Privacy Notice

Effective Date: December 25, 2025

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. For a comprehensive inventory of all personal information we process, please refer to the section "Notice at Collection: Categories of Information."

Use and Retention of Sensitive Personal Information

We only collect sensitive personal information as defined by applicable privacy laws for purposes allowed by law or with your consent. Sensitive personal information may be used or disclosed to a service provider or contractor for additional, specified purposes. You may have the right to limit the use or disclosure of your sensitive personal information. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A (Identifiers): As long as the user has an account with us
• Category F (Internet Activity): As long as the user has an account with us
• Category G (Geolocation): As long as the user has an account with us
• Category I (Professional Information): As long as the user has an account with us
• Category L (Sensitive Personal Information): As long as the user has an account with us

1. Notice at Collection: Categories of Information

2. Third-Party Service Providers

We utilize specific third-party vendors to maintain our infrastructure. These parties are contractually prohibited from processing your data for any purpose other than those instructed by JustAJobApp LLC:

3. Specialized Data Processing: Gmail Synchronization

JustAJobApp serves as a specialized data processor using the Google OAuth2 framework and the Gmail API. We utilize the following technical protocols:

• Refresh Token Authentication: The App utilizes secure, encrypted refresh tokens rather than account passwords to maintain connectivity.
• Background Synchronization: These tokens allow the App to periodically check for updates or new submissions in the background without requiring active user login.
• Incremental Synchronization: We only request messages received after the timestamp of your last successfully processed email.

4. Targeted Data Filtering

The Gmail API is filtered through three distinct layers to ensure privacy:

• Initial Discovery: Potential job-related messages are identified based on keywords defined in our applied_email_filter.yaml.
• LLM-Based Analysis: An analysis layer defined in our llm_utils.py utilizes programmatic filters to discard newsletters and personal data unrelated to your job search.
• Domain-Based Optimization: As applications are verified, future fetches may rely on stored email domains from verified job-related emails to maintain tracking reliability.

5. International Users: United States Processing

JustAJobApp LLC is based in the United States and the Websites are hosted in the United States. If you are accessing the Websites from the European Union, Asia, or any other region with laws governing data collection and use that differ from U.S. law, please note that you are transferring your personal data to the United States.

By providing your personal data, you consent to:

• The use of your personal data for the specific job-tracking purposes identified above.
• The transfer and processing of your personal data in the United States.

6. Compliance to the Google API Services User Data Policy

JustAJobApp's use and transfer of data to any other app of information received from Google’s Accounts will adhere to the Google API Services User Data Policy including Limited Use requirements.

• NO Human Access to your data unless explicitly authorized by you for support.
• NO Data Transfer to third parties for targeted advertising.
• NO Use for AI Training: We do not use Google Workspace data to train generalized AI/ML models.
• NO Sale or Share of Data for Minors: JustAJobApp LLC has no actual knowledge that it sells or shares the personal information of consumers under 16 years of age.

7. Your California Privacy Rights (CPRA)

• Right to Know: Disclosure of what data points are collected.
• Right to Delete: Request data purge, subject to IRS guidance.
• Right to Correct: Rectify inaccurate personal information.
• Right to Opt-Out: JustAJobApp does not sell or share data for behavioral advertising.
• Right to Limit Use: We restrict mailbox data usage to core service functions.
• Global Privacy Control (GPC): We honor Global Privacy Control (GPC) signals. If our system detects a GPC signal from your browser, we will automatically opt you out of the "sharing" of your personal information for cross-context behavioral advertising.

Verification Process for Privacy Requests

Under the CPRA, we are required to verify the identity of consumers making privacy requests (including requests to know, delete, or correct personal information). When you submit a privacy request, we will verify your identity by matching the email address of the requester with the email address on file associated with your JustAJobApp account. In some cases, we may require additional verification, including a signed declaration under penalty of perjury, to ensure we are processing legitimate requests and protecting your account security.

Authorized Agents

California law requires us to allow consumers to designate an authorized agent to make requests on their behalf. You may designate an authorized agent to submit a request on your behalf. We may require written proof of the agent's permission and verify your identity directly. Please contact us at privacy@justajobapp.com to designate an authorized agent.

8. Administrative Access

Engineers may locate individual emails related to a Job Application only in response to a bug report, authorized support request, or security investigation. All production data access must be specifically authorized by JustAJobApp LLC.

9. Changes and Updates to this Privacy Policy

We may occasionally update this Privacy Policy. When we do, we will also revise the Effective Date at the top of this page. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting the personal information we collect. Your continued use of the Websites constitutes your agreement to this Privacy Policy and any updates.

10. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

11. Accessibility Statement

The CCPA requires that privacy policies be accessible to consumers with disabilities. If you have a disability and need to access this notice in an alternative format, please contact us at privacy@justajobapp.com.

12. Contact Information