Privacy Policy

1. Introduction and scope

This Privacy Policy explains how we collect, use, store, and share personal information when you use the Service.

By using JobAlchemist, you acknowledge we process personal information as described here. If you don't agree, don't use the Service.

2. What information we collect

We collect the following categories:

A. Account information

• Name
• Email address
• Account credentials (passwords are stored using secure hashing)
• Settings and preferences
• Profile information you choose to provide

B. Job search content you provide (User Content)

You may upload or enter:

• CV/resume content (work history, education, skills, achievements, and any contact details you include)
• Job advertisements and links/URLs
• Cover letters and application responses
• Notes and planning content
• Files you upload (e.g., PDF, Word documents)

This content may include sensitive information if you choose to include it. Please avoid uploading information you don't want processed by the Service.

C. Payment and billing information

• Subscription status (active/cancelled/expired), plan tier, renewal dates
• Purchase history (transaction IDs, dates, amounts)
• Payment method type and limited metadata (e.g., "Visa ending in 1234")
• Billing metadata (country and tax/GST status)

Full card details are collected and stored by Stripe. Stripe's privacy policy is available on Stripe's website.

D. Usage and technical information

We may collect:

• Log data (IP address, device type, OS, browser, referring URLs)
• Feature usage events (what you use and when)
• Performance data (error logs, crash reports, response times)
• Cookies/session data (authentication and preferences)

E. Communications

If you contact us:

• Emails and support messages
• Feedback and survey responses

3. How we use your information

We use personal information to:

A. Provide and operate the Service

• create and manage accounts
• authenticate users and keep sessions secure
• store and retrieve User Content
• generate AI outputs you request
• provide support

B. Process payments and prevent fraud

• process transactions, renewals, cancellations
• send receipts and payment notices
• detect fraud/chargebacks and misuse
• meet record-keeping obligations

C. Service communications

We may send account and billing emails (including password resets, receipts, security alerts, and service notices). You can unsubscribe from marketing, but not from emails needed to run your account.

D. Improve and develop the Service

• understand feature usage and performance
• fix bugs and improve UX
• evaluate output quality and safety
• develop new features

Where practicable, we use aggregated or de-identified data for product analytics and improvement.

E. Security and compliance

• monitor for abuse and security threats
• enforce our Terms
• comply with legal obligations and lawful requests
• protect users and our rights

F. Optional marketing

If you opt in, we may send product updates and offers. You can unsubscribe at any time.

4. AI processing and third-party AI providers

When you use AI features, we send relevant parts of your User Content to one or more third-party AI providers to generate the output you requested.

What we send: We generally aim to send only what's needed for the task (for example, the job ad text and relevant CV sections).

We use one or more third-party AI providers to generate outputs you request. You can contact hello@jobalchemist.tech for an up-to-date list. Providers may change over time.

Training: We don't use your individual inputs/outputs to train third-party providers' general models. We may use aggregated/de-identified information to monitor quality, safety, and performance.

5. Who we share information with

We don't sell your personal information.

We share it only with:

• service providers who help us run the Service (hosting, database/authentication/storage, AI processing, payments, analytics, email)
• professional advisers (as needed)
• regulators/law enforcement, where required by law
• counterparties in a business transfer (under confidentiality protections)
• others with your direction/consent

We use third-party providers to run the Service. Contact hello@jobalchemist.tech. if you'd like an up-to-date list. Providers may change as we evolve.

6. International data transfers

Some providers may process information outside New Zealand, including in the United States and other jurisdictions, depending on configuration.

For NZ users, we take reasonable steps to ensure overseas recipients provide comparable safeguards, or we rely on another permitted basis under IPP12. For Australian users, we take reasonable steps consistent with the APPs or rely on a permitted basis.

7. Data retention

We keep personal information only as long as needed for the purposes in this policy, unless longer retention is required or permitted.

Typical retention (may vary):

• Billing and tax records: generally up to 7 years
• Support communications: typically up to 2 years
• Usage logs/analytics: typically up to 12 months, then deleted or aggregated
• User Content: generally for as long as your account is active, and for a limited period after closure (subject to backups, legal holds, fraud/security)

You can request deletion - see Section 10.

8. Cookies and similar technologies

We use cookies to provide, secure, and improve the Service.

• Essential cookies: authentication, security, core functionality
• Functional cookies: preferences and settings
• Analytics cookies (if used): understand usage and performance

We don't use third-party advertising cookies for ad targeting.

You can manage cookies in your browser settings. Disabling essential cookies may prevent the Service from working.

8A. Data breach notification

We use reasonable safeguards, but no system is perfectly secure.

If a data breach is likely to cause serious harm and notification is required, we will notify affected individuals and relevant regulators as required by law, and take steps to contain and remediate the breach.

9. How we protect your information

We implement reasonable technical and organisational safeguards.

Safeguards may include encryption in transit, access controls, monitoring, secure development practices, and vendor security reviews.

You are responsible for keeping your password confidential and using secure devices.

10. Your privacy rights

Depending on where you live, you may request to:

• access information we hold about you
• correct inaccurate information
• delete your account (subject to legal/billing/security retention)
• export key account data/User Content (in a common format where practicable)
• opt out of marketing

Contact hello@jobalchemist.tech with enough detail to identify your account. We may verify your identity before responding.

11. Jurisdiction-specific rights

New Zealand and Australia provide rights to access and correct personal information, and impose obligations around overseas disclosure and breach notification. We aim to comply with applicable requirements. If you're elsewhere, we'll respond to valid requests in accordance with the laws that apply to you.

12. Children's privacy

The Service is not intended for individuals under 16. We don't knowingly collect personal information from children under 16. If you believe a child has provided information, contact us, and we'll take reasonable steps to delete it.

13. Changes to this Privacy Policy

We may update this policy. If changes are material, we'll take reasonable steps to notify you (for example, in-app or by email). Material changes generally take effect after reasonable notice (often 30 days), unless we must change sooner for legal or security reasons.

14. Third-party links and services

The Service may link to third parties (e.g., job boards). Their privacy practices are governed by their own policies. We're not responsible for third-party services outside our control.

15. Business transfers

If we're involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to appropriate safeguards and notices where required.

16. Contact us

Contact: hello@jobalchemist.tech

We aim to respond within a reasonable time (often 5–7 business days), and within any legally required timeframe.

Last updated: 14 February 2026