tawk.to is not loaded until you choose Live Chat. If you enable it, Tawk.to may process cookies or similar technologies, device information, and the content you submit to support. Do not send passwords, full payment credentials, or information unrelated to your support request.

JOBolar.Ai Smart Apply Chrome extension

• The extension processes supported job-page content and visible application-form fields in the user’s browser, using the user’s existing signed-in session. LinkedIn, Indeed, and other supported sites are not affiliated with or endorsing JOBolar.Ai.
• Smart Form data, the selected résumé, preferences, saved answers, schedules, and the purpose-scoped Jobolar extension credential are stored in browser-local extension storage, including IndexedDB. Users can replace or clear this local data through extension controls or Chrome’s extension-data controls.
• When the user requests a connected or AI feature, the selected job description, résumé, form/question context, requested answer or application content, and task metadata needed for that feature may be transmitted over HTTPS to Jobolar’s authenticated backend and necessary contracted AI or service providers.
• The extension does not request or collect job-site passwords, cookies, CAPTCHA responses, MFA codes, or payment-card information. Autofill and application automation are user-controlled and stop at the product’s sensitive, legal, security, uncertain, and unsupported boundaries.

JOBolar’s use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

1) Information We Collect

AI Interview Assistant Data

Web question-area screen capture

The Web Interview Assistant does not take screenshots until you explicitly select Capture question. Your browser locally decodes the chosen tab, window, or screen and JOBolar.Ai shows a live selector preview. Only the selected pixels are copied into a crop-sized local canvas and sent temporarily for text extraction; the extracted question then requests an answer automatically. Complete display frames are not encoded, uploaded, or stored. Normalized crop coordinates last for the current interview, or remain in this browser only when you select the optional reuse setting; cropped image previews are cleared after processing.

Interview Assistant Desktop privacy

The supported Windows and macOS Desktop app presents a versioned privacy disclosure before account connection, device access, or an interview session.

• On Windows, Live Interview captures the default speaker output; on macOS, it captures compatible display/system audio. This may include audio from other applications playing at the same time, so users should close or mute unrelated applications. Manual Listen uploads a segment when the user stops it or at the existing five-minute safety limit. Optional Smart Listen detects speech locally and uploads short detected-speech segments for private transcription; only a confirmed interview question requests an AI-generated answer.
• Mock Interview uploads microphone answers the user chooses to submit. The microphone device check uses temporary local audio. Optional Visual Delivery Coaching processes reduced-resolution camera frames on-device; images and video are not uploaded or stored, and only non-biometric summary coaching measurements are kept locally and separately from the main interview score.
• Résumé content, job descriptions, candidate profile information and interview context are transmitted only when the user chooses to use them. A question screenshot is uploaded only after the user selects or pastes it, processed temporarily to extract editable text, and not stored; the user confirms that text before requesting an AI answer. Temporary images and audio are deleted after processing under the service's privacy controls.
• The purpose-scoped Desktop credential is stored in Windows Credential Manager or macOS Keychain. Necessary settings, bounded session history and only the accepted disclosure version and timestamp are stored locally. The app does not receive Jobolar or Google passwords, payment information, SmartApply credentials or backend secrets.
• Screen-share privacy is best effort and depends on the operating system, meeting software and capture method; it is not guaranteed. Users must obtain any consent required by applicable law, the interviewer, employer and meeting platform.
• Privacy & Data remains available in the app to review this disclosure, withdraw consent and clear the Desktop credential, consent, settings, local history, interview context and temporary audio. An active interview must be confirmed ended before the app closes or completes that cleanup.

Chrome Web Store Interview Assistant disclosure

2) How We Use Your Information

• Send job applications via your Gmail with attachments you upload or generate (resume, cover letter, certificates).
• Provide job-matching, dashboards, notifications (daily summaries), and status tracking.
• Generate or refine resumes and cover letters using AI Chatty Buddy at your request.
• Protect the service through authentication, Firebase App Check, feature-specific usage limits, and infrastructure-level abuse protections.
• Improve the Services (quality, reliability, deliverability) using aggregated, de-identified metrics.
• Comply with legal obligations and enforce our Terms, including investigating misuse.

Jobolar requests consent where required, including for Google OAuth and optional device permissions. Other processing may be necessary to provide and secure the service or comply with legal obligations.

3) Google Permissions & OAuth Scopes

We use Google OAuth to connect your Gmail. Requested scopes are limited to what is necessary to perform email-based applications:

1. openid – verify your identity with Google
2. email – see your primary Google Account email address, used to identify your account and route notifications
3. profile – basic public profile (name, photo, preferred language) for personalization
4. gmail.send – send email on your behalf for job applications sent from your Gmail address

• We request the minimal scope required and do not request full read access to your inbox contents. The gmail.send scope does not permit reading inbox messages.
• You can revoke access anytime in Google Account → Security → Third‑party access. https://myaccount.google.com/permissions
• Google OAuth connection and Gmail sending occur only after you grant the requested permission. We maintain limited operational records for selected actions.

Gmail Token Handling

• We store an encrypted Gmail refresh token on our servers to enable sending emails on your behalf.
• The token is encrypted at rest using industry-standard encryption.
• Token usage is limited exclusively to sending user-triggered job-application emails.
• We do not store your Gmail password at any time.
• Disconnecting Gmail through Jobolar deletes the stored Gmail credential. Revoking access through Google Account settings prevents further authorized Gmail access.
• Gmail credentials are retained only while your Gmail connection is active and are deleted when you disconnect Gmail through Jobolar.

Limited Use & Google API Compliance

JOBolar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not use Gmail data for advertising purposes.
• We do not use Gmail data to train generalized AI models or for any purpose unrelated to providing the job-application service.
• We do not permit human access to your Gmail data without your affirmative consent.
• Gmail data is used solely to send job-application emails you initiate and approve.

4) Data Storage, Retention & Deletion

5) AI Processing (AI Chatty Buddy)

• Creates/updates resumes and generates job‑specific cover letters using your inputs.
• Stores outputs under your account to attach to applications and reuse later.
• Jobolar uses DeepSeek and Google's paid Gemini API for selected AI features. DeepSeek has confirmed Jobolar's training opt-out, and Google states that paid Gemini API prompts and responses are not used to improve its products.
• AI outputs may require your review for accuracy and compliance with job requirements.

6) Sharing & Disclosure

• Employers/Recipients: We share only the materials you instruct us to send (email body, resume, cover letter, certificates).
• Service Providers: Service providers may include Google/Firebase and Gemini, Vercel, Contabo, DeepSeek, Microsoft, and Tawk.to, depending on the feature you choose.
• Payment Processors: We share necessary transaction information with Stripe and Flutterwave to process payments securely. These providers handle payment authorization, settlement, and fraud prevention in accordance with their own privacy and security policies.
• Legal: Disclose where required by law or to protect rights, safety, and security.
• We do not sell or rent personal data. We avoid unnecessary third‑party sharing.

7) Security Measures

• We maintain limited operational and security logs for selected actions, including application attempts, usage enforcement, and service errors.
• Secrets management and tokenization for OAuth credentials; no storage of Gmail passwords.
• We use authentication, Firebase App Check, feature-specific usage limits, and infrastructure-level abuse protections to protect the service.
• Access to production systems and provider accounts is restricted to authorized personnel.

8) Your Rights

• Access, correction, deletion, and portability of your personal data.
• Withdraw consent (e.g., revoke Google OAuth) without affecting prior lawful processing.
• Object to or restrict processing (subject to applicable law).
• Lodge a complaint with a supervisory authority in your jurisdiction.

Contact support@jobolar.ai to request access, correction, deletion, restriction, or a portable copy of your personal data. After verifying your identity, Jobolar will respond within the period required by applicable law and may withhold information where disclosure would affect another person's rights, security, confidentiality, or a legal exemption applies.

9) Data Processing Agreements (DPAs) & International Transfers

• Where required by applicable law, Jobolar enters into or relies on applicable data-protection terms provided by service providers that process personal data on its behalf.
• Providers may process data outside your country. Where required by law, Jobolar relies on applicable contractual or other transfer safeguards made available by those providers.

10) Operational & Security Records

• We maintain limited records for selected actions, including application attempts, usage enforcement, service errors, and relevant consent or connection events.
• These records are used for security, service operation, troubleshooting, and legal compliance—not advertising—and are retained only as reasonably necessary.

11) Limitation of Liability

• We are not liable for losses due to user negligence (e.g., insecure devices, shared credentials).
• No liability for service interruptions or third‑party outages beyond our reasonable control.
• No warranty on AI output accuracy, completeness, or suitability; users should review before sending.
• To the extent permitted by law, our aggregate liability is limited to fees paid (if any) for the Services.

12) Governing Law, Regional Rights & Dispute Resolution

We honor regional privacy rights. Depending on your residence, you may have additional rights under GDPR (EU/UK), CCPA/CPRA (California), LGPD (Brazil), or other local laws.

• Governing law: determined by the operating jurisdiction of JOBolar.Ai unless local law requires otherwise.
• Disputes: where permissible, resolved via mediation or binding arbitration before court proceedings.
• Venue & jurisdiction: exclusive venue consistent with applicable law; users consent to such jurisdiction.

Contact support@jobolar.ai with rights requests or dispute inquiries.

13) Contact

Questions about this Privacy Policy or your data? Contact us at:

• Email: support@jobolar.ai
• Physical Address:
  330 2nd Ave S 200 1319
  Minneapolis, MN 55401
  USA