Privacy Policy

Last updated: June 1, 2025

Introduction

This Privacy Policy explains how JobAlchemy ("we", "our", "us") collects, uses, shares, and protects personal data collected through our website, services, and Chrome extension. This policy complies with the General Data Protection Regulation (GDPR), and applicable data protection laws in India and the UAE.

By using JobAlchemy, you agree to the terms of this Privacy Policy.

Data We Collect

Personal Data

Authentication Data:

  • Email address (via Google sign-in or manual sign-up)
  • Password (if opting for manual sign-up)

Professional Data:

  • Work experience details
  • Educational background
  • Skills and certifications
  • LinkedIn profile URL

Usage Data

  • Information about interactions with our website and Chrome extension
  • Browser type, device information, IP address, and timestamps

How We Collect Data

We collect data directly from you when:

  • You sign-up via Google authentication or manually
  • You manually input professional and educational information
  • You provide your LinkedIn profile link

We also collect usage data automatically through cookies, server logs, and analytics tools.

Note: We do not collect résumés, cover letters, or job descriptions from you. Instead, we generate these documents based on the professional information you provide.

Purpose of Data Collection

JobAlchemy collects data to:

  • Provide and enhance services
  • Personalize user experiences
  • Communicate important updates and support
  • Facilitate automated job application services
  • Recommend jobs, assess skills, and draft application materials using AI processing
  • Conduct internal research and analytics to improve our offerings

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

Consent

Explicit permission provided during sign-up

Contractual necessity

To deliver the services promised to you

Legitimate interests

Improving our services and customer experience

Data Storage and Security

All personal data is hosted exclusively on Amazon Web Services (AWS) infrastructure located in secure data‑centre regions that offer robust legal protections. AWS holds a broad set of third‑party security certifications and attestations, including ISO 27001, SOC 1/2/3, PCI‑DSS, and compliance mappings for GDPR and the UAE PDPL.

Encryption

All data is encrypted at rest with AES‑256 and in transit using TLS 1.2+

Access Controls

Production environments protected by role‑based access controls and multi‑factor authentication

Physical Security

AWS data centres employ layered physical defences and 24/7 surveillance

Operational Safeguards

Least‑privilege IAM policies and regular security audits

For more details on AWS's security programme, visit: https://aws.amazon.com/compliance/

Data Retention

We retain your personal data only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

Sharing and Disclosure

Your personal data is not sold or rented to third parties. However, we may share your data with:

  • Service providers assisting in delivering our services (e.g., hosting providers, analytics services)
  • OpenAI API for AI text generation
  • Authorities if required by law, regulation, or legal process

International Data Transfers

Your data may be transferred and stored internationally on AWS servers. We ensure all transfers comply with GDPR, Indian, and UAE data protection laws, using appropriate safeguards such as Standard Contractual Clauses.

Your Rights

Under GDPR and applicable local laws, you have rights to:

  • •Access your personal data
  • •Correct inaccurate or incomplete data
  • •Delete your data ("Right to be forgotten")
  • •Restrict or object to data processing
  • •Withdraw consent at any time
  • •Portability of data

To exercise these rights or request immediate deletion of your data, please contact us at support@jobalchemy.ai. Upon receiving your request, we will promptly delete all requested personal data.

Cookies, Log Files, and Analytics

We use cookies, server logs, and analytics tools to enhance your experience, analyze usage patterns, and ensure security. You can manage or disable cookies through your browser settings.

Automated Decision-Making

Certain features, such as job matching and skill scoring, use automated processing. These outputs are informational only and do not have significant legal effects. You may request human review by contacting us.

Compliance with Indian and UAE Data Protection Laws

India Compliance

We comply fully with India's Information Technology Act, 2000 and amendments, including applicable rules and guidelines on sensitive personal data.

UAE Compliance

We comply fully with UAE Federal Law No. 45/2021 on the Protection of Personal Data, implementing necessary security measures and data protection standards.

Children's Privacy

JobAlchemy is not intended for children under 18. We do not knowingly collect or store personal data from individuals under 18 years of age.

Updates to this Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or prominently on our website.

Contact Information

For questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

support@jobalchemy.ai