1import{j as e,L as i}from"./index-Sh-eXWK6.js";import{L as t}from"./Layout-hMtmxeOg.js";import{u as n}from"./usePageTitle-Xcsq_-l0.js";import"./polish-DUsVzeDX.js";import"./features-CQ9SLoqJ.js";import"./JobRefinedLogo-pt8J0OF8.js";import"./useTranslation-DAGRf1Fz.js";import"./chunk-3-Csim1Vz8.js";import"./chunk-21-D4iyGfsK.js";import"./useLocaleSync-BVt5KOnS.js";import"./Button-B88bcLzP.js";import"./chunk-18-pVKKevjp.js";import"./chunk-27-BoYWWFHW.js";import"./chunk-0-Cc5yEJa5.js";import"./chunk-13-C0WTwP_X.js";import"./chunk-15-A3YHkeeY.js";function A(){return n("Privacy Policy"),e.jsxs(t,{children:[e.jsxs("div",{className:"page-header page-transition",children:[e.jsx("h1",{children:"Privacy Policy"}),e.jsx("p",{children:"Last updated: March 2026 · Version 1.1"})]}),e.jsxs("div",{className:"section-card page-transition",style:{maxWidth:800,lineHeight:1.7},children:[e.jsx("h2",{children:"1. What We Collect"}),e.jsx("p",{children:"We collect the following categories of personal information:"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Account information:"})," Name, email address, password (hashed), phone number (optional, encrypted at rest)."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Career documents:"})," Resumes, cover letters, and job descriptions you upload or create. These are encrypted at rest using AES-256-GCM."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Application tracking:"})," Companies, job titles, statuses, notes, and reminders you add."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"AI usage data:"})," Token counts, model used, and processing timestamps when you use AI features. We do not store AI conversation content beyond the generated output."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Technical data:"})," IP addresses (anonymized after 90 days), session information, and browser user agent strings."]})]}),e.jsx("h2",{children:"2. How We Use Your Data"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Core service:"})," Application tracking, resume management, and document generation."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"AI-powered features (with your consent):"})," Resume analysis, cover letter generation, and job description parsing. Your data is sent to third-party AI providers (e.g., OpenAI) for processing. We use PII tokenization to minimize personal data sent to AI providers."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Security:"})," Fraud prevention, rate limiting, and audit logging."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Service improvement:"})," Aggregated, anonymized usage analytics (only with your consent)."]})]}),e.jsx("h2",{children:"3. AI Data Processing"}),e.jsx("p",{children:"When you use AI features, your resume content and job descriptions are processed by third-party large language model (LLM) providers. We take the following precautions:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Personal identifiers (names, emails, phone numbers, addresses) are tokenized before being sent to AI providers."}),e.jsx("li",{children:"We require Data Processing Agreements (DPAs) with all AI providers."}),e.jsx("li",{children:"AI providers are configured for zero-data-retention (ZDR) where available."}),e.jsxs("li",{children:["You can disable all AI features at any time in ",e.jsx(i,{to:"/settings?tab=privacy",children:"Settings > Privacy"}),"."]})]}),e.jsx("h2",{children:"4. Data Retention"}),e.jsxs("table",{style:{width:"100%",borderCollapse:"collapse",margin:"16px 0"},children:[e.jsx("thead",{children:e.jsxs("tr",{style:{borderBottom:"2px solid var(--color-border)"},children:[e.jsx("th",{style:{textAlign:"left",padding:"8px 12px"},children:"Data Type"}),e.jsx("th",{style:{textAlign:"left",padding:"8px 12px"},children:"Retention"})]})}),e.jsx("tbody",{children:[["Account & career data","Until you delete your account"],["Expired sessions","Deleted automatically"],["Verification tokens","Deleted after 48 hours"],["Audit log IP addresses","Anonymized after 90 days"],["AI usage logs","Deleted after 1 year"],["Deleted accounts","30-day grace peri
1od, then permanently erased"]].map(([r,s])=>e.jsxs("tr",{style:{borderBottom:"1px solid var(--color-border)"},children:[e.jsx("td",{style:{padding:"8px 12px"},children:r}),e.jsx("td",{style:{padding:"8px 12px",color:"var(--color-text-secondary)"},children:s})]},r))})]}),e.jsx("h2",{children:"5. Your Rights"}),e.jsx("p",{children:"Under GDPR and the Australian Privacy Act, you have the right to:"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Access:"})," Export all your data from ",e.jsx(i,{to:"/settings?tab=profile",children:"Settings"}),"."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Rectification:"})," Update your profile information at any time."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Erasure:"})," Delete your account and all associated data."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Portability:"})," Download your data in standard formats (JSON, PDF, DOCX)."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Restrict processing:"})," Disable AI features while continuing to use the platform for application tracking."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Withdraw consent:"})," Change your consent preferences at any time in ",e.jsx(i,{to:"/settings?tab=privacy",children:"Settings > Privacy"}),"."]})]}),e.jsx("h2",{children:"6. Data Security"}),e.jsx("p",{children:"We protect your data with:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"AES-256-GCM encryption for sensitive fields (phone, LinkedIn URL, resume content, cover letters)"}),e.jsx("li",{children:"bcrypt password hashing (cost factor 12)"}),e.jsx("li",{children:"RS256 JWT token signing"}),e.jsx("li",{children:"Rate limiting on all authentication endpoints"}),e.jsx("li",{children:"Security headers (CSP, HSTS, X-Frame-Options)"}),e.jsx("li",{children:"PII redaction in application logs"})]}),e.jsx("h2",{children:"7. Third-Party Services"}),e.jsx("p",{children:"We use the following third-party services that may process your data:"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"AI providers:"})," For resume analysis, cover letter generation, and job description parsing (governed by DPAs)."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Email service:"})," For sending verification emails, password resets, and reminders."]})]}),e.jsx("h2",{children:"8. Browser Extension"}),e.jsx("p",{children:'Our optional Chrome browser extension ("JobRefined â JD Capture") lets you capture job descriptions from any web page. If you install and use the extension:'}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Page content:"})," When you explicitly select a job description using the element picker, the text content of the selected element is sent to our API for AI-powered parsing. No page content is collected without your action."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Authentication:"})," The extension stores your authentication tokens (JWT) locally in your browser's extension storage to keep you signed in. If you are logged into jobrefined.ai in another tab, the extension can read your session tokens from that page to enable automatic sign-in. Tokens are cleared after 7 days of inactivity."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Browsing data:"})," The extension does not collect, store, or transmit your browsing history, page URLs (other than the source URL of a captured job description), or any other browsing activity."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Permissions:"})," The extension requests ",e.jsx("code",{children:"activeTab"})," and ",e.jsx("code",{children:"scripting"}),' permissions to inject the element picker on the current page when you click "Capture Job Description". It does not run on pages until you activate it.']})]}),e.jsx("h2",{children:"9. Contact"}),e.jsxs("p",{children:["Job Refined is a product of ",e.jsx("strong",{children:"Inflow Studio Pty. Ltd."})," (ABN 13 696 426 981). For privacy inquiries, data access requests, or complaints, contact us at ",e.jsx("strong",{children:"[email protected]"}),"."]}),e.jsx("div",{style:{marginTop:32,padding:"16px 20px",background:"var(--color-surface-secondary)",borderRadius:8,fontSize:"0.85rem",color:"var(--color-text-secondary)"},children:"This privacy policy complies with GDPR (EU General Data Protection Regulation) and the Australian Privacy Act 1988. We review and update this policy periodically. Material changes will be communicated via email."})]})]})}export{A as default};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.