Privacy Policy & GDPR

Effective Date: September 24, 2026

At Jobera.com, accessible from https://jobera.com, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, the legal bases we rely on, how long we retain it, and what rights you may have under applicable data protection laws, including the General Data Protection Regulation (GDPR).

Jobera.com is a platform designed to support job seekers through tools such as a job board, job tracker, resume/CV builder, cover letter builder, AI-assisted career tools, and the Jobera Quick Apply Chrome extension. This policy also covers the Resumioo panel at app.resumioo.com, which is operated by the same controller on the same platform. Together we call these the “Services”.

If you have any questions about this Privacy Policy or your personal data, you may contact us at:

Email: contact@jobera.com

1. Data Controller

For the purposes of applicable data protection law, including the GDPR, the controller of your personal data is:

Marcin Potocki RSO Media
ul. Dolna Panny Marii 56 lok. 8
20-010 Lublin, Poland
NIP (VAT): PL9222697992
REGON: 060103408
Email: contact@jobera.com

2. Legal Bases for Processing

Our legal basis for collecting and using your personal data depends on the specific data involved and the context in which we collect it. We process personal data on one or more of the following grounds:

  • Performance of a contract (Art. 6(1)(b) GDPR) – where processing is necessary to provide our Services to you, such as creating and maintaining your account, providing the job board, tracker, resume, cover letter and AI features, the Chrome extension, and paid plans.

  • Legal obligation (Art. 6(1)(c) GDPR) – where we are required to process or retain data to comply with applicable law, for example accounting and tax records.

  • Legitimate interests (Art. 6(1)(f) GDPR) – where processing is necessary for our legitimate interests, such as securing the Services, preventing fraud and abuse, fixing errors and improving the product, provided those interests are not overridden by your rights and freedoms.

  • Consent (Art. 6(1)(a) GDPR) – where you have given us permission for a specific purpose, such as analytics and advertising cookies or optional marketing emails. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

3. Your GDPR Rights

If you are located in the European Economic Area (EEA), or where similar rights apply under local law, you have the following rights:

  1. Right of access – to request a copy of the personal data we hold about you.

  2. Right to rectification – to request correction of inaccurate or incomplete data.

  3. Right to erasure – to request deletion of your personal data, including deletion of your account.

  4. Right to restriction – to request restriction of processing in certain circumstances.

  5. Right to data portability – to receive your data in a structured, commonly used, and machine-readable format.

  6. Right to object – to object to processing based on legitimate interests, and to direct marketing at any time.

  7. Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You can view and edit most of your data directly in your account dashboard. To exercise any other right – including a full data export or deletion of your account – please contact us at contact@jobera.com from the email address linked to your account, with the subject line:
Jobera.com – Data Request

You also have the right to lodge a complaint with a supervisory authority – in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw – or with the data protection authority in your country of residence.

4. Information We Collect

We may collect the following categories of personal data:

a. Information You Provide Directly

This may include:

  • your name,

  • email address,

  • phone number,

  • account login details (passwords are stored only in hashed form),

  • profile information,

  • resume/CV content,

  • cover letter content,

  • your Application Profile used for form autofill (contact details, address, education, work history, skills, work authorization, salary expectations, default cover letter),

  • photos you upload for AI features (for example AI headshots),

  • job preferences, alerts and saved searches,

  • saved, hidden, reported and tracked jobs and applications,

  • career-related notes, contacts and tracking information,

  • messages or support requests you send to us.

b. Payment and Subscription Information

Paid plans are processed by Stripe. Card details are entered directly with Stripe and are never stored on our servers. We receive and keep only the information needed to manage your subscription and meet our legal obligations: Stripe customer and subscription identifiers, plan and billing period, payment status, invoices, and refund records. We also record your AI credit balance and usage.

c. Automatically Collected Information

When you use Jobera.com, we and our infrastructure providers may automatically collect technical and usage information such as:

  • IP address,

  • browser type,

  • device type,

  • operating system,

  • referring and exit pages,

  • pages viewed,

  • session activity,

  • access dates and times,

  • general usage patterns.

d. Cookies, Analytics and Advertising

We use cookies and similar technologies to:

  • keep you signed in,

  • remember your preferences,

  • improve performance,

  • support security and prevent abuse,

  • manage your consent choices,

  • provide analytics and advertising where you have consented.

Essential cookies (such as authentication) are always active. With your consent, given through our cookie banner, we use Google Analytics to understand how the site is used and Google AdSense to display ads on jobera.com. AdSense may use cookies or similar identifiers for ad personalisation and measurement. You can change your cookie choices at any time through the cookie preferences link on the site. You can learn more about how Google uses information from sites that use its services.

We use Cloudflare Turnstile on registration and sign-in forms to distinguish humans from bots. Turnstile processes technical signals from your browser for this security purpose.

e. Information from Third Parties

We may receive personal data from third parties where relevant to the operation of the Services, for example:

  • sign-in providers you choose to use (Google or LinkedIn – name, email address and profile picture),

  • our payment processor (Stripe – payment and subscription status),

  • analytics services,

  • job listing sources (public job postings, which generally do not contain your personal data),

  • integrations you choose to connect, such as the Jobera Quick Apply extension.

5. Jobera Quick Apply Chrome Extension

The Jobera Quick Apply extension for Google Chrome is an optional companion to your Jobera account. It handles data as follows:

  • Authentication. After you connect the extension to your Jobera account, it stores authentication tokens locally on your device in chrome.storage.local. The tokens are removed when you sign out of the extension.

  • Application Profile. The extension reads your Application Profile (name, contact details, address, education, work history, resume text, work authorization, salary expectations and cover letter) from jobera.com in order to fill in application forms on the page you choose.

  • Job page data. The extension sends the job page’s URL, job title, company name and job description to jobera.com when you save a job to your tracker, request a match score or ask for AI-generated answers, and when you open a job page on a supported applicant tracking system (Greenhouse, Lever, Workable, Breezy HR or Recruitee) so that it can display an automatic match badge.

  • Site access. The extension runs automatically only on the five supported applicant tracking systems listed above. On any other website, it gains access to that site only after you explicitly grant permission for that site through Chrome’s permission prompt, and only acts there when you ask it to (for example by clicking Save, Autofill or Match). You can revoke site permissions at any time in Chrome’s extension settings.

  • What it does not do. The extension does not read or store passwords, does not fill sensitive demographic fields (such as gender, race or ethnicity, disability or veteran status), does not upload files on your behalf, and does not submit applications for you.

  • Use and sharing. Data collected by the extension is used only to provide the extension’s features described above. We do not sell it, do not use it for advertising or creditworthiness purposes, and do not transfer it to third parties except the service providers listed in section 8 that help us deliver those features (for example, the AI provider that generates answers you request), or where required by law.

Jobera’s use of data collected by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

6. How We Use Your Information

We use your personal data to:

  • create and manage your account,

  • provide access to the Services and their features,

  • save and manage your resumes, cover letters, Application Profile and tracked applications,

  • provide AI features you request,

  • process subscriptions, credits, payments and refunds,

  • send service-related communications (such as verification, password reset, receipts and job alerts you set up),

  • improve website functionality and user experience,

  • respond to support requests and user inquiries,

  • send promotional messages where permitted and where you have opted in if required,

  • detect fraud, misuse, or security incidents,

  • comply with legal and regulatory obligations.

7. AI Processing

When you use AI features – for example resume tailoring, cover letter generation, match scores, application answers or AI headshots – the content needed to fulfil that request (such as your resume or profile text, the job description, or photos you upload) is sent to our AI providers to generate the result. Text-based features are processed by Anthropic, OpenAI or Google (Gemini). For AI headshots, the photos you upload are sent to fal.ai, which generates the headshot images. The providers process this data on our behalf to return the output to you. AI-generated output may be inaccurate; please review it before use.

8. Sharing of Personal Data and Service Providers

We share personal data only where reasonably necessary. Our main service providers (processors) are:

  • Hosting and infrastructure: OVHcloud (servers located in the EU),

  • CDN, DNS, security and bot protection: Cloudflare (including Cloudflare Turnstile),

  • Payments: Stripe,

  • Email delivery: our own mail server hosted on our infrastructure,

  • AI providers: Anthropic, OpenAI and Google (Gemini) for text features, depending on the feature,

  • AI image generation: fal.ai (Features & Labels, Inc.), which generates AI headshots from photos you upload,

  • Analytics and advertising (with consent): Google Analytics and Google AdSense,

  • Sign-in providers (if you choose them): Google and LinkedIn.

We may also disclose personal data to legal, regulatory, or governmental authorities where required by law, to professional advisers where necessary, and to business successors in the event of a merger, acquisition, or restructuring.

We do not sell your personal information to third parties.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. In particular:

  • account, profile, resume, Application Profile and tracker data are kept while your account is active and deleted or anonymised within 30 days after you delete your account,

  • invoices and payment records are kept for the period required by tax and accounting law (generally 5 years from the end of the relevant tax year),

  • server and security logs are kept for a limited period for security and troubleshooting,

  • data may be retained longer where needed to resolve disputes, enforce our agreements or prevent fraud and abuse.

10. International Data Transfers

Our servers are located in the European Union. Some of our service providers (for example Stripe, Cloudflare, Google, Anthropic, OpenAI and fal.ai) may process data outside the EEA, including in the United States. Where they do, we rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses.

11. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, including encryption in transit (HTTPS), hashed passwords and access controls. However, no online service or transmission method can be guaranteed to be completely secure.

12. Marketing Communications

Where permitted by law, we may send you updates, newsletters, promotional messages, or product information. Where consent is required, we will rely on your consent before sending such messages. You may opt out at any time by using the unsubscribe option, changing your notification settings, or contacting us directly.

13. Third-Party Services and External Links

Jobera.com may contain links to third-party sites, tools, or services, including job listings, employer websites, applicant tracking systems, integrations, or external platforms. We are not responsible for the privacy practices of third-party services, and we encourage users to review those policies separately. When you apply for a job, the employer or its platform processes your application under its own privacy policy.

14. Children’s Privacy

Jobera.com is not intended for children. The Services are intended for users aged 16 or older, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date. For material changes, we will also notify you by email or in the product.

16. Contact Us

If you have questions about this Privacy Policy, your personal data, or your rights, please contact us:

Marcin Potocki RSO Media
ul. Dolna Panny Marii 56 lok. 8
20-010 Lublin, Poland
NIP (VAT): PL9222697992
REGON: 060103408
Email: contact@jobera.com
Website: https://jobera.com