Privacy Policy

Effective Date: September 4, 2026 | JobQuill Commercial SaaS Compliance

← Back to Home

1. Introduction & Overview

JobQuill ("we", "us", or "our") provides a job application tracking platform, resume studio, application management tools, and related web and mobile services (collectively, the "Service"). We are committed to protecting your privacy and handling your personal data with transparency and integrity. The Service is operated from the United States and is directed to users in the United States. This Privacy Policy explains our data collection, processing, storage, and protection practices, including your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

2. Information We Collect

We collect information necessary to deliver, personalize, and secure JobQuill. This includes:

  • Account Identifiers: Full name, email address, profile avatar, authentication credentials, and account preference settings.
  • Job Application Data: Job titles, company names, application statuses, interview notes, salary estimates, target links, and custom pipeline tags.
  • Resume & Portfolio Materials: Documents uploaded or generated via Resume Studio, work history, skill records, cover letters, and custom application answers.
  • Billing & Transaction Data: Subscription tier, payment status, customer ID, and transaction history. Payment card details (card number, expiration, CVC) are processed directly by our PCI-DSS compliant payment provider (Stripe) and are never stored on JobQuill servers.
  • Device & Usage Information: IP address, browser type, operating system, unique device identifiers, referral URLs, feature interaction logs, and performance diagnostics.

3. Cookie & Tracking Disclosures

JobQuill uses essential cookies and similar browser storage technologies to operate securely.

  • Strictly Necessary / Essential Cookies: Used for user authentication (Supabase auth session tokens), security, CSRF protection, and session maintenance. These cookies cannot be disabled without breaking core site functionality.
  • Preference & Functionality Cookies: Remember user interface preferences, theme selections, and custom view filters.
  • Analytics & Performance Cookies: Collect aggregated, anonymized usage statistics to help us optimize system responsiveness and page load times.

You can manage or block non-essential cookies through your browser settings. However, disabling essential authentication cookies will prevent login to JobQuill.

4. Stripe Payment Handling

All paid subscription orders and billing operations are processed securely via Stripe, Inc. ("Stripe"). When you upgrade to a paid tier, your credit card and billing information are transmitted directly to Stripe via encrypted connections. JobQuill only receives confirmation of payment, billing zip code, card brand, and tokenized subscriber IDs. For further details on Stripe's security and privacy standards, please review Stripe's Privacy Policy at https://stripe.com/privacy.

5. AI & Data Processing Features

JobQuill offers optional AI-assisted features (such as Resume Studio scoring, content suggestions, and QuillApply tailoring). When you use these features:

  • Your provided resume text, job description parameters, or prompt inputs are processed solely to return output recommendations.
  • We do not sell, rent, or trade your personal resume content to third parties.
  • Your personal job search data is not used to train public, un-gated foundation models without your explicit authorization.
  • AI output (screening answers, cover letters, outreach notes) is shown to you in an editable box before it goes anywhere. Nothing generated is submitted to an employer or a third party unless you place it there yourself.

6. Quill Apply Browser Extension

Quill Apply is an optional browser extension that works with your JobQuill account. It runs on the job posting and application pages you visit so that it can fill application forms from your saved profile, detect when you have applied, and let you save a posting to your JobQuill pipeline. When you use the extension:

  • Pages it reads: The extension reads the content of pages that look like job postings or application forms (job boards, applicant tracking systems, company career pages) to detect the job title, company, location, pay, form fields, and whether an application was submitted. It does not read pages that are not job related, and it never reads your browsing history.
  • What it sends to JobQuill: When you save a job, log an application, or ask Quill for an AI answer, cover letter, or outreach note, the extension sends the posting's URL, title, company, location, pay, and an excerpt of the posting text (up to a few thousand characters) to JobQuill servers, together with your request. This happens only on your action or on a submit you performed; it is never sent in the background.
  • Your autofill profile: The contact, address, work history, education, and preference details you enter under Settings, Quill Apply are stored encrypted on JobQuill servers and copied to the extension's local browser storage so forms can be filled. They are written only into form fields on the page you are on, and only when you trigger auto-fill or accept a reviewed answer. An uploaded resume is attached to a page's file input only when auto-fill runs on that page.
  • Authentication: The extension holds a short-lived token scoped to extension features, not your full account password or session. Removing the extension or using its Reset control clears everything it stores locally.
  • Not collected: The extension does not collect keystrokes, does not read pages outside the job-related detection above, does not track you across sites, and does not use page content for advertising. Page content sent to JobQuill is used only to fulfill the request you made and is subject to this policy.
  • Third-party sites: The job boards and employer sites you use with the extension have their own privacy policies. JobQuill does not control what those sites collect.

The extension's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

7. Sharing & Third-Party Subprocessors

We never sell your personal data. We share information only with trusted third-party service providers (subprocessors) under strict data protection agreements bound by confidentiality:

  • Database & Authentication Infrastructure: Supabase Inc. (cloud database hosting, authentication, and encrypted data storage).
  • Hosting & Content Delivery: Vercel Inc. and cloud web host providers.
  • Payment Processing: Stripe, Inc.
  • Transactional Email & Support: Resend / Email delivery infrastructure.

8. Data Retention & Erasure

We retain your personal data for as long as your account remains active or as required to fulfill the purposes outlined in this policy. If you delete a job application or resume document, it is immediately soft-deleted and permanently purged after a 30-day grace period. If you close your account or request data deletion, all associated personal records are permanently erased from active databases, subject only to necessary legal or tax retention obligations.

9. Your Privacy Rights (CCPA/CPRA)

California residents hold the following rights under the CCPA/CPRA. We extend the same controls to every JobQuill user regardless of where they live, because they are built into the product rather than bolted on for one jurisdiction:

  • Right of Access & Data Portability: You may request a complete export of your personal data in structured JSON format by emailing support@jobquill.app, or from Settings, Account, Privacy.
  • Right to Rectification: You may update or correct your profile and job tracking records at any time within your account dashboard.
  • Right to Erasure (Right to be Forgotten): You may request full account and data deletion by emailing support@jobquill.app, or from Settings, Account, Privacy. We action these by hand and confirm by email when it is done.
  • Right to Restrict or Object to Processing: You have the right to object to or request restrictions on certain processing activities.
  • CCPA/CPRA Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
  • CCPA 'Do Not Sell or Share': JobQuill does not 'sell' your personal data or 'share' it for cross-context behavioral advertising.

10. Security Safeguards

We maintain industry-standard administrative, technical, and physical security measures to safeguard your personal data. These include end-to-end TLS encryption for data in transit, AES-256 encryption for database storage at rest, strict Row-Level Security (RLS) policies in Supabase, and routine vulnerability monitoring. While no internet service can guarantee 100% security, we actively audit our systems to prevent unauthorized access or disclosure.

11. Where Your Data Is Processed

JobQuill is operated from the United States, and your personal data is stored and processed in the United States by our infrastructure providers. The Service is intended for users located in the United States. We do not target, market to, or offer the Service in the European Economic Area or the United Kingdom, and we do not maintain the cross-border transfer mechanisms that offering it there would require.

12. Children's Privacy

JobQuill is designed for job seekers and working professionals, and is strictly not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we discover that a child under 16 has provided us with personal data, we will immediately delete such information.

13. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in our platform, legal requirements, or operational practices. When material updates occur, we will notify registered users via email or prominent in-app notice prior to the changes taking effect. Your continued use of JobQuill after the updated policy takes effect constitutes your acknowledgment and acceptance of the revised policy.

14. Contact Us & Privacy Officer

If you have questions, concerns, or wish to exercise your privacy rights, please contact our Privacy Compliance Team:

Email: support@jobquill.app | Response Time: We respond to all formal privacy requests within 30 days (or sooner as required by law).