Privacy Policy

At Blastjob ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and share information about you when you use blastjob.com and related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2.1 Information You Provide

• Account Information: Name, email address, password
• Profile Data: Work experience, education, skills, certifications, target roles, preferred locations, salary expectations
• CV / Resume: Documents you upload or information used to generate CVs
• Cover Letters: Content you create or have generated through the Service
• Payment Information: Billing details processed securely by Stripe (we do not store full card numbers)
• Communications: Messages you send us via email or support channels

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, application history, search queries
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies and Local Storage: Session tokens, preference settings
• Activity Logs: Login times, last active timestamp, actions within the Service

We use your information to:

• Provide the Service: Submit job applications on your behalf
• Customise Applications: Generate tailored CVs and cover letters using AI
• Match Jobs: Find relevant opportunities based on your profile
• Improve the Service: Analyse usage to enhance features and reliability
• Communicate: Send transactional notifications about your applications, matches, and account
• Customer Support: Respond to your inquiries and troubleshoot issues
• Billing: Process subscriptions and payments
• Security: Detect, prevent, and respond to fraud or unauthorised access
• Legal Compliance: Meet our legal, regulatory, and contractual obligations

If you are in the European Economic Area (EEA) or UK, we rely on the following legal bases:

• Contract: Processing necessary to provide you with the Service you signed up for
• Legitimate Interests: Improving the Service, preventing fraud, marketing to existing users
• Consent: For non-essential cookies and marketing communications (which you may withdraw at any time)
• Legal Obligation: Where required by law (e.g., tax records, legal requests)

5.1 With Employers and Job Boards

When you approve an application, we share your CV, cover letter, and relevant profile information with the prospective employer and/or job platform (such as LinkedIn, Indeed, Greenhouse, Lever). These third parties process your data according to their own privacy policies.

5.2 Service Providers

We share data with trusted third parties that help us operate Blastjob:

• Google Firebase: Authentication and secure data storage
• Stripe: Payment processing and subscription billing
• Resend: Transactional email delivery
• OpenAI: AI-powered CV and cover letter generation
• Apify: Job listing aggregation from public sources
• Render: Cloud hosting and application infrastructure

These providers are contractually required to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Blastjob, our users, or others.

5.4 Business Transfers

If Blastjob is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5.5 We Do Not Sell Your Personal Information

We do not sell your personal information to third parties for monetary consideration.

Blastjob uses automated systems and AI to match jobs to your profile and to generate application materials. These systems:

• Score jobs against your profile to identify good matches
• Rewrite CVs and cover letters based on job descriptions
• Prioritise the order in which jobs are surfaced to you

These processes do not produce legal or similarly significant effects on you — you always review and approve applications before they are submitted. You may contact us at privacy@blastjob.com if you have concerns about any automated decision.

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication with password hashing (via Firebase Auth)
• Role-based access controls limiting employee access to personal data
• Regular security reviews and dependency monitoring
• Secure cloud infrastructure with regular backups

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are legally required to retain it. Billing records are kept for up to 7 years as required by tax law.

9.1 All Users

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format

9.2 GDPR (EEA/UK) Rights

If you are in the EEA or UK, you additionally have the right to:

• Object to processing based on our legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

9.3 California (CCPA/CPRA) Rights

If you are a California resident, you have additional rights including:

• The right to know what personal information is collected and shared
• The right to delete personal information
• The right to opt out of the sale or sharing of personal information (we do not sell)
• The right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at privacy@blastjob.com. We will respond within 30 days (or 45 days for CCPA requests). We may need to verify your identity before fulfilling your request.

We use cookies and similar technologies for:

• Essential Cookies: Required for core functionality (authentication, session management)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how the Service is used

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly. We honour "Do Not Track" signals where required by law.

Your information may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer personal data out of the EEA or UK, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Blastjob is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@blastjob.com and we will delete the information promptly.

The Service may contain links to third-party websites, job boards, and employer portals. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. For material changes, we will notify you by email or through the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, our data practices, or want to exercise your rights, contact us at: