Privacy Policy

Effective Date: October 7, 2026 | JobQuill Commercial SaaS Compliance

← Back to Home

1. Introduction & Overview

JobQuill LLC, a California limited liability company ("JobQuill", "we", "us", or "our"), provides a job application tracking platform, resume studio, application management tools, and related web and mobile services (collectively, the "Service"). We are committed to protecting your privacy and handling your personal data with transparency and integrity. The Service is operated from the United States and is directed to users in the United States. This Privacy Policy explains our data collection, processing, storage, and protection practices, including your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

2. Information We Collect

We collect information necessary to deliver, personalize, and secure JobQuill. This includes:

  • Account Identifiers: Full name, email address, profile avatar, authentication credentials, and account preference settings.
  • Google Account Information: If you choose Sign in with Google, the name, email address, profile picture, and account identifier that Google shares with us. How we access, use, store, share, and delete this Google user data is described in Section 7.
  • Job Application Data: Job titles, company names, application statuses, interview notes, salary estimates, target links, and custom pipeline tags.
  • Job Alerts: The roles and places you follow on the Job Board for new job emails, with when each alert was made, last checked and last emailed. You can delete an alert from Settings, Account at any time, every alert is deleted with your account, and alert emails can be switched off in Settings, Account or with the unsubscribe link in any alert email.
  • Resume & Portfolio Materials: Documents uploaded or generated via Resume Studio, a resume file you upload for Quill Apply autofill, work history, skill records, cover letters, custom application answers, and a saved copy of the resume you sent with each application.
  • Billing & Transaction Data: Subscription tier, payment status, customer ID, and transaction history. Payment card details (card number, expiration, CVC) are processed directly by our PCI-DSS compliant payment provider (Stripe) and are never stored on JobQuill servers.
  • Device & Usage Information: IP address, browser type, operating system, unique device identifiers, referral URLs, feature interaction logs, and performance diagnostics.

3. Cookie & Tracking Disclosures

JobQuill uses essential cookies and similar browser storage technologies to operate securely.

  • Strictly Necessary / Essential Cookies: Used for user authentication (Supabase auth session tokens), security, CSRF protection, and session maintenance. These cookies cannot be disabled without breaking core site functionality.
  • Preference & Functionality Cookies: Remember user interface preferences, theme selections, and custom view filters.
  • Analytics & Performance Cookies: Collect aggregated, anonymized usage statistics to help us optimize system responsiveness and page load times.
  • Attribution Cookie: The first time you arrive from a tagged link or on certain landing pages, a 30-day cookie records the link's code and any campaign tags, the page you landed on, the referring site's host name and the time. If you sign up, that record is saved to your account so we know which page brought you.

You can manage or block non-essential cookies through your browser settings. However, disabling essential authentication cookies will prevent login to JobQuill.

4. Stripe Payment Handling

All paid subscription orders and billing operations are processed securely via Stripe, Inc. ("Stripe"). When you upgrade to a paid tier, your credit card and billing information are transmitted directly to Stripe via encrypted connections. JobQuill only receives confirmation of payment, billing zip code, card brand, and tokenized subscriber IDs. For further details on Stripe's security and privacy standards, please review Stripe's Privacy Policy at https://stripe.com/privacy.

5. AI & Data Processing Features

JobQuill offers optional AI-assisted features (such as Resume Studio scoring, content suggestions, and QuillApply tailoring). When you use these features:

  • Your provided resume text, job description parameters, or prompt inputs are processed solely to return output recommendations.
  • We do not sell, rent, or trade your personal resume content to third parties.
  • Your personal job search data is not used to train public, un-gated foundation models without your explicit authorization.
  • AI output (screening answers, cover letters, outreach notes) is shown to you in an editable box before it goes anywhere. Nothing generated is submitted to an employer or a third party unless you place it there yourself.

6. Quill Apply Browser Extension

Quill Apply is an optional browser extension that works with your JobQuill account. It runs on the job posting and application pages you visit so that it can fill application forms from your saved profile, detect when you have applied, and let you save a posting to your JobQuill pipeline. When you use the extension:

  • Pages it reads: The extension reads the content of pages that look like job postings or application forms (job boards, applicant tracking systems, company career pages) to detect the job title, company, location, pay, form fields, and whether an application was submitted. It does not read pages that are not job related, and it never reads your browsing history.
  • What it sends to JobQuill: When you save a job, log an application, or ask Quill for an AI answer, cover letter, or outreach note, the extension sends the posting's URL, title, company, location, pay, and an excerpt of the posting text (up to a few thousand characters) to JobQuill servers, together with your request. This happens only on your action or on a submit you performed; it is never sent in the background.
  • Your autofill profile: The contact, address, work history, education, and preference details you enter under Settings, Quill Apply are stored encrypted on JobQuill servers and copied to the extension's local browser storage so forms can be filled. They are written only into form fields on the page you are on, and only when you trigger auto-fill or accept a reviewed answer.
  • Your resume file: If you upload a resume file (PDF or Word) under Settings, Quill Apply, JobQuill stores a copy of it in our database with your account so the extension can attach it to application forms. It is covered by the at-rest encryption described in Section 11, but not by the additional encryption applied to your autofill profile. The extension downloads it only when auto-fill runs on a page that has a file upload field, keeps it in that page's memory rather than in its local storage, and places it in the page's resume or file upload fields. Many application systems upload and read a file as soon as it is placed in their upload field, so once the extension attaches it, that employer's site may receive it before you submit the form. While the extension's 1-Click Auto-fill switch is on, auto-fill runs by itself on job and application pages as they load; turn it off if you would rather decide when auto-fill runs. You can replace or remove the file on the same settings screen at any time, and it is deleted with your account.
  • Resume match: To show how your resume lines up with a posting, the extension keeps the skills list and text of your default resume (not your name or contact details) in its local browser storage and compares them with the posting on the page, in your browser. Nothing from the page is sent for this. On Pro, two optional reads use our AI provider. If you ask Quill to read a posting from the match panel, the extension sends that posting's requirement lines (not the rest of the page) to JobQuill, which sends them with your default resume's text to the provider to find what the posting asks for and what your resume shows. Quill also reads your default resume's text to list the skills it shows. Each answer comes back with the lines that prove it and is kept in the extension's local storage; the resume read is repeated automatically when that resume changes.
  • Authentication: The extension holds a short-lived token scoped to extension features, not your full account password or session. Removing the extension or using its Reset control clears everything it stores locally.
  • Not collected: The extension does not collect keystrokes, does not read pages outside the job-related detection above, does not track you across sites, and does not use page content for advertising. Page content sent to JobQuill is used only to fulfill the request you made and is subject to this policy.
  • Third-party sites: The job boards and employer sites you use with the extension have their own privacy policies. JobQuill does not control what those sites collect.

The extension's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

7. Google User Data (Sign in with Google)

You can create or sign in to your JobQuill account with your Google account instead of a password. This section explains how JobQuill accesses, uses, stores, shares, retains, and deletes Google user data when you choose Sign in with Google.

  • Data accessed: With your permission, JobQuill accesses only the basic Google user data covered by the openid, email, and profile scopes: your name, email address, profile picture, and a unique Google account identifier. JobQuill does not request or access your Gmail, Google Drive, Google Calendar, contacts, or any other data in your Google account.
  • Data usage: JobQuill uses Google user data only to provide and improve user-facing features of the Service: creating your account, signing you in, and sending you account and service emails. Your email address identifies your account and is where those emails go. Your name is used to greet you in the app. Your profile picture is stored with your sign-in record but is not currently displayed. If your Google email address matches an existing JobQuill account, Google sign-in is linked to that account instead of creating a second one.
  • Uses we do not make: JobQuill does not use Google user data for targeted or personalized advertising, does not sell it to data brokers or information resellers, and does not use it to determine creditworthiness or for lending purposes.
  • AI and machine learning: JobQuill does not use Google user data, including any data obtained through Google Workspace APIs, to develop, improve, or train generalized or non-personalized AI and/or ML models.
  • Data storage and protection: Google user data is stored with your account by our authentication provider, Supabase, in the United States. We protect it with encryption, using TLS in transit and AES-256 at rest, along with the other safeguards described in Section 11.
  • Data sharing: We do not transfer or disclose Google user data to third parties for purposes other than the ones described in this section. It is shared only with the service providers listed in Section 8, and only as needed to operate the Service: our database and authentication provider stores it, our email provider uses your email address to deliver account emails, and if you start a paid subscription, Stripe uses your email address to manage your billing record.
  • Data retention and deletion: We retain Google user data for as long as your account is active, which is the length of time needed to provide the Service. You can remove JobQuill's access at any time from the third-party connections page of your Google Account. You can have your Google user data deleted by deleting your account yourself from Settings, Account, Danger zone, or by emailing support@jobquill.app, as described in Sections 9 and 10.

JobQuill's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Sharing & Third-Party Subprocessors

We never sell your personal data. We share information only with trusted third-party service providers (subprocessors) under strict data protection agreements bound by confidentiality:

  • Database & Authentication Infrastructure: Supabase Inc. (cloud database hosting, authentication, and encrypted data storage).
  • Hosting & Content Delivery: Vercel Inc. and cloud web host providers.
  • Payment Processing: Stripe, Inc.
  • Transactional Email & Support: Resend / Email delivery infrastructure.

9. Data Retention & Erasure

We retain your personal data for as long as your account remains active or as required to fulfill the purposes outlined in this policy. If you delete a job application or resume document, it is immediately soft-deleted and permanently purged after a 30-day grace period. When a resume is recorded as sent with an application, a copy of it is saved for that application. The copy is kept while the resume it came from exists, or while an application still uses it. It is erased when you delete the resume together with its copies, as soon as no application uses it once the resume is deleted, or when you close your account. If you close your account or request data deletion, all associated personal records, saved resume copies included, are permanently erased from active databases, subject only to necessary legal or tax retention obligations. If you create a progress card, the numbers on it are visible to anyone with its link until it expires 180 days later, including after you delete your account. The card carries no name, email or company.

10. Your Privacy Rights (CCPA/CPRA)

California residents hold the following rights under the CCPA/CPRA. We extend the same controls to every JobQuill user regardless of where they live, because they are built into the product rather than bolted on for one jurisdiction:

  • Right of Access & Data Portability: You may download your job applications as a CSV file yourself, at any time, from Settings, Account, Privacy. For a complete copy of your personal data, email support@jobquill.app (the same Privacy tab has a button that starts that email). A person assembles the copy and replies to you by email.
  • Right to Rectification: You may update or correct your profile and job tracking records at any time within your account dashboard.
  • Right to Erasure (Right to be Forgotten): You may delete your account and all of its data yourself from Settings, Account, Danger zone. It takes effect immediately, and any paid subscription is cancelled first. You may also email support@jobquill.app, and we will do it by hand and confirm by email when it is done.
  • Right to Restrict or Object to Processing: You have the right to object to or request restrictions on certain processing activities.
  • CCPA/CPRA Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
  • CCPA 'Do Not Sell or Share': JobQuill does not 'sell' your personal data or 'share' it for cross-context behavioral advertising.

11. Security Safeguards

We maintain industry-standard administrative, technical, and physical security measures to safeguard your personal data. These include end-to-end TLS encryption for data in transit, AES-256 encryption for database storage at rest, strict Row-Level Security (RLS) policies in Supabase, and routine vulnerability monitoring. While no internet service can guarantee 100% security, we actively audit our systems to prevent unauthorized access or disclosure.

12. Where Your Data Is Processed

JobQuill is operated from the United States, and your personal data is stored and processed in the United States by our infrastructure providers. The Service is intended for users located in the United States. We do not target, market to, or offer the Service in the European Economic Area or the United Kingdom, and we do not maintain the cross-border transfer mechanisms that offering it there would require.

13. Children's Privacy

JobQuill is designed for job seekers and working professionals, and is strictly not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we discover that a child under 16 has provided us with personal data, we will immediately delete such information.

14. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in our platform, legal requirements, or operational practices. When material updates occur, we will notify registered users via email or prominent in-app notice prior to the changes taking effect. Your continued use of JobQuill after the updated policy takes effect constitutes your acknowledgment and acceptance of the revised policy.

15. Contact Us & Privacy Officer

If you have questions, concerns, or wish to exercise your privacy rights, please contact our Privacy Compliance Team:

JobQuill LLC, 2108 N St Ste N, Sacramento, CA 95816 | Email: support@jobquill.app | Response Time: We respond to all formal privacy requests within 30 days (or sooner as required by law).