Privacy Policy

1. Data Controller & Contact Information

MyJob Agent acts as the Data Controller for the personal data collected through this platform. If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@letsmes.com.

2. Data Collection

When you use the MyJob Agent, we collect information that you explicitly provide to us. This includes your email address (via Google Login), your uploaded Resume/CV (PDF format), and your ranking preferences (e.g., target roles, salary expectations, and location).

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Performance of a Contract: To provide you with our core services (job matching, auto-apply, CV tailoring).
• Consent: When you opt-in to optional features or analytics cookies on our web platform (e.g., Amplitude). You may withdraw consent at any time. Note: the MyJob Agent Chrome extension does not access or read your browser cookies.
• Legitimate Interests: To improve our platform security, prevent fraud, and optimize user experience.

4. Use of AI and Large Language Models (LLMs)

Our platform leverages advanced AI to assist in your job search. When you upload a CV or generate a cover letter, your data is processed by Large Language Models. We use local PII redaction (via Microsoft Presidio) to mask sensitive personal information before any data is sent to external AI models. Your data is never used to train our AI models or third-party models.

5. Data Retention Policy

To minimize data footprint and optimize costs, we enforce strict data retention policies:

• Job Listings: Automatically deleted from our database 90 days after they are sourced.
• CVs and Documents: Automatically deleted from our secure cloud storage 120 days after upload.

6. Beta Testing and Data Disclaimers

MyJob Agent is currently operating in a Public Beta testing phase. By using this service during this period, you acknowledge and agree to the following terms:

• Periodic Data Resets: The application operates in a non-final testing environment. We reserve the right to periodically modify, clean up, reset, or entirely purge database records, user profiles, uploaded resumes, and application tracking data without prior notice to support platform upgrades.
• No Storage Guarantees: We do not guarantee the permanent storage, backup, or eventual recovery of any data entered during the beta period.
• User Responsibility for Backups: Users are solely responsible for protecting their job search history by regularly exporting their tracking records via the built-in CSV export tool.
• Limitation of Liability: We are not liable for any data loss, service interruptions, or operational downtime resulting from maintenance updates or database cleanups during this phase.

7. Third-Party Services & Auto-Apply

We use Google Cloud Platform (GCP) for secure infrastructure hosting and database management. We do not share, sell, or rent your personal information to any external third parties for marketing purposes.

Auto-Apply (Autofill) Feature: If you use the Auto-Apply feature, we will securely transmit your personal data (including your tailored CV, email, and profile information) directly to the respective third-party job boards (e.g., LinkedIn, Indeed) to populate the application forms. You retain final control over the submission. Your data handling on those third-party platforms is governed by their respective privacy policies.

8. Cookies and Tracking Technologies

We use strictly necessary cookies to maintain your login session securely. Additionally, with your consent, we use third-party analytics (Amplitude) to understand how you interact with our platform so we can improve our features. You can manage your cookie preferences through your browser settings.

9. International Data Transfers

Our servers are located on Google Cloud Platform. Depending on your location, your data may be transferred to and processed in countries outside of the EEA (such as the United States). When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your personal data in accordance with GDPR.

10. Security Measures

We implement robust technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest, secure cloud infrastructure, and automated PII redaction. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

11. Your Data Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have certain data protection rights under the General Data Protection Regulation (GDPR). We extend these rights to all our users, regardless of location:

• Right to Access: You can request a copy of all personal data we hold about you.
• Right to Erasure (Right to be Forgotten): You can request that we delete all your personal data. This includes your profile, CVs, and tracking analytics.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Data Portability: You can request to receive your data in a structured, commonly used format.

To exercise any of these rights, please contact our support team. We will respond to your request within 30 days.