We believe privacy is a right, not a feature. This policy explains what we collect, why, and how you can control it. It's written in plain language on purpose.
ReadySetJob ("we", "us", "our") is the data controller for personal data processed through readysetjob.app. We are a solo-founded product currently operating in the EU. You can reach us at hello@readysetjob.app.
When you create an account, we collect your email address, a hashed password, and any optional profile information you provide (name, professional background, target role). This is necessary to provide the service under Art. 6(1)(b) GDPR (performance of a contract).
We store the jobs you save, application statuses, notes, contacts, and documents you create within the platform. This data belongs to you. We process it solely to operate the features you use.
If you join the waitlist before creating an account, we collect your email address, optional name, and optional note. We use this only to send you an invite when your spot is ready. We will never send marketing email to waitlist addresses — only the one invite, then nothing unless you sign up.
On BYOK plans, your Anthropic API key is stored encrypted using AES-256. When you use AI features, we send your profile data and job description to the Anthropic API to generate the requested content. Anthropic processes this data under their own Privacy Policy. We use Anthropic solely as a processor — they may not use your data to train their models under our business agreement.
We collect server-side request logs (IP address, timestamp, endpoint, HTTP status) for security and debugging. Logs are retained for 30 days and then automatically deleted. We do not use these for analytics or profiling.
We use exactly two types of cookies:
localStorage entry (not a cookie) storing your UI theme choice. Never sent to our servers.We use no tracking cookies, no analytics cookies, no advertising cookies.
We do not sell your data. We do not share it with advertisers. The only third party we share data with is:
If we are legally compelled to disclose data (e.g., by court order), we will notify you in advance unless legally prohibited from doing so.
All data is stored in the EU (Railway's Frankfurt region). No data is transferred outside the EEA except for AI requests sent to Anthropic, which is covered by standard contractual clauses under Art. 46(2)(c) GDPR.
As an EU resident, you have the right to:
To exercise any of these rights, email hello@readysetjob.app. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
You can export all your job search data from your account settings at any time (JSON format). You can delete your account from settings → Account → Delete account. This permanently deletes all your data within 30 days.
We use HTTPS everywhere. Passwords are hashed with bcrypt. API keys are encrypted with AES-256 via ASP.NET Data Protection. Authentication tokens are signed and HTTP-only. We regularly review our security posture and keep dependencies patched.
ReadySetJob is not intended for use by anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it promptly.
We may update this policy. If we make material changes, we will email registered users and update the "Last updated" date above. Continuing to use ReadySetJob after changes take effect constitutes acceptance.
Questions or requests: hello@readysetjob.app
We aim to respond to all privacy requests within 5 business days.