Privacy Policy & GDPR

Effective Date: October 9, 2026

At Jobera.com, accessible from https://jobera.com, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, the legal bases we rely on, how long we retain it, and what rights you may have under applicable data protection laws, including the General Data Protection Regulation (GDPR).

Jobera.com is a platform designed to support job seekers through tools such as a job board, job tracker, resume/CV builder, cover letter builder, AI-assisted career tools, and the Jobera Quick Apply Chrome extension. This policy also covers the Resumioo panel at app.resumioo.com and the Picsuit AI headshot panel at app.picsuit.com, which are operated by the same controller on the same platform. Together we call these the “Services”.

If you have any questions about this Privacy Policy or your personal data, you may contact us at:

Email: contact@jobera.com

1. Data Controller

For the purposes of applicable data protection law, including the GDPR, the controller of your personal data is:

Marcin Potocki RSO Media
ul. Dolna Panny Marii 56 lok. 8
20-010 Lublin, Poland
NIP (VAT): PL9222697992
REGON: 060103408
Email: contact@jobera.com

2. Legal Bases for Processing

Our legal basis for collecting and using your personal data depends on the specific data involved and the context in which we collect it. We process personal data on one or more of the following grounds:

Performance of a contract (Art. 6(1)(b) GDPR) – where processing is necessary to provide our Services to you, such as creating and maintaining your account, providing the job board, tracker, resume, cover letter and AI features, the Chrome extension, and paid plans.
Legal obligation (Art. 6(1)(c) GDPR) – where we are required to process or retain data to comply with applicable law, for example accounting and tax records.
Legitimate interests (Art. 6(1)(f) GDPR) – where processing is necessary for our legitimate interests, such as securing the Services, preventing fraud and abuse, fixing errors and improving the product (including testing which version of our pricing page works better, see section 4d), provided those interests are not overridden by your rights and freedoms.
Consent (Art. 6(1)(a) GDPR) – where you have given us permission for a specific purpose, such as analytics and advertising cookies or optional marketing emails. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

3. Your GDPR Rights

If you are located in the European Economic Area (EEA), or where similar rights apply under local law, you have the following rights:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your personal data, including deletion of your account.
Right to restriction – to request restriction of processing in certain circumstances.
Right to data portability – to receive your data in a structured, commonly used, and machine-readable format.
Right to object – to object to processing based on legitimate interests, and to direct marketing at any time.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You can view and edit most of your data directly in your account dashboard. To exercise any other right – including a full data export or deletion of your account – please contact us at contact@jobera.com from the email address linked to your account, with the subject line:
Jobera.com – Data Request

You also have the right to lodge a complaint with a supervisory authority – in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw – or with the data protection authority in your country of residence.

4. Information We Collect

We may collect the following categories of personal data:

a. Information You Provide Directly

This may include:

your name,
email address,
phone number,
account login details (passwords are stored only in hashed form),
profile information,
resume/CV content,
cover letter content,
your Application Profile used for form autofill (contact details, address, education, work history, skills, work authorization, salary expectations, default cover letter),
photos you upload for AI features (for example AI headshots),
job preferences, alerts and saved searches,
saved, hidden, reported and tracked jobs and applications,
career-related notes, contacts and tracking information,
messages or support requests you send to us.

b. Payment and Subscription Information

Paid plans are processed by Stripe. Card details are entered directly with Stripe and are never stored on our servers. We receive and keep only the information needed to manage your subscription and meet our legal obligations: Stripe customer and subscription identifiers, plan and billing period, payment status, invoices, and refund records. We also record your AI credit balance and usage.

c. Automatically Collected Information

When you use Jobera.com, we and our infrastructure providers may automatically collect technical and usage information such as:

IP address,
browser type,
device type,
operating system,
referring and exit pages,
pages viewed,
session activity,
access dates and times,
general usage patterns.

d. Cookies, Analytics and Advertising

We use cookies and similar technologies to:

keep you signed in,
remember your preferences,
improve performance,
support security and prevent abuse,
manage your consent choices,
provide analytics and advertising where you have consented (except the pricing-page test cookie described below).

Pricing-page A/B test cookie (jb_pricing_ab)

While we are running a test on the jobera.com pricing page, we show visitors one of two layouts of the same page: one lists the Lifetime plan first, the other lists the Monthly plan first. The plans, prices and terms are the same in both. To show you the same layout every time you come back, and to measure which layout leads to more purchases, we set the following cookie:

Name: jb_pricing_ab. It is a first-party cookie set by Jobera on jobera.com; no third party sets or reads it.
Purpose: showing you a consistent pricing-page layout and measuring which layout converts better.
Content: a randomly chosen layout letter (L or M) and a random 16-character code generated in your browser, for example M.3f9a0c2b7d41e865. It contains no name, email address or other information about you, and it is not derived from your device or IP address.
Duration: 90 days from when it is set.
When it is set: the first time you open the pricing page while a test is running, including before you have made a choice in our cookie banner. It is not set while the test is switched off.
How we use it: the layout letter and the random code are recorded with our own sign-up and pricing-page events (for example “pricing page viewed” or “plan clicked”), so that each browser is counted once. If you are signed in or have started signing up, those events are also linked to your account or sign-up. If you start a checkout, the layout letter (not the random code) is stored with that checkout and sent to Stripe with the payment details. We look at the results only in aggregate, to compare the two layouts. Your IP address is not stored with these events; it is kept for up to 2 days in a counter that limits automated traffic.
Legal basis: our legitimate interest in improving the site and understanding which presentation of our plans works better for visitors (Art. 6(1)(f) GDPR).
Your choices: you can object at any time. Choosing “Reject all”, or switching off the Analytics category in the cookie preferences, deletes the cookie and stops it from being set again for as long as your cookie choice is stored (6 months); you then see the standard layout and your visits are not counted in the test. You can also delete the cookie in your browser settings at any time.

Other cookies and browser storage we set ourselves

Apart from jb_pricing_ab, the only cookie we set ourselves is cc_cookie, which stores your cookie-banner choice for 6 months. We also keep a few items in your browser’s local storage or session storage (not cookies, and not sent to third parties). They are set without asking first because they are needed for features you use, or, in the case of the visitor ID, to count usage without identifying you:

Sign-in: access_token and refresh_token keep you signed in; they are removed when you sign out.
Sign-up and checkout progress: jobera_onboarding_draft_token and jobera_onboarding_checkout let you finish a sign-up or payment you started in this browser.
Links in our emails: when you open a link from a sign-up reminder or an offer email, the link’s one-time token (jobera_resume_token, jobera_offer_token, jobera_campaign_magic, jobera_campaign_offer) is moved out of the address bar into session storage for that browser tab, so that it is not exposed to analytics scripts. Session storage is cleared when you close the tab. An offer session obtained from such a link is valid for at most 2 hours and only lets you view and pay for that offer; it does not sign you in.
Where you came from: jobera_first_touch remembers how you first arrived: the website that linked to us (only its domain, for example google.com, never the full address), the campaign tags in that link (utm_source, utm_medium, utm_campaign), the first page you opened and when. If you sign up, we store this with your account so we can see which sites bring us new members. It is not sent to third parties and it is kept in your browser for up to 90 days. Choosing “Reject all”, or switching off Analytics in the cookie preferences, deletes it and stops it from being saved. Legal basis: our legitimate interest in understanding where our sign-ups come from.
Apply-click counting: jobera_visitor_id is a random identifier sent with clicks on “Apply” buttons so that we can count how many different visitors click them. If you are signed in, the click is linked to your account. It stays until you clear your browser storage. Legal basis: our legitimate interest in understanding how the site is used.
“How did you find us?” question: crawlerATS_sessionId is a random identifier sent with your answer to this short question, together with a page-view counter that decides when to show it.
Detected country: crawlerATS_detectedLocation stores the approximate location (country) we derive from your IP address, to prefill the location filter on job searches.
Your activity on this device: recently viewed jobs (jobera_recently_viewed) and saved and recent searches (jobera_saved_searches, jobera_recent_searches_v1), so that you can return to them.
Interface preferences: for example table column settings, collapsed menus and dismissed notices.

Third-party security cookies

Some services we use set their own cookies on our pages, for security only. They are essential and are not used for advertising:

Cloudflare, which protects the site against bots and abuse (including Cloudflare Turnstile on sign-up and sign-in forms), may set security cookies such as __cf_bm (30 minutes).
Stripe sets fraud-prevention cookies on checkout and payment pages: __stripe_mid (1 year) and __stripe_sid (30 minutes).

Analytics, advertising and security services

Essential cookies (the one storing your cookie choice, and the Cloudflare and Stripe security cookies described above) are always active. With your consent, given through our cookie banner, we use Google Analytics to understand how the site is used and Google AdSense to display ads on jobera.com. AdSense may use cookies or similar identifiers for ad personalisation and measurement. You can change your cookie choices at any time through the cookie preferences link on the site. You can learn more about how Google uses information from sites that use its services.

We use Cloudflare Turnstile on registration and sign-in forms to distinguish humans from bots. Turnstile processes technical signals from your browser for this security purpose.

e. Information from Third Parties

We may receive personal data from third parties where relevant to the operation of the Services, for example:

sign-in providers you choose to use (Google or LinkedIn – name, email address and profile picture),
our payment processor (Stripe – payment and subscription status),
analytics services,
job listing sources (public job postings, which generally do not contain your personal data),
integrations you choose to connect, such as the Jobera Quick Apply extension.

5. Jobera Quick Apply Chrome Extension

The Jobera Quick Apply extension for Google Chrome is an optional companion to your Jobera account. It handles data as follows:

Authentication. After you connect the extension to your Jobera account, it stores authentication tokens locally on your device in chrome.storage.local. The tokens are removed when you sign out of the extension.
Application Profile. The extension reads your Application Profile (name, contact details, address, education, work history, resume text, work authorization, salary expectations and cover letter) from jobera.com in order to fill in application forms on the page you choose.
Job page data. The extension sends the job page’s URL, job title, company name and job description to jobera.com when you save a job to your tracker, request a match score or ask for AI-generated answers, and when you open a job page on a supported applicant tracking system (Greenhouse, Lever, Workable, Breezy HR or Recruitee) so that it can display an automatic match badge.
Site access. The extension runs automatically only on the five supported applicant tracking systems listed above. On any other website, it gains access to that site only after you explicitly grant permission for that site through Chrome’s permission prompt, and only acts there when you ask it to (for example by clicking Save, Autofill or Match). You can revoke site permissions at any time in Chrome’s extension settings.
What it does not do. The extension does not read or store passwords, does not fill sensitive demographic fields (such as gender, race or ethnicity, disability or veteran status), does not upload files on your behalf, and does not submit applications for you.
Use and sharing. Data collected by the extension is used only to provide the extension’s features described above. We do not sell it, do not use it for advertising or creditworthiness purposes, and do not transfer it to third parties except the service providers listed in section 8 that help us deliver those features (for example, the AI provider that generates answers you request), or where required by law.

Jobera’s use of data collected by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

6. How We Use Your Information

We use your personal data to:

create and manage your account,
provide access to the Services and their features,
save and manage your resumes, cover letters, Application Profile and tracked applications,
provide AI features you request,
process subscriptions, credits, payments and refunds,
send service-related communications (such as verification, password reset, receipts and job alerts you set up),
improve website functionality and user experience,
respond to support requests and user inquiries,
send promotional messages where permitted and where you have opted in if required,
detect fraud, misuse, or security incidents,
comply with legal and regulatory obligations.

7. AI Processing

When you use AI features – for example resume tailoring, cover letter generation, match scores, application answers or AI headshots – the content needed to fulfil that request (such as your resume or profile text, the job description, or photos you upload) is sent to our AI providers to generate the result. Text-based features are processed by Anthropic, OpenAI or Google (Gemini). For AI headshots, the photos you upload are sent to fal.ai, which generates the headshot images. The providers process this data on our behalf to return the output to you. AI-generated output may be inaccurate; please review it before use.

8. Sharing of Personal Data and Service Providers

We share personal data only where reasonably necessary. Our main service providers (processors) are:

Hosting and infrastructure: OVHcloud (servers located in the EU),
CDN, DNS, security and bot protection: Cloudflare (including Cloudflare Turnstile),
Payments: Stripe,
Email delivery: our own mail server hosted on our infrastructure,
AI providers: Anthropic, OpenAI and Google (Gemini) for text features, depending on the feature,
AI image generation: fal.ai (Features & Labels, Inc.), which generates AI headshots from photos you upload,
Analytics and advertising (with consent): Google Analytics and Google AdSense,
Sign-in providers (if you choose them): Google and LinkedIn.

We may also disclose personal data to legal, regulatory, or governmental authorities where required by law, to professional advisers where necessary, and to business successors in the event of a merger, acquisition, or restructuring.

We do not sell your personal information to third parties.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. In particular:

account, profile, resume, Application Profile and tracker data are kept while your account is active and deleted or anonymised within 30 days after you delete your account,
pricing-page A/B test data (the layout letter and random code stored with sign-up and pricing-page events, and the layout letter stored with checkouts) is kept for up to 24 months,
invoices and payment records are kept for the period required by tax and accounting law (generally 5 years from the end of the relevant tax year),
server and security logs are kept for a limited period for security and troubleshooting,
data may be retained longer where needed to resolve disputes, enforce our agreements or prevent fraud and abuse.

10. International Data Transfers

Our servers are located in the European Union. Some of our service providers (for example Stripe, Cloudflare, Google, Anthropic, OpenAI and fal.ai) may process data outside the EEA, including in the United States. Where they do, we rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses.

11. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, including encryption in transit (HTTPS), hashed passwords and access controls. However, no online service or transmission method can be guaranteed to be completely secure.

12. Marketing Communications

Where permitted by law, we may send you updates, newsletters, promotional messages, or product information. Where consent is required, we will rely on your consent before sending such messages. You may opt out at any time by using the unsubscribe option, changing your notification settings, or contacting us directly.

13. Third-Party Services and External Links

Jobera.com may contain links to third-party sites, tools, or services, including job listings, employer websites, applicant tracking systems, integrations, or external platforms. We are not responsible for the privacy practices of third-party services, and we encourage users to review those policies separately. When you apply for a job, the employer or its platform processes your application under its own privacy policy.

14. Children’s Privacy

Jobera.com is not intended for children. The Services are intended for users aged 16 or older, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date. For material changes, we will also notify you by email or in the product.

16. Contact Us

If you have questions about this Privacy Policy, your personal data, or your rights, please contact us:

Marcin Potocki RSO Media
ul. Dolna Panny Marii 56 lok. 8
20-010 Lublin, Poland
NIP (VAT): PL9222697992
REGON: 060103408
Email: contact@jobera.com
Website: https://jobera.com