Last updated: 20 September 2026
Job Reacher helps you find and prepare job applications. This policy explains which personal data we process, why, where it is kept and what control you have. The short version: we keep what we need to run your job search, nothing we don’t, and you can take it or delete it at any time.
Who is responsible
Job Reacher is operated by IE Job Reacher, Uly Dala Avenue 69, Astana, Republic of Kazakhstan (“we”). We are the controller (operator) of the personal data described here. Contact: support@jobreacherai.com.
What we store and why
- Account — your email address and a salted hash of your password. Needed to provide the service.
- Profile and experience — country, time zone, working hours, languages, target roles, level, minimum rate, and the experience you add or import from your résumé. Needed to check which jobs can hire you and to prepare applications.
- Applications — the jobs you prepared, the résumé and letter we generated, their status, lines you reported as untrue, and skip reasons.
- Résumé links — each prepared application has a private, unguessable link to its résumé page. Anyone you give the link to can open it. When the page stays open for a few seconds we record that it was opened (date and time only — no IP address or device details are stored). You can stop a link working by skipping the application or deleting your account.
- Connections (optional) — from the LinkedIn connections file you upload: names, company, position, profile link and connection date. Email addresses in the file are ignored. Used only to show you who you know at a company. These are other people’s data you already hold; you are responsible for having the right to upload them, and we never contact them or show them to anyone else.
- Gmail (optional) — see the next section.
- Telegram (optional) — your chat ID, to send the alerts you turned on.
- Searches and links to other sites — what you search for in your feed and which external job sites you open from Job Reacher, with the role searched. Used to find more jobs people want and to choose which sites to suggest.
- Payments — Paddle, our merchant of record, sends us your subscription status, plan and renewal date, and for each payment the amount charged, the tax, Paddle’s fee, what reached us, and the country of your billing address. We use the country to understand which markets our costs and taxes come from. We never see card details.
- Where you came from — if you arrived through a link that carried a tag, such as ?from=reddit, we store that tag on your account so we know which channels bring people who stay. It is a word we chose ourselves, not an identifier from anyone else, and it says nothing about you beyond the link you clicked.
- Technical logs — error logs without message content, kept for up to 30 days to keep the service working.
Legal basis: performing our contract with you (the service you signed up for), your consent for optional connections (Gmail, Telegram, LinkedIn file), and our legitimate interest in security and aggregated product improvement.
Gmail data
Not switched on yet. Gmail linking is not available in the product today; this section describes what will happen when we offer it, so you can judge it before you ever connect anything.
If you connect Gmail, we request read-only access (gmail.readonly). We search only for messages related to companies you prepared applications for, from the date you prepared them. Message text is processed in memory to decide a status — sent, received, replied, rejected or interview — and is then discarded. We store the message ID, the sender’s domain, the subject line, the date and the status. Your access token is encrypted.
Job Reacher’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Gmail data only to show you the status of your own applications; we do not transfer it to others except as needed to provide that feature, to comply with law, or as part of a merger with your notice; we do not use it for advertising; we do not allow humans to read it unless you ask us to for support, it is needed for security or legal reasons; and we never use it to develop, improve or train AI or machine-learning models. Gmail message content is not sent to AI providers.
You can disconnect at any time from the Gmail page; we revoke the token at Google immediately.
AI processing
To read job postings and prepare applications we send the relevant text — the job posting and the parts of your experience needed for it — to Anthropic, acting as our processor. Under Anthropic’s commercial terms, inputs sent through its API are not used to train its models. No Gmail content, connections or payment data are sent to AI providers.
Who else processes your data
The full list, with what each one sees and where it is, is on the sub-processors page. In short:
- Hosting — our servers and database, located in Kazakhstan.
- Anthropic (USA) — AI processing as described above.
- Google (USA) — only if you connect Gmail.
- Telegram — only if you link it, to deliver your alerts.
- Paddle (United Kingdom) — payments, tax and invoicing, under its own privacy policy as merchant of record.
Some of these providers are outside your country. Where the law requires it, we rely on your consent or on contractual safeguards for these transfers, and we keep the primary database of our users’ personal data where applicable law requires it to be kept.
What we never do
- Send anything from your email or submit any application on your behalf.
- Sell your data, or share it with employers or recruiters.
- Use your résumé, letters, emails or connections to train AI models.
Aggregated statistics
To tell you whether a company tends to reply, to show which roles people in a country look for, and to improve how applications are written, we combine outcomes across all users into anonymous totals — for example, how many applications to a company got a human reply, or which first-line style got more replies. Totals never include names, résumés or message content. Company reply figures appear only once at least five applications are counted, and a country’s role list is based on at least five people.
Visitors to the website
You do not need an account to read the website, and we set no cookie until you sign in. On the first page you open each day we add one to a counter for the language your browser asks for — for example “Spanish, 1” — and one more when someone creates an account. We store the language, the date and the count, nothing else: no address, no page history, no identifier. We use it for one decision only: whether a page is worth translating. Your address is held in memory for a few minutes to limit request rates and is never written to the database.
Decisions are yours, not ours
We score how well a job fits you and whether it looks legitimate, and we sort your feed by it. These are suggestions for you to judge; nobody is accepted or rejected by us, and we make no decision that has a legal or similar effect on you. Employers decide who to hire, and they never receive your data from us.
How long we keep it
Account data is kept while your account exists. When you delete your account, your profile, experience, applications, connections, reply statuses and tokens are deleted from our live database immediately, and from backups within 30 days. Payment records are kept by Paddle as the law requires. Anonymous totals do not identify you and may be kept.
Your rights and controls
- Export all your data as a file in one click (Account page).
- Correct your data at any time in Profile and Experience.
- Delete your account in one click.
- Withdraw consent by disconnecting Gmail or Telegram, or deleting imported connections.
- Ask us anything or object to a use of your data at support@jobreacherai.com. You can also complain to the data-protection authority in your country.
Security
Passwords are hashed with scrypt, tokens are encrypted, connections use HTTPS, and sign-in attempts are rate-limited. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority as the law requires.
Age
The service is for people aged 18 or older.
Changes
We will tell you in the app at least 14 days before a material change to this policy takes effect.