Privacy Policy

1.1 Information you provide

• Account data: name and email address; for email/password accounts, we store a password hash rather than the plain-text password. OAuth providers may supply an account identifier and profile details.
• Resume and career content: uploaded PDFs, parsed resume data, work history, education, target-role context, interview answers, and content you create with the Service.
• Payment data: billing address and payment method details processed by our payment provider or Merchant of Record. JRNEY does not store full card numbers in its application database.
• Communications: messages you send to our support team.

1.2 Information collected automatically

• Product telemetry: feature events, timestamps, plan or workflow context, and referral attribution. Event properties are designed to exclude resume text, names, email addresses, phone numbers, and street addresses.
• Technical data: browser or device information supplied by the browser and IP address used for security, rate limiting, consent-region checks, and, where analytics are enabled, coarse geographic attribution. JRNEY does not store raw IP addresses in its internal product-event table.
• Cookies: we use essential cookies for authentication and optional analytics cookies. See Section 6.

• Provide, operate, and improve the Service.
• Process your resume through our AI tools to generate audits, optimizations, and suggestions.
• Process payments and manage subscriptions.
• Send transactional emails (account confirmations, receipts, security alerts).
• Send product updates and tips — only with your consent, and you can unsubscribe at any time.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

• Your resume and related career content may be sent to AI providers, including Google Gemini, to perform the audit, optimization, resume-building, LinkedIn, cover-letter, or interview feature you request.
• JRNEY does not independently repurpose your resume content to train a JRNEY model. Third-party providers process data under their applicable terms, settings, and data-processing commitments; those commitments can change independently of JRNEY.
• AI-generated output (rewritten bullets, scores, suggestions) is stored in your account for your use.
• Account settings let you export account data or close the account. Closing an eligible account removes active workspace records from JRNEY's application database when the request succeeds.

We do not sell your personal information. We share data only in these circumstances:

• Service providers: payment processing, email delivery, cloud hosting, analytics, and AI API providers, including Google Gemini, each bound by data processing agreements where required.
• Legal requirements: when required by law, regulation, or valid legal process.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

• Account and resume data is retained for as long as your account is active.
• When account deletion succeeds, active workspace data is removed from the application database and internal analytics events are detached from the account. Limited billing, legal, fraud-prevention, security, provider, or backup records may remain for the period required by law or reasonably necessary for those purposes.
• Aggregated or de-identified data may be retained where it can no longer reasonably identify you.

• Essential cookies: required for authentication and core functionality. Cannot be disabled.
• Optional browser analytics: Google Analytics and PostHog may load where enabled and permitted. In regions that require prior consent, accepting Terms or creating an account does not itself opt you in. The cookie control records the separate choice.
• Essential product telemetry: authenticated product actions may be recorded server-side without optional analytics cookies so we can provide, secure, and diagnose the Service. These events use restricted properties and are not advertising trackers.
• We do not use advertising trackers or sell data to ad networks.

We use technical and organizational measures designed to protect account and resume data, including authenticated access controls, owner-scoped resource checks, restricted analytics properties, and encrypted network transport in production. No system is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent for optional data processing at any time.
• Object to or restrict certain processing activities.

To exercise any of these rights, contact us at support@jrney.ai. We will respond within the period required by applicable law.

Your data may be processed in the United States or other countries where JRNEY's service providers operate, and those countries may have different data-protection rules. Contact us for information about the providers and transfer safeguards relevant to your account or jurisdiction.

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly. Contact us at support@jrney.ai if you believe a child has provided us data.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

If you have questions or concerns about this Privacy Policy or your data, contact us at: