Privacy Policy
Last updated: April 9, 2026
This Privacy Policy explains how JobSpring ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website, applications, Chrome extension, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, password, and phone number when you register
- Profile data: Resume, work history, education, skills, portfolio links, salary expectations, and job preferences
- Job posting data: Job descriptions, requirements, compensation details, and company information (for recruiters and employers)
- Application data: Cover letters, application responses, status notes, and application history
- Communication data: Messages sent through the platform and interview scheduling details
- Saved answers: Pre-filled application responses you store for use with the auto-fill feature
- Payment information: Billing details processed by our third-party payment provider (we do not store full payment card numbers)
- Support requests: Information you provide when contacting us, including content removal requests
1.2 Information Collected Automatically
- Device and browser data: IP address, browser type, operating system, device identifiers, and screen resolution
- Usage data: Pages visited, features used, search queries performed on our platform, time spent on pages, and referral sources
- Cookies and similar technologies: Session identifiers, preference tokens, and analytics trackers (see Section 9)
1.3 Information from the Chrome Extension
If you install the JobSpring Chrome extension ("Job Companion"), the extension collects:
- Job listing data: Job title, company name, location, salary (if displayed), job description excerpts, and the posting URL from recognized job board pages you visit
- Page context: The URL and domain of pages where job listings are detected, limited to known job board patterns (e.g., LinkedIn Jobs, Indeed, Greenhouse, Lever, Workday, company career pages)
The extension does not collect:
- Your general browsing history or activity on non-job-board websites
- Passwords, form inputs (other than auto-fill fields you initiate), or financial information
- Cookies, local storage, or session data from other websites
- Personal messages, emails, or social media content
1.4 Information from Third-Party Sources
- Publicly available job listings: We aggregate job listings from publicly accessible employer career pages, job boards, and applicant tracking systems. This data includes job titles, descriptions, company names, locations, and application URLs
- OAuth providers: If you sign in using Google or another third-party provider, we receive your name, email address, and profile picture as authorized by your OAuth consent
2. How We Use Your Information
We use your information for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide and maintain the Service (job search, matching, applications) | Performance of contract |
| Connect job seekers with relevant opportunities | Performance of contract |
| Enable recruiters to discover and evaluate candidates | Performance of contract |
| Process and manage your applications | Performance of contract |
| Auto-fill application forms using your saved answers | Consent |
| Send notifications about applications, messages, and job matches | Legitimate interest / Consent |
| Aggregate and display job listings from public sources | Legitimate interest |
| Operate the peer-to-peer job sharing system | Consent |
| Analyze platform usage to improve features and performance | Legitimate interest |
| Prevent fraud, abuse, and maintain platform security | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Send marketing communications (only with opt-in consent) | Consent |
3. Profile Visibility
Job seekers can control their profile visibility through account settings:
- Public: Your professional profile (name, headline, skills, experience) is visible to all recruiters on the platform
- Recruiters only: Visible only to verified recruiters who have active job postings
- Private: Only visible when you actively apply to a job or respond to a recruiter message
Regardless of your visibility setting, your direct contact information (personal email, phone number) is never displayed to recruiters until you choose to apply to a job or respond to their message. All initial communication occurs through our platform messaging system.
4. Data Sharing and Disclosure
We do not sell your personal data. We share information only in these limited circumstances:
- With recruiters and employers: When you apply to a job, your application materials and the profile information you have chosen to make visible are shared with the posting organization
- Peer-to-peer sharing: When P2P sharing is enabled in the Chrome extension, job listing metadata (title, company, location, URL) you encounter is shared with the JobSpring community. Your identity is never attached to contributed listings
- Service providers: We use third-party services for infrastructure, email delivery, search indexing, analytics, and payment processing. These providers process data on our behalf under contractual obligations to protect your data
- Legal requirements: When required by law, court order, government request, or to protect the rights, safety, or property of JobSpring, our users, or the public
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy
4.1 Third-Party Service Categories
- Cloud infrastructure and database: Hosting, storage, and database services for platform operation
- Search and indexing: Full-text search engine for job and professional discovery
- Email delivery: Transactional and notification email services
- Analytics: Google Analytics for understanding platform usage patterns. Data is anonymized where possible
- Advertising: Google AdSense (display ads on our platform) and Google Ads (conversion tracking from our advertising campaigns). When you consent to advertising cookies, Google may collect data about your browsing activity to serve personalized ads. See Google's Privacy Policy
- Payment processing: Secure payment handling for premium features (we never store full card numbers)
- Content delivery: CDN and asset delivery for performance
5. Chrome Extension (Job Companion)
5.1 When It Activates
The extension only processes data on pages that match known job board URL patterns (e.g., LinkedIn Jobs, Indeed, Greenhouse, Lever, Workday, iCIMS, SmartRecruiters, company career pages). It does not run on, monitor, or collect data from other websites.
5.2 Auto-Fill Feature
If you use the saved answers feature, your responses are stored in your browser's local storage and synced to your JobSpring account. Saved answers are used exclusively to fill application form fields on your behalf when you trigger auto-fill. They are:
- Never shared with other users through the P2P system
- Never visible to recruiters unless included in an application you submit
- Deletable at any time through the extension settings or your account
5.3 P2P Sharing Default
Peer-to-peer job sharing is enabled by default when you install the extension. This is disclosed during the extension onboarding flow. You can disable P2P sharing at any time in the extension settings without affecting other extension features (auto-fill, job saving, application tracking).
5.4 Updates and Changes
The extension may receive automatic updates through the Chrome Web Store. We will not introduce new categories of data collection without updating this policy and, where required, obtaining your consent.
5.5 Uninstalling
You can remove the extension at any time through your browser settings. Uninstalling does not delete your JobSpring account or data already synced to our servers. To delete synced data, use your account settings or submit a removal request.
6. Peer-to-Peer Job Sharing
- What is shared: Job listing metadata — title, company name, location, posting URL, and salary if displayed. This helps other users discover opportunities they might not have found independently
- What is NOT shared: Your name, email, profile, application history, resume, saved answers, browsing history, and any personal information. Other users cannot see who contributed a specific listing
- Opt-out: Disable P2P sharing at any time in the extension settings. You retain full use of auto-fill, job saving, and application tracking features
- Data retention: Job listings shared through the P2P system are retained while they appear to be active. Stale or expired listings are removed through automated checks, typically within 30 days, though no specific timeline is guaranteed
7. Data Retention
- Active accounts: We retain your data for as long as your account is active and as needed to provide the Service
- Deleted accounts: When you delete your account, we remove your personal data within 30 days. We may retain anonymized, aggregated data (which cannot be linked to any individual) for analytics purposes
- Legal holds: We may retain data longer if required by law, to resolve disputes, or to enforce our agreements
- Job listings: Aggregated job listing data (sourced from public pages) is retained independently of user accounts and may persist after a user's account is deleted
- Backups: Deleted data may persist in encrypted backups for up to 90 days before being purged
8. Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS/HTTPS) and at rest
- Secure authentication with password hashing and optional multi-factor authentication
- Row-level security policies on our database to isolate user data
- Rate limiting and CSRF protection on all endpoints
- Regular security reviews and dependency updates
No system is completely secure. We cannot guarantee absolute security, and you are responsible for maintaining the confidentiality of your account credentials.
9. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Essential cookies: Required for authentication, session management, and security. These cannot be disabled
- Preference cookies: Remember your settings, language, and display preferences
- Analytics cookies: Help us understand how users interact with the platform so we can improve features and performance (Google Analytics). These are anonymized where possible
- Advertising cookies: Used by Google AdSense and Google Ads for ad delivery, personalization, conversion tracking, and campaign measurement. These cookies are set by Google and are governed by Google's Privacy Policy. Advertising cookies are disabled by default and require your explicit consent.
When advertising cookies are enabled, Google may use data about your visits to JobSpring and other websites to serve personalized ads. When disabled, only non-personalized ads are displayed. You can manage Google ad personalization at Google Ad Settings.
You can manage all cookie preferences through our Cookie Policy page or the consent banner shown when you first visit. Disabling essential cookies may prevent you from using certain features of the Service.
10. International Data Transfers
JobSpring operates globally and your data may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we rely on:
- Standard contractual clauses approved by relevant data protection authorities
- Service providers certified under applicable data transfer frameworks
- Your explicit consent where required
We take steps to ensure that your data receives an adequate level of protection regardless of where it is processed.
11. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete personal data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we restrict processing of your data in certain circumstances
- Objection: Object to processing based on legitimate interests, including profiling
- Withdraw consent: Where processing is based on consent, withdraw your consent at any time without affecting prior lawful processing
- Non-discrimination: Exercise your privacy rights without receiving discriminatory treatment
To exercise any of these rights, contact us at legal@jobspring.pro or submit a request through our Content Removal page. We will respond within 30 days.
11.1 GDPR (European Economic Area)
If you are located in the EEA, you have the rights listed above under the General Data Protection Regulation. You also have the right to lodge a complaint with your local data protection supervisory authority.
11.2 CCPA / CPRA (California)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale or sharing.
When advertising cookies are enabled, data may be shared with Google for personalized advertising purposes, which may constitute a "sale" or "sharing" under the CCPA/CPRA. Advertising cookies are disabled by default. If you have opted in and wish to opt out, disable "Advertising Cookies" on our Cookie Policy page or contact legal@jobspring.pro. We do not sell personal information for monetary consideration. You may designate an authorized agent to submit requests on your behalf.
12. Children's Privacy
JobSpring is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at legal@jobspring.pro.
13. Content Removal and Takedown Requests
If you believe content on JobSpring infringes your intellectual property rights, contains your personal data without authorization, or is inaccurate, you may submit a removal request through our Content Removal page. We comply with the Digital Millennium Copyright Act (DMCA) and applicable data protection regulations. See our Terms of Service for details on our DMCA process.
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered users by email for significant changes
- Display a notice on the platform where appropriate
Your continued use of the Service after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
15. Contact Us
For privacy-related questions, data requests, or concerns:
- Email: legal@jobspring.pro
- Content removal: Submit a removal request
- General support: support@jobspring.pro
We aim to respond to all privacy-related inquiries within 30 days.