Legal
Privacy Policy
This policy explains how xelys jobs handles account data, resumes, job activity, AI processing, billing, and privacy rights.
Last updated: June 27, 2026
Who we are
xelys jobs helps people find, evaluate, track, and prepare applications for remote jobs. For privacy questions or rights requests, contact us at [email protected].
Data we collect
- Account data, including your name, email address, avatar, authentication identifiers, and subscription status.
- Profile and resume data, including uploaded PDF files, extracted resume text, work experience, education, skills, target roles, location, timezone, LinkedIn URL, language preferences, writing samples, and application preferences.
- Job and application data, including saved jobs, job URLs, job descriptions, scores, notes, pipeline status, cover letters, LinkedIn messages, email subjects, talking points, and related AI analysis.
- Anonymous quick-apply data, including the job URL or pasted job description, uploaded or pasted resume text, generated application materials, share tokens, and a hashed IP address used for rate limiting and abuse prevention.
- Usage, billing, and technical data, including AI usage counts, token and cost logs, payment provider identifiers, cookies used for authentication and interface state, local storage used for product state, server logs, device/browser information, and error reports.
How we use data
- Provide authentication, profile management, job tracking, and account controls.
- Parse resumes and job descriptions, score job fit, and generate application materials.
- Operate quick apply for users who do not create an account.
- Enforce plan limits, process payments, prevent abuse, debug issues, and secure the app.
- Respond to support, privacy, legal, and safety requests.
AI processing
Resume text, profile details, job descriptions, and application context may be sent to AI providers to parse data, evaluate matches, and generate draft application materials. Do not upload information you do not want processed for those purposes. AI output can be incomplete or inaccurate, so review all generated content before sending it to an employer.
Service providers
We use vendors only to operate the service. Current categories include hosting and infrastructure, database and file storage, authentication, AI processing, payment processing, error monitoring, and email clients opened from the contact form. These providers may process personal data on our behalf, subject to their own terms and privacy commitments.
Cookies and local storage
The app uses cookies for login sessions and interface state. It also uses browser local storage for product state such as quick-apply progress and dashboard visit markers. We do not currently sell personal information or share it for cross-context behavioral advertising.
Retention
Account data is kept while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. You can delete your account from the account page. Anonymous quick-apply data is kept only as long as needed to provide the generated application, support claiming it into an account, rate-limit abuse, troubleshoot the service, and satisfy legal or security needs.
Your rights and choices
- Access and export your account data from the account page.
- Correct profile data from the profile page.
- Delete your account and stored account data from the account page.
- Contact [email protected] to request access, correction, deletion, restriction, portability, objection, or other rights available under applicable privacy laws.
Depending on your location, laws such as the CCPA/CPRA or GDPR may provide additional rights. We will not discriminate against you for exercising privacy rights.
Children
xelys jobs is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child provided personal data, contact us so we can delete it.
Security
We use access controls, authentication, row-level database protections, rate limiting, and provider security controls to protect personal data. No online service can guarantee perfect security, so use a strong account login and avoid uploading unnecessary sensitive data.
International use
The app and its providers may process data in countries other than your own. By using the service, you understand that your data may be transferred and processed where our providers operate.
Changes
We may update this policy as the product, providers, or legal requirements change. The updated date above shows when this page last changed.