Privacy Policy

Last updated: January 16, 2025

1. Introduction

Welcome to Jopto.io ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information You Provide

  • Account Information: Name, email address, password
  • Profile Information: Phone number, location, LinkedIn URL, GitHub URL
  • Resume Data: Work experience, education, skills, certifications
  • Job Preferences: Desired positions, locations, salary expectations
  • Demographic Information (Optional): Gender, ethnicity, veteran status, disability status
  • IMAP Configuration: Email server settings for automated application verification

2.2 Information Automatically Collected

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, click patterns
  • Cookies and Similar Technologies: Session cookies, preference cookies
  • Log Data: Server logs, error reports, performance data

2.3 Information from Third Parties

  • OAuth Providers: Google, Outlook (for authentication)
  • Job Boards: Public job listings and company information
  • Professional Networks: Public profile information from LinkedIn (with your permission)

3. How We Use Your Information

3.1 Core Service Functions

  • Resume parsing and optimization using AI technology
  • Job matching based on your profile and preferences
  • Automated job applications on your behalf
  • Application status tracking and notifications
  • Email verification for job applications

3.2 Service Improvement

  • Analyzing usage patterns to improve our AI algorithms
  • Developing new features based on user behavior
  • Conducting research to enhance job matching accuracy
  • Troubleshooting technical issues

3.3 Communication

  • Application status updates and interview invitations
  • Service announcements and feature updates
  • Customer support responses
  • Marketing communications (with your consent)

4. Data Sharing and Disclosure

4.1 With Your Consent

We share your resume and profile information with employers only when you authorize us to apply for specific positions.

4.2 Service Providers

  • Cloud hosting providers (AWS, Google Cloud)
  • AI/ML service providers for resume optimization
  • Email delivery services
  • Analytics providers
  • Payment processors

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5. Data Security

5.1 Security Measures

  • 256-bit SSL encryption for all data transmissions
  • Encrypted storage for sensitive information (passwords, IMAP credentials)
  • Regular security audits and penetration testing
  • Access controls and authentication protocols
  • Employee training on data protection

5.2 Data Breach Response

In the event of a data breach, we will notify affected users within 72 hours and provide information about the nature of the breach and steps to protect yourself.

6. Your Privacy Rights

6.1 Access and Portability

You have the right to request a copy of all personal information we have about you in a portable format.

6.2 Correction and Update

You can update your profile information at any time through your account settings.

6.3 Deletion

You can request deletion of your account and all associated data. Some information may be retained for legal compliance.

6.4 Opt-Out

  • Marketing emails: Unsubscribe link in every email
  • Cookies: Browser settings to block cookies
  • Analytics: Google Analytics opt-out browser extension

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

8. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it immediately.

9. Third-Party Links

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Cookies Policy

10.1 Essential Cookies

Required for basic site functionality, authentication, and security.

10.2 Analytics Cookies

Help us understand how users interact with our services to improve user experience.

10.3 Preference Cookies

Remember your settings and preferences, such as language selection.

11. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

  • Account data: Until account deletion
  • Application history: 2 years after last activity
  • Communication logs: 1 year
  • Analytics data: 6 months

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising privacy rights

13. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):

  • Legal basis for processing: Consent, contract performance, legitimate interests
  • Data Protection Officer contact: sampeter@jopto.io
  • Right to lodge a complaint with supervisory authorities

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.

15. Contact Information

If you have questions or concerns about this privacy policy or our data practices, please contact us:

Jopto.io Privacy Team

Email: sampeter@jopto.io

Address: 102 S Tejson St, Colorado Springs CO 80903, US

privacy.contact.phone