Privacy Policy

Version 1.0 — effective 2026-07-11.

The short version

Free scans are anonymous. The paid report processes the job text you paste (sanitized, with obvious personal identifiers redacted) through an AI provider to extract tasks, and uses the email Stripe collects to send your report link. We don’t sell data, we don’t require accounts, and you can have everything deleted.

What we collect

• Free scan: an anonymous session cookie (jr_sid, random ID, 180 days), the occupation you selected, page events, referrer/UTM parameters, and coarse technical data from standard server logs. No name, no email, no resume.
• Paid report: the work description you paste (stored encrypted), optional seniority/industry, your email address (collected by Stripe at checkout; stored by us encrypted, used to deliver and recover your report), and payment state. Card details never touch our servers — payment is processed by Stripe Checkout.
• Support: whatever you send us, plus your email so we can reply.
• Email updates: only with explicit opt-in; consent is recorded and revocable, and every email includes an unsubscribe path.

AI processing

For paid reports only, your sanitized work description is sent to our AI provider (Anthropic) to extract and classify tasks, and a structured summary (numbers computed by us, never by the model) is sent to generate the written plan. We warn you before submission not to paste confidential employer information, client secrets, passwords, or personal identifiers, and we redact obvious emails, phone numbers, and URLs before the provider call. Your inputs are not used to train models and are not published.

Retention

• Unpaid report input: deleted automatically within 48 hours.
• Paid report input and outputs: retained so you can reopen your report; deleted on request.
• Analytics events: retained in aggregate; raw rows pruned periodically.
• Order records: retained as required for accounting and fraud prevention.

Processors

Stripe (payments), Anthropic (paid-report AI processing), and our hosting provider. Each receives only what its function requires.

Your rights

Request a copy or deletion of your data any time via the contact page (choose “data deletion”). Deletion covers report content, inputs, email records, and support threads; order records that must be retained for accounting are minimized instead.

Cookies

Two first-party cookies: jr_sid (anonymous session) and, in the admin area only, an authentication session for staff. No third-party advertising or analytics cookies.

Contact for privacy matters: jobairisk.com/contact.