Privacy Policy
Last updated July 25, 2026
Last updated: July 25, 2026
1. Who we are
NomadJobPass ("we," "us," "NomadJobPass") provides an AI-powered tool that helps job seekers generate tailored cover letters, résumé edits, and interview preparation based on a specific job posting and the user's own résumé. This policy explains what personal data we collect, why, and what rights you have over it.
Contact: support@nomadjobpass.com
2. What we collect
Account data: email address and authentication credentials (handled by Supabase Auth — we do not store raw passwords).
Résumé and application content: the résumé/CV you upload, the job postings you link to, and the documents we generate for you (cover letters, résumé edits, interview prep, follow-up emails). This is personal data, and often sensitive in that it reveals your employment history, education, and career trajectory — we treat it accordingly.
Payment data: we do not collect or store your card details. Payments are processed by a third-party payment processor acting as merchant of record. We receive and store only what's needed to manage your subscription: a customer ID, your subscription tier, and its status.
Usage data: product analytics via PostHog — which pages you visit, which features you use, and product events (e.g. job link pasted, documents generated). This is used to understand product usage and is not sold to third parties.
Newsletter data (if you opt in): email address, opt-in timestamp, and the page/form where you opted in — kept as a proper consent record, not just a yes/no flag.
Technical data: your IP address at signup (used for basic abuse and rate-limit prevention on the free tier) and standard browser/device information from web request logging.
3. How we use your data
- To generate the cover letters, résumé edits, interview prep, and follow-up emails you request. Your résumé and the job posting content are sent to Anthropic's Claude API for this processing — see Section 5.
- To manage your account and subscription.
- To send transactional emails (password resets, receipts).
- To send marketing/newsletter emails only if you've explicitly opted in, which you can withdraw at any time (see Section 6).
- To understand product usage and improve the product, via aggregated/pseudonymised analytics.
- To prevent abuse of the free tier (e.g. detecting disposable-email signups or unusual signup patterns from a single IP).
We do not sell your personal data. We do not use your résumé content to train AI models beyond what is inherent in sending it to Anthropic's API for processing — see Anthropic's own API data-usage policy at anthropic.com/legal/privacy, which is a separate commitment from ours.
4. Legal basis for processing (EU/EEA/UK users)
- Contract necessity: processing your résumé and job posting content to generate the documents you've requested is necessary to perform the service.
- Consent: newsletter emails are sent only with your explicit, recorded consent, which you can withdraw at any time.
- Legitimate interest: basic abuse-prevention (IP-based rate limiting) and product analytics, balanced against your privacy. You can request detail on this balancing via the contact email above.
5. Who we share data with
We share data only with the service providers necessary to run NomadJobPass, each acting as a data processor on our behalf:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication | Account data, résumé/application content |
| Payment processor (merchant of record) | Payment processing | Subscription/billing data — not raw card numbers |
| Anthropic (Claude API) | AI generation of your documents | Résumé content, job posting content |
| PostHog | Product analytics | Usage/event data |
We do not sell personal data to advertisers or data brokers. We do not share your résumé content with other users, employers, or any party outside the processors listed above.
6. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data ("right to erasure"). Deletion requests go through a 30-day delay with a confirmation email before permanent execution — to prevent accidental or malicious permanent data loss. During those 30 days you can cancel the request.
- Export your data in a portable format.
- Withdraw consent for newsletter emails at any time, via the unsubscribe link in any email or from your account settings. This stops future newsletter emails; it does not delete your account or generated documents.
- Object to certain processing based on legitimate interest.
To exercise any of these rights, email support@nomadjobpass.com. We aim to respond within one month, as required under the GDPR, and will tell you if a complex request needs longer.
7. Data retention
- Account and résumé data: retained while your account is active, and for 30 days after a deletion request, after which it is permanently removed. Anonymous accounts that are never returned to are removed after an extended period of inactivity.
- Signup IP address: deleted or anonymised within 30 days of signup — it is not retained indefinitely or used for tracking.
- Generated documents: you keep access to documents you've already generated even after downgrading or cancelling — only the ability to generate new documents is gated by your current tier.
- Newsletter consent records: retained for up to 24 months after you withdraw consent, to demonstrate compliance, then deleted.
8. International data transfers
NomadJobPass is operated from Albania, using service providers that may process data in the United States or other countries outside your own. Where data is transferred internationally, we rely on the safeguards each provider maintains for such transfers (such as Standard Contractual Clauses) under their own data-processing terms.
9. Children's privacy
NomadJobPass is not directed at, and not intended for use by, anyone under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact support@nomadjobpass.com and we will delete it.
10. Cookies and tracking
We use essential cookies for authentication (via Supabase Auth) and privacy-preserving, first-party analytics cookies (via PostHog, configured to minimise personal data). We do not use third-party advertising cookies and we do not sell data to advertisers.
11. Changes to this policy
We may update this policy periodically. Material changes will be communicated via email (if you have an account) and/or a notice on the site before they take effect.
12. Contact
Questions about this policy or your data: support@nomadjobpass.com