1. Who We Are

YouGotJobs.com is operated by Nexus Digital Marketing Services LLC, 136 S. Main St. STE 400, Salt Lake City, UT 84101. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account Data: Email address, password (hashed, never stored in plain text), and optional display name.

Profile Data: Job titles, skills, experience level, salary preferences, location preferences, remote work preference, target employers, and career summary.

Resume Content: Resume text you paste or upload for AI tailoring.

Application Data: Jobs you save, application status, interview notes, and contact information you enter.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, search queries, and interaction timestamps.

Device Data: Browser type, operating system, IP address, and device identifiers.

Cookies: We use essential cookies for authentication (session management) and optional analytics cookies (Google Analytics) with your consent. See Section 8 for details.

3. How We Use Your Information

We use your information to:

(a) Provide and maintain the Service, including AI match scoring, resume tailoring, and job recommendations.

(b) Process your account registration and authentication.

(d) Send transactional emails (account verification, password reset, billing receipts).

(e) Send job alerts and digest emails you have opted into.

(f) Improve the Service through aggregated, anonymized usage analytics.

(g) Respond to support requests.

We do not sell your personal information to third parties. We do not use your resume content for any purpose other than providing the Service to you.

4. Third-Party Services

We share limited data with the following categories of service providers, solely to operate the Service:

AI Processing (OpenRouter/Anthropic): Job descriptions and anonymized profile data are sent to AI models for scoring and content generation. Your name and email are not sent to AI providers.

Payment Processing (Stripe): Stripe receives your email and payment information to process subscriptions. Stripe's privacy policy governs their handling of payment data. We do not store credit card numbers.

Email Delivery (Acumbamail): Your email address is shared with our email provider to deliver transactional and alert emails.

Analytics (Google Analytics): With your consent, anonymized usage data is sent to Google Analytics for service improvement. You can opt out via the cookie consent banner.

Authentication (Microsoft Azure AD): If you choose to sign in with Microsoft, your authentication is handled by Microsoft's identity platform under their privacy policy.

5. Data Retention

Account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records retained for tax compliance per IRS requirements, typically 7 years). Anonymized, aggregated data may be retained indefinitely for analytics purposes.

6. Your Rights — California Residents (CCPA)

If you are a California resident, you have the right to:

(a) Know what personal information we collect and how it is used.

(b) Delete your personal information, subject to certain exceptions.

(d) Non-discrimination for exercising your privacy rights.

To exercise these rights, email [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

7. Your Rights — EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the right to:

(a) Access your personal data.

(b) Rectify inaccurate personal data.

(d) Restrict processing of your personal data.

(e) Data portability — receive your data in a structured, machine-readable format.

(f) Object to processing based on legitimate interests.

(g) Withdraw consent at any time where processing is based on consent.

Our legal basis for processing is: (i) contract performance (providing the Service), (ii) legitimate interest (improving the Service), and (iii) consent (analytics cookies). To exercise these rights, email [email protected] with the subject line "GDPR Request."

8. Cookies

Essential Cookies: Required for authentication and session management. These cannot be disabled while using the Service.

Analytics Cookies: Google Analytics cookies are used to understand how visitors interact with the Service. These are only placed with your explicit consent via our cookie banner. You can withdraw consent at any time by clearing your browser cookies.

Local Storage: We use browser local storage to remember your theme preference (dark/light mode) and PWA install dismissal. This data never leaves your device.

9. Data Security

We implement industry-standard security measures including: encrypted passwords (bcrypt hashing), HTTPS encryption in transit, database access controls, and optional two-factor authentication (TOTP). No method of transmission or storage is 100% secure. If you become aware of a security breach, contact us immediately at [email protected].

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top indicates the most recent revision.

12. Contact

For privacy-related inquiries, data requests, or complaints:

Nexus Digital Marketing Services LLC
Attn: Privacy
136 S. Main St. STE 400
Salt Lake City, UT 84101
Email: [email protected]