Privacy Policy | FitMeToJob

1. WHO WE ARE AND SCOPE

FitMeToJob provides AI-powered career tools: CV (resume) tailoring, automated job application submission ("Auto Apply"), and a Telegram job search bot. This Policy covers all of these services. It forms part of our Terms of Service (Public Offer Agreement). For any privacy question or request, contact us at support@fit-me-to-job.com.

2. INFORMATION WE COLLECT

2.1. Account Information

When you register we collect your email address and name. If you sign in with Google, we also receive your Google account identifier and profile picture (we request only your basic profile and email - we do not access your Gmail, contacts, or files). If you register with a password, we store it only in hashed (non-readable) form. We also generate an "autofill password" for your account - a separate password that Auto Apply can use to create accounts on job sites for you; it is stored encrypted and you can view and change it in your settings at any time.

2.2. CV and Career Data

When you upload or build a CV we collect and store its full content: your name, job title, seniority, contact details (email, phone, location, LinkedIn, GitHub, portfolio links), summary, skills, education, languages, and work experience, as well as the uploaded file itself (PDF, DOC, DOCX, or TXT). We also store the tailored CV versions and PDFs we generate for you, generated cover letters, the job postings you tailor against (pasted descriptions or fetched from URLs you provide), match scores, your adaptation preferences, and any ratings or feedback you give on results.

2.3. Auto Apply Application Records

For each Auto Apply job we store the job URL you provided, the run status and step-by-step record, the form fields that were filled and the values entered (such as your contact details and answers to screening questions), any answers you typed when the run asked for input, screenshots of the application pages (so you can verify what was submitted), the confirmation text from the site, and any dispute you open with its resolution.

2.4. Saved Website Logins and Sessions

When you sign in to a third-party website during an Auto Apply run or job-URL fetch (including via the live browser view), we save the resulting browser session state (cookies and similar data) in encrypted form so future runs can skip the login step. If you signed in with an external provider (e.g., Google or Facebook) on that site, the session data may include that provider's cookies. Sessions expire automatically (currently after about 30 days of inactivity) and you can delete them in the app at any time. Separately, if - and only if - you tick "Remember this login", we store your username and password for that specific website in encrypted form; you can delete saved logins in the app at any time. Passwords you type in the live browser view go directly to the third-party website.

2.5. Payment Information

Payments are processed by Paddle.com as Merchant of Record. Paddle collects your payment card details - we never see or store them. From Paddle we receive and store a record of each transaction: transaction ID, plan or credit pack purchased, amount, currency, and the email associated with the purchase.

2.6. Telegram Bot Data

If you use our Telegram bot we collect your Telegram user ID and display name, your saved job searches (job title, location, seniority, compensation preferences), CV data you provide to the bot, your notification schedule, and your subscription and credit status.

2.7. Usage and Technical Data

We keep a history of credit transactions and service actions on your account, task and error logs (which may include your user ID and the action that failed), and standard technical data collected through cookies and the analytics tools described in Section 6.

3. HOW WE USE YOUR INFORMATION

To provide the services: tailoring your CV, generating cover letters and scores, submitting job applications you request, and running the Telegram bot
To operate your account: authentication, credit balance, purchase fulfillment, and payment confirmation
To keep verifiable records of Auto Apply runs so you can review, retry, and dispute applications
To remember your third-party site logins between runs (only as described in Section 2.4)
To provide support and respond to your requests, including password reset emails
To secure the service, prevent fraud and abuse, and enforce our Terms
To measure and improve the service, including analytics and advertising conversion measurement (Section 6)

We do not sell your personal data, and we do not use the content of your CVs for advertising.

4. AI PROCESSING

Our AI features are powered by third-party AI model providers acting as our processors:

4.1. OpenAI

CV parsing, tailoring, match scoring, and cover letter generation are performed using OpenAI models. For these features, the text content of your CV, the target job description, and your adaptation preferences are sent to OpenAI for processing.

4.2. Anthropic

The Auto Apply form-filling agent and the job-URL page reader are powered by Anthropic (Claude) models. For these features, the content and screenshots of the job application or job posting pages, together with the applicant details needed to fill the forms (name, contact details, professional links, summary, cover letter, and your answers), are sent to Anthropic for processing.

4.3. What AI Models Never Receive

Your passwords - account, saved website logins, and autofill password - are never sent to any AI model; login credentials are entered by our system directly into the website's login form. Your uploaded CV file is uploaded to job sites directly and is not itself sent to the form-filling model.

5. WHO WE SHARE DATA WITH

Employers and job websites you direct us to: when you use Auto Apply (or apply yourself), your CV, cover letter, contact details, and answers are submitted to the websites and employers you chose. Their handling of your data is governed by their own privacy policies.
AI providers: OpenAI and Anthropic, as described in Section 4.
Paddle: our Merchant of Record for payments (they receive your email and payment details).
Google: analytics and advertising services on our website (Google Tag Manager, Google Analytics 4, Google Ads conversion tracking) - see Section 6.
Infrastructure providers: hosting and network providers that run our servers. During some live browser sessions, traffic to the third-party website may be routed through a proxy network provider to improve reliability.
Legal: where required by law, or to protect our rights, users, or the public.

6. COOKIES AND ANALYTICS

We use the following cookies and similar technologies on the website:

Essential cookies: session and security cookies that keep you signed in (set by our authentication system). The service cannot work without them.
Analytics and advertising: Google Tag Manager, Google Analytics 4, and Google Ads conversion tracking set cookies (such as _ga and _gcl_*) to help us understand usage and measure advertising. Events we track include sign-ups, checkouts, purchases, and completed CV tailoring - not the content of your CVs.
Payments: Paddle's checkout scripts may set cookies needed to process payments and prevent fraud.

Your choice: when you first visit the website, a cookie banner asks whether to allow analytics and advertising cookies. Until you accept - and by default for visitors in the EU/EEA, UK, and Switzerland - these cookies are not set and Google's tools run in cookieless consent mode. You can change your choice at any time here: .

You can also control cookies through your browser settings, opt out of Google Analytics via the Google Analytics opt-out add-on, and manage ad personalization at adssettings.google.com.

7. DATA RETENTION

Saved website sessions: expire automatically after a limited period (currently about 30 days of inactivity) and can be deleted by you at any time.
Saved website logins ("Remember this login"): kept until you delete them in the app.
Auto Apply records and screenshots: kept so you can review and dispute applications; deleted when you delete the application record in the app.
CVs, tailored CVs, cover letters, and job descriptions: kept in your account until you delete them or request account deletion.
Payment records: retained as required for accounting, tax, and legal purposes.
Account data: kept while your account is active and deleted upon a verified deletion request (Section 9).

8. DATA SECURITY

We protect your data with technical and organizational measures, including encryption of data in transit (HTTPS), encryption at rest for saved website logins, sessions, and your autofill password, one-way hashing of account passwords, verification of payment webhooks, and access controls on our infrastructure. No system is perfectly secure, so we cannot guarantee absolute security; if a breach affecting your data occurs, we will notify you as required by applicable law.

9. YOUR RIGHTS AND CHOICES

Depending on your location (for example under the GDPR in the EU/EEA or the UK), you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. Regardless of location, we offer everyone the following:

In the app: you can view, edit, download, and delete your CVs and tailored CVs; delete Auto Apply records (including their screenshots); delete saved website logins and sessions; and view or change your autofill password.
By email: to access, correct, export, or delete your account and all associated data, contact support@fit-me-to-job.com from the email address on your account. We respond within a reasonable timeframe and in any case within the period required by applicable law.
Complaints: if you are in the EU/EEA or UK, you may also lodge a complaint with your local data protection authority.

Note that data already submitted to employers and job websites through Auto Apply is under those third parties' control - deletion requests for that data must be directed to them.

10. INTERNATIONAL DATA TRANSFERS

The third-party providers we rely on (including OpenAI, Anthropic, Paddle, and Google) may process data in countries other than your own, including the United States. Where required, such transfers are protected by appropriate safeguards such as the providers' standard contractual clauses and data processing agreements.

11. CHILDREN

Our services are intended for people of working age and are not directed to children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, please contact us and we will delete it.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Updated versions will be published on this page with a new "Last Updated" date. Material changes will be highlighted on the website or communicated to you where required.

CONTACT US

FitMeToJob

Email (privacy requests and support)

support@fit-me-to-job.com

Telegram Bot

@FitMeToJob_bot

Last Updated: July 10, 2026

This Privacy Policy should be read together with our Terms of Service (Public Offer Agreement). By using FitMeToJob services, you acknowledge that you have read and understood this Policy.