Privacy.

The short version

• Your job search is yours. We keep it so you and the AI agents you approve can use it. Jobs.Dog also uses what you do here, such as the jobs you save or pass, to rank the jobs it shows you and to improve our matching.
• Your agent works under its vendor’s terms. Your agent reads and writes to your account. Its vendor, whichever company it is, sees what it reads, under your own account with that vendor and that vendor’s terms, not ours.
• Jobs.Dog Assistant. The assistant is on for every account whose plan includes it, and for a Free account while it sets up its search and, after that, to change its search. Nothing of yours is sent to Anthropic until you ask it a question or let it read your resume. When you ask, what you type, your criteria and your coverage go with that question (and, if you let it read your resume, whatever your plan, its text, with your name and contact details taken out where we find them), and jobs, companies, applications, new jobs we found for you, counts of how you answered new matches and the profile lines you confirmed go as the question needs them. Anthropic runs its model for us under its terms. You can turn the assistant off in Settings, and turning it off stops any further sending. We keep each conversation, encrypted, for 400 days while chat sharing is on and 30 days while it is off.
• Your agent can add to your account. A job you hand it, notes and things it read in your mail can end up in your account. We treat all of it as yours, and as sensitive where it could be.
• You can turn usage analytics off. Inside the signed-in app we count how Jobs.Dog is used, so it can work better, including session replays with text masked. It is on until you turn it off. We ask when you set up, and you can change your answer any time in Settings, on the Account page.
• The browser extension reads a job page only when you click it. It sends the job’s address to Jobs.Dog to check whether it is saved, sends the details only when you press Save, holds no password or sign-in, and never fills in or sends anything on the job page.
• A few companies help us run the service: Supabase (database and sign-in), Vercel (hosting and page analytics), PostHog (usage events inside the signed-in app), Resend (email), Google Workspace (our inbox), Anthropic (the assistant’s model, only when you ask the assistant a question or let it read your resume, and short summaries of public job postings in our catalog), Stripe (payments), Cloudflare (our domain’s DNS) and Better Stack (uptime checks and our status page). They work for us under contract.
• Job postings come to us, and nothing of yours goes back. We read employers’ public job feeds and receive postings from Fantastic.jobs, a job data provider we license. We send nothing about you to either, and nothing to any employer.
• You can sign in with Google or Apple. Each then learns that you use Jobs.Dog and when you sign in, and we receive your name and email address from it.
• You are in control. Download everything or delete your account on Settings, Account, at any time, or write to privacy@jobs.dog. Application details are optional, are kept sealed, and your agent reads them only while it works on an application you asked for.
• We are a small US service. Jobs.Dog is for people in the United States who are 18 or older.

Who we are

Jobs.Dog is run by VeryBadDog LLC, a Delaware limited liability company operating in Washington State, doing business as Jobs.Dog (“we”, “us”). The service is at jobs.dog. We are the business responsible for your information under the privacy laws that apply to it.

Questions about your data, or a request to see, correct or delete it: privacy@jobs.dog. Anything else: hello@jobs.dog.

What we collect

We describe this broadly on purpose: we list every kind of information your account can hold, not only what is there today.

• Account and sign-in. Email address; password, stored only as a hash; the name you give the account; when it was created; the sign-in methods you link, each with its provider (Google or Apple), the address it gave us and the date you connected it; two-step sign-in settings; the access code you joined with; any campaign tags in the link that brought you to sign up, and the kind of site you came from (such as a search engine). From: You.
• Sign-in with Google or Apple. Only if you use either: your name and email address from the provider, or, with Apple’s Hide My Email, an Apple private relay address instead. If Apple tells us you turned off forwarding to a relay address, a one-way hash of that address (not the address), kept so we stop emailing it and deleted when forwarding is turned back on, the Apple sign-in is removed, or the account is deleted. From: Google or Apple, when you sign in with it.
• Sessions and sign-in records. Session cookies; the record of each sign-in, sign-out, token refresh and password change, with the IP address and browser that made it. From: Your browser and our sign-in service.
• Application details. Only what you choose to enter on Settings, Application details: the name, contact details and address you use on applications; links, including a link to your resume; that you are 18 or older, if you tick that box (we never store a “no”); a notice period; your preference for voluntary self-identification questions (“always decline” or “ask me each time”); and, only with your separate permission, whether you may work, and whether you need sponsorship, in each country you list. From: You.
• Résumé files. Only what you add on Profile or in Muttly’s chat: each PDF or Word file you upload, its name and size, the text taken from it, which one you made your primary, and whether you made it for a particular job. From: You.
• Profile entries. Only what you confirm or type on Profile: your jobs, schools, certifications, languages, skills, projects, awards, publications and volunteering, each with its dates, place and the lines under it; the lines Jobs.Dog proposed from a file and the quotes they came from, until you confirm or remove them; and your standard answers, such as whether you would relocate. From: You.
• Your agreements. Which version of our terms and of this policy you accepted, when and how, and when you gave or withdrew permission for work authorisation and sponsorship answers, or for the assistant to read your resume. From: You.
• Account contents. Companies, their careers pages, locations, tags and notes; jobs, with titles, links, dates, locations, work mode, level, pay, the full description and summaries; anything else you or your agent write to your account, including text taken from job postings, web pages and email. From: You and your agent. For a job you keep from the postings we matched to your search, the employer’s job feed or Fantastic.jobs, the job data provider we license.
• Current pay. Only if you enter it: the pay you get now, its currency and period, and when you saved it. We never ask for or keep your pay at past jobs. From: You.
• Search questions. Only the ones you choose to answer: what best describes your search, a note in your own words, how you heard about Jobs.Dog, your years of work, your situation, your AI app and your kind of work. From: You.
• Plan and billing. Your plan, its status, how often you pay, when it renews, whether you cancelled and the reason you picked if you picked one, refunds, when a beta plan ends, and the reference numbers Stripe gives us. You enter your card and billing address on Stripe’s page. Stripe keeps them and your payment history, and we never receive your full card number. From: You, us and Stripe.
• Your decisions. Stars, verdicts, your reasons, the day you marked a job applied, and a history of each change and who made it. From: You, and your agent.
• Application records. When you applied, how, the stage each application reached, next rounds with their dates and notes, a dated history, and the email address an application was sent from or a reply came from. From: You and your agent.
• Replies and message contents. What your agent records from messages it read for you: who wrote, when, what it means for the application, and any words from the message it copies into your account. From: Your agent, from your mail.
• Work queue. The tasks you ask your agent to do, their status, which agent took each one, and any note it left. From: You and your agent.
• Assistant conversations. Only when you ask Jobs.Dog Assistant a question: what you ask it, its answers, what it read from your account to answer, which model answered and when; when you turned it off or back on; and, per day, counts of questions, model calls, how much text went to the model, and what it cost us. From: You and the assistant.
• Connected agents. Which AI apps you approved, the name each app gave itself, when you approved it, what it may do, what it said it can do, when it was last seen doing it, and when you disconnected it. From: You, your agent and our sign-in service.
• Settings. Time zone, weekly target, the view that opens first, the market you look in, columns and colour scheme, and which notifications you get. From: You.
• Notifications. The notifications we sent you or showed you in the app, and the ones we held back and why; which jobs each was about, by reference; when each was delivered, opened or pressed, bounced, marked as spam or unsubscribed from. From: The service, your mail app and Resend.
• Access codes you share. Codes you create so others can join, with any note you add, their expiry and how often they were used. From: You.
• Imports. If your records were moved in for you: where they came from, a checksum of the files, and counts. From: You.
• Device, usage and log data. IP address; browser and device type; operating system; pages and addresses requested; referring page; approximate location (country or region) worked out from the IP address; how fast pages load; session replays in the signed-in app (page layout, clicks and scrolls, with text masked); error records with an internal reference number. From: Your browser and device, automatically.
• Launch list. Email address; the kind of job you want; the industry you picked; your US state, or that you are outside the US; which page you used; any campaign tags in the link that brought you, and the kind of site you came from (such as a search engine); when you joined. From: You.
• Email engagement. For the launch email, product updates and notification email only: whether each message was delivered, whether it was opened, which links in it were pressed, and when, with the IP address and mail app that opened it or followed the link. Never for sign-in, password, account or other security email. From: Your mail app, automatically.
• Messages to us. Your email address, what you write, anything you attach, and our replies, including requests about your data, and feedback you send from the app with, if you leave it on, technical page details (the page, window size, browser and recent error codes, never the content of your search). From: You.
• Job postings. For each job an employer lists: the title, the employer, the place, the pay where it is listed, the dates, the link and the description, as the employer wrote it. A description can name a recruiter or a hiring manager, with their contact details. We keep no separate field for a person’s name or contact. These postings sit in one catalog shared by the service, not in any one account. For some postings, a short summary and list of requirements written by Jobs.Dog’s model from the description, shown as Jobs.Dog’s. From: Employers’ public job feeds, read by JobsDogBot, and Fantastic.jobs, a job data provider we license.
• Derived information. The stage each job is at, whether a job has a full description, and similar status the service works out from your own records to show them to you. From: Worked out by the service from your records.

What we do not ask for. Card or bank details (to pay for a plan, you enter them on Stripe’s page, not ours), government ID numbers, a date of birth, your citizenship or nationality, a visa type, your race, ethnicity, gender, veteran status or disability, precise location, biometric data, or advertising identifiers. Profile holds no answer to a voluntary self-identification question: there is no place to store one. Application details do ask for a phone number and an address, to fill applications you ask for, and, only with your separate permission, for work authorisation and sponsorship by country. If you or your agent type any of these into a note, we store them like any other note.

Where it comes from. We do not buy information about people. Job postings come from employers’ public job feeds and from Fantastic.jobs, a job data provider we license. A source may be off at times. We do not connect to your mailbox, calendar or AI account ourselves.

The Jobs.Dog browser extension

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

What that means here. The Jobs.Dog browser extension reads a job page only when you click it. It reads that tab’s address and title and, unless the page is on a job site that lists other employers’ jobs, the page’s structured data for search engines, of which it keeps only the job’s details (title, employer, place, pay, dates and description). It reads nothing else on the page: not its other text, a form, a cookie or another tab, and nothing on any page before you click. The details open in a Jobs.Dog window, signed in as you. The window tells you what was read, sends the job’s address to Jobs.Dog to check whether it is already saved to your account, and sends the details only when you press Save. The extension keeps the details in the browser’s memory for at most ten minutes, until the window opens, and then forgets them. It stores no password, sign-in token or copy of your account.

We use what the extension reads only to save the job you chose to your account. We do not use it for advertising, sell it, or transfer it to data brokers or advertising platforms. We do not use it to decide credit or lending, or to train a model. We share it with no one except the services listed in this policy that run Jobs.Dog for us. A person at Jobs.Dog reads it only if you ask us to look at your account, to keep the service secure, or as the law requires.

While the Jobs.Dog window is open, the extension runs on that one page of jobs.dog and on no other page of ours. An extension that was tampered with could act as you on Jobs.Dog while that window is open. You can close the window or remove the extension at any time.

Sensitive information

Five kinds of sensitive information can be in your account:

• Messages addressed to you. If you let your agent read your email, it may copy words from those messages into your account. We are not the intended recipient of those messages, so California law treats their contents as sensitive personal information, and so do we.
• Your sign-in. Your email address together with your password is account log-in information. Our sign-in service holds the password only as a hash.
• Work authorisation and sponsorship. If you choose to save them, your answers about whether you may work in a country and whether you need sponsorship are information about your citizenship or immigration status. See below.
• Whatever notes contain. Notes, application records and what you type to the assistant are open text. You or your agent could record something about health (an accommodation request), immigration, union membership or other sensitive matters, about you or about someone else.
• Whatever your resume says. We do not ask for sensitive details on a resume. If yours mentions any, such as a visa or a health matter, and you let the assistant read it, that text goes to Anthropic with the rest. Such text may appear in a suggested line for you to check; nothing is inferred from it or used for your search.

Apart from the work authorisation and sponsorship answers, we do not ask for any of this, and no field is designed for it. When it is in your account, we use it only to store it, show it to you, give it to the agents you approved, keep it secure and back it up. When you ask the assistant a question, we also send our model provider what it needs to answer you: your criteria and coverage with every question, and other parts of your account only as a question needs them. Apart from the counts our quality checks keep (under Jobs.Dog Assistant), we do not use it to infer anything about you, we do not sell or share it, and we do not use it for advertising. Because we use sensitive information only to provide the service you asked for, a request to limit its use has nothing further to switch off. You can still ask, and you can delete any of it at any time.

Please keep sensitive details out of your account unless your search needs them, and never record sensitive details about other people. Ask your agent to record the facts it learns from a message (who replied, when, and what stage it points to) rather than copying whole messages.

Work authorisation and sponsorship

Many application forms ask whether you may work in a country and whether you will need sponsorship. If you want your agent to answer them for you, you can save those answers, country by country, on Settings, Application details.

• Only with your separate permission. The page shows an unticked box and a button that does nothing else. Saving the rest of your application details never gives it, and nothing is saved here until you do. We record when you gave it and when you withdraw it.
• How they are used. To fill applications you ask your agent to make, and, for the sponsorship and citizenship answers you give under “What you’re looking for”, to leave out or rank lower jobs that say they will not sponsor and, while you use Jobs.Dog Assistant, to go with your criteria so it can answer about your search. Not for advertising.
• One permission covers both places. If you withdraw it, we delete the answers on the Application details page and the sponsorship and citizenship answers under “What you’re looking for”, and we remove those checks from the fit shown on your jobs, all at once.
• No race, gender, disability or veteran value is collected. For voluntary self-identification questions, we hold only your preference: always decline (the default), or ask you each time.
• Only you write them. Your agent cannot write or change application details.

Health information

We do not seek health information and do not use anything in your account to infer a health condition. If a note mentions health, for example a request for an interview accommodation, we hold it only because you or your agent chose to record it. We use it only to show it back to you and your agents, share it with no one except the service providers below who store and process it for us, and delete it when you delete the note or your account. You can ask us to confirm, show or delete any of it, as “Your rights” says.

Why we use it

• Create and run your account, sign you in and keep you signed in. Account and sign-in; sessions.
• Store, show and search your account’s contents, and work out each job’s stage. Account contents; decisions; application records; replies and message contents; work queue; settings; derived information.
• Let the agents you approve read and write to your account, within what you approved. Account contents and everything else in your account; connected agents.
• Save the job you chose to your account, from the Jobs.Dog browser extension. What the extension reads from the page you clicked on, saved only when you press Save.
• Send account email: sign-up confirmation, password resets and notices about changes to your account. Email address.
• Send the launch email and product updates to the launch list, each with an unsubscribe link. Launch list.
• Learn whether the launch email and product updates arrive, are read and are useful, as totals across the list. Email engagement.
• Send notifications you can turn off, such as new matches while you are away, each email with an unsubscribe link, and show alerts in the app. Notifications; settings; account contents; email address.
• Learn whether notifications help, for each account: whether they arrive, are opened or pressed, and whether you come back or turn them off, and hold back a notification when too many people turn it off. Notifications; email engagement; in-app usage events.
• Answer your messages and your privacy requests. Messages to us; the account the request is about.
• Keep the service secure, stop abuse, enforce our terms, and look into problems. Device, usage and log data; sessions and sign-in records; account.
• Understand how the site is used and make it faster and better. Device, usage and log data; counts and durations computed from the records in your account, never their contents.
• Fill the applications you ask your agent to make, using the details you saved. Application details; work authorisation and sponsorship only with your separate permission, only for that purpose and for the sponsorship filter under “Sensitive information”.
• Answer the questions you ask Jobs.Dog Assistant, and keep the conversation so you can read it back. Assistant conversations; your criteria and coverage with every question, and the parts of your account a question needs, such as counts of how you answered new matches and the reasons you picked.
• Keep the assistant within its daily and monthly allowance. Assistant conversations: the per-day counts and cost only.
• Show you new jobs from our shared catalog that match what you are looking for. Job postings; your criteria. No other person’s account is used, and nobody else sees your criteria.
• Improve the assistant: the instructions and examples it works from and the tests we check it with, unless you turn sharing off on Settings, Assistant. Your questions to the assistant and its answers, with contact details and sensitive information taken out where we find them.
• Rank the jobs we show you, and improve our matching, including by training our own matching models. Your criteria; the jobs we showed you; your Save, Pass and the reasons you picked.
• Show the raise each job would be, against what you make now. Current pay.
• Learn who uses Jobs.Dog and how they found it, only as totals with groups under five hidden. Search questions.
• Know what your plan includes, take payment for it, and give refunds. Plan and billing.
• Keep your resume files and profile for you, show them back to you, and let you download or delete them. Résumé files; profile entries.
• Suggest the lines of your profile and what to search for from your resume, if you let the assistant read it. Résumé files (the text only, with your name and contact details taken out where we find them); your agreements.
• Answer your questions to the assistant with your experience in mind, while it is on. Profile entries you confirmed.
• Record that you accepted our terms and this policy, and that you gave or withdrew permission. Your agreements.
• Meet legal obligations and defend legal claims. Whatever the obligation or claim concerns.

Matching. We use your search, the jobs we show you and what you do with them, such as Save, Pass and the reason you pick, to rank the jobs we show you and to improve our matching, including by training our own matching models. We do not let our service providers train their own models on it. We do not train our matching models on anything we collected before 13 November 2026. We never send your account’s contents to an employer, to the job data provider we license, or to the employers’ job feeds we read: postings come to us, and nothing of yours goes back.

Selling and sharing. In the past 12 months we have not sold personal information or shared it for cross-context behavioural advertising. If that changes, we will update this policy first and give you a way to opt out. If we ever want to use information in a new way, we will say so first and, where the law requires it, ask you.

How we measure the product. To learn whether the product works, we may count things across accounts: how many jobs have a saved description, how long a stage takes, how many people reach an offer. Those counts read no titles, descriptions, notes, reasons or email addresses, and any figure we publish or share covers at least five accounts and names no one. We may share such counts with others, for example with an employer who wants to know how many people a job fits. When we turn information into counts that identify no one, we keep them that way. We do not try to work out who is behind them, and we require anyone we share them with to do the same.

Automated checks also read the content of jobs in your account, such as whether a summary is present and well formed, to produce counts only. Nothing they read leaves your account.

Why there is no “limit the use” link for application details. We use the application details we hold, work authorisation and sponsorship included, only to give you the service you asked for: filling applications you queued, and filtering jobs by the answers you gave. We do not use them to infer anything about you, so a request to limit has nothing further to switch off.

AI and your agents

We send your account to an AI model only when you ask the assistant, or let it read your resume. Jobs.Dog sends nothing you store to any AI company except to answer a question you ask Jobs.Dog Assistant, or to read your resume if you tick the box on Profile. The assistant is on for every account whose plan includes it, and for a Free account while it sets up its search and, after that, to change its search. You can turn it off in Settings. Each summary in your account shows who wrote it: Jobs.Dog, the assistant or your agent.

Your agent acts for you. When you approve an AI app on our consent screen, you let it read everything your account holds about your job search, including full job descriptions and notes, add and correct facts, and work through your queue. It can also star, save or pass a job, and the job shows which agent did it, with a way to undo it. It cannot set the day you applied, or read or change your settings, email address or password. You can see and disconnect every approved app on Settings, Connections, and a disconnected app stops working on its next request. The rules we give your agent carry a reference code linked to your account, which we use only to trace copies of those rules made without our permission.

Your agent reads application details only while it works on an application you queued. Application details are not part of what a connected agent can read in general. Your agent can read them only while it holds the task for one application, which you create by pressing Queue to apply on a job. It can read only the groups of details that application’s form needs, and it is asked to use them on that form and nowhere else. We list each read on Settings, Application details, with the time, the job and which connected app read it. If you cancel the application, further reads stop. You can also turn sharing with agents off on that page, and then no agent can read them. Once your agent has read them, its AI company holds them, and we cannot see or undo what happens there.

Your agent’s vendor sees what your agent reads. If your agent runs on an AI company’s service, what it reads from your account goes to that company, and what it writes to your account may have come from anywhere it can reach: job sites, web pages, feeds, your mail. That company acts under your own account with it, not as our service provider, and that is true whichever company it is, Anthropic included. It handles your information under its own terms and privacy policy, which may include using it to improve its models unless you opt out there. We cannot see, log or undo what happens on that side. Choose an AI service whose terms you are comfortable with, and check its data settings.

Other sites. Jobs.Dog links to employers’ pages and job sites. When you follow a link, that site’s own privacy policy applies.

If we add new uses of AI. If Jobs.Dog starts sending your information to an AI model in any way this policy does not describe, we will update this policy, let you know in the product, and name the provider.

Jobs.Dog Assistant

Muttly can remember useful career and search context you share in conversation. Memories are encrypted for your account. Relevant memories go to Anthropic with a later question while both Muttly and memory are on. Remembering something does not change your search filters, job decisions or private career profile.

In Settings, Assistant, Memory, you can inspect memories, tell Muttly what to change, forget an entry, clear everything or turn memory off. Recent context expires after 90 days; durable context stays until you correct or delete it, or close your account. Turning memory off stops capture and retrieval and keeps existing entries for inspection or deletion. Clearing conversations does not clear memory. Deleted text is removed; content-free source markers prevent older conversations from rebuilding it. Memory is included in your data download.

When it is on, and what it sends. Jobs.Dog Assistant answers questions about your job search inside Jobs.Dog. The assistant is on for every account whose plan includes it, and for a Free account while it sets up its search and, after that, to change its search. Nothing of yours is sent to Anthropic until you ask it a question or let it read your resume. You can turn it off in Settings, and turning it off stops any further sending.

What it reads, and when. Your criteria (what you are looking for, with your time zone) and your coverage (counts of your search) go with every question. The jobs, companies and applications in your account, with their descriptions, summaries and notes, your saves, passes, stars and application stages, the new jobs Jobs.Dog found for your search, and the profile lines you confirmed go only as the question needs them. If you ask while a job is open, its job number, title and company go with that question. It also reads the words you type to it and the earlier messages of the same conversation.

What it reads. The parts of your account a question needs. It reads your resume only if you let it, and only its text. Anything you type to it or store in notes goes as written. It reads your account through the same database rules as everything else, so it cannot read anyone else’s account. It does not read your email, sign in anywhere for you, browse the web or apply for jobs.

Who processes what you send it. Each time you ask a question, we send the words you type and what the assistant read of your account to answer it to Anthropic, which runs the language model that writes the answer. Nothing is sent before you ask, and nothing after you turn the assistant off. Anthropic acts as our service provider under its commercial terms and its data processing terms. It processes what we send to answer you and does not use it to train its models. Under those terms, Anthropic deletes what we send, and its answers, within 30 days. If its safety systems flag a request, Anthropic may keep that request and its answer for up to 2 years. Processing takes place in the United States.

Chat sharing. Unless you turn sharing off on Settings, Assistant, the Jobs.Dog team may read your chats with the assistant, on the terms under “Shared conversations”, to improve it. They stay in our database; we do not send them to another service for this. Turning sharing off stops it at once, except for a conversation you shared on its own until you withdraw it. Turning it on again covers the conversations we still keep.

Where your conversations are kept. We keep each conversation, with what the assistant read to answer it, in our database, encrypted with a key made for your account before it is stored. We delete a conversation, whole, 400 days after its first message while chat sharing is on, or 30 days after it while sharing is off; turning sharing off deletes those older than 30 days. Clear conversations, on Settings, Assistant, deletes all of them at once, and deleting your account deletes them too. They are in your download on Settings, Account. Turning the assistant off stops anything more being sent. What is already kept is deleted on the same schedule, or sooner if you clear it.

What it may write. It may write summaries and fit notes on your jobs, each shown as Jobs.Dog’s, so you can tell its work from your agent’s and your own. It may set a job aside when a check you set is not met, shown as Jobs.Dog’s own, and you can still save that job. It may suggest that you save, pass, star or unstar a job, change what you are looking for, or follow or stop following a company. Nothing changes until you tap the suggestion yourself. It cannot save, pass or star a job, set the day you applied, change what you are looking for or your settings, apply for a job, or send anything to anyone.

Report this answer. In an answer’s More menu, you can tell us that answer was wrong. While usage analytics is on, it records that an answer was marked, with its place in the conversation, a code for the conversation and the version of the assistant’s rules, and nothing of what was said. Tell us more then opens our feedback form, which sends us a reference to that answer with whatever you write. It holds nothing the assistant wrote unless you add it. The reference lets us find that answer’s record of counts and timing; we read its words only on the terms under “Shared conversations”.

Shared conversations. We can read a shared conversation’s questions and answers, and the job numbers it names, for as long as it is kept (see “Where your conversations are kept”), to see what went wrong and improve the assistant. Anything said in it, by you or the assistant, can be read. Excerpts may be kept as described under “Improving the assistant”. You can stop sharing on Settings, Assistant, at any time.

Improving the assistant. While sharing is on, we may also use your chats with the assistant to improve it: to write the instructions and examples it works from and the tests we check it with. Before an excerpt is kept this way, we take out contact details, and the sensitive information listed under “Sensitive information”, where we find them. We do not add your resume, application details, name or email address. Turning sharing off keeps your later chats out. We do not currently use personal information to train large language models.

Quality checks on every answer. Our server counts, for each answer, things like whether it followed the assistant’s rules, whether every figure and job number in it came from what it read, and whether a question or a job posting tried to give it instructions or asked which AI it is. Only the counts are kept, never the words. Questions that try to get round the assistant’s rules, and a connected AI’s attempts to change what only you can change, are counted for your account for 7 days. Enough of them in a day pause the assistant for your account for up to an hour; a pattern over a week may lead us to look at those counts and, only then and only by a person, pause the assistant or your connected AI’s access. If you think that happened by mistake, write to hello@jobs.dog.

What else we record about it. Our logs record, for each answer, which model answered, which kinds of reads it made, the size of the question and answer as counts, what it cost and how it ended. They never hold your question, its answer or which jobs it read. We keep a daily total (counts of questions, model calls, how much text went to the model, and what it cost us) for 400 days, to hold the assistant to its allowance. It is in your download and deleted with your account. While usage analytics is on, our usage events record that you turned the assistant on or off or cleared it; for each answer, which model family answered, how it ended and how many reads it made; a Not right mark; which kind of suggestion you tapped, and whether a suggestion was saved, dismissed or undone; and that you copied an answer or reopened a conversation. An answer’s and a suggestion’s records carry a code for the conversation, so a count can be traced to the chat it came from on the terms under “Shared conversations”. Never the words.

Limits. It takes a limited number of questions a minute, its use has a daily and a monthly allowance, and a ceiling across the whole service can pause it for everyone until the next day. When an allowance is used up, the assistant pauses until it renews. One switch turns it off for everyone at once. We may pause or suspend access to it if it is misused; our terms say how to reach us about that.

Your resume

Where it is kept. When you add a resume, on Profile or in Muttly’s chat, we keep the file, its name and the text your browser takes from it, encrypted with your account’s key before it is stored. We do not open the file on our servers, and only you can download it.

Who reads it. Nobody reads it unless you let Muttly, Jobs.Dog’s assistant, read it: you tick the box on Profile, or choose a file or press “Read my resume” in Muttly’s chat under the words that say so. Then, each time you add a resume or ask Muttly to read it again, until you untick the box, we send the text of your current resume to Anthropic to suggest the lines of your profile and what to search for. Before it is sent we take out your name, email address, phone number, street address and links where we find them. This is automatic and can miss something, so remove anything you would rather not send before you add the file. We never send the file itself. This works whatever your plan, a few times an hour. Under its terms, Anthropic does not train on it and deletes it within 30 days (a request its safety systems flag may be kept up to 2 years). Suggestions can be wrong or leave something out, so check each one before you confirm it. The suggestions are kept until you confirm or remove them; nothing changes in your profile or your search until you confirm it, and a suggestion never sets where you look for work.

Who does not. Other people never see it. No connected AI app reads your resume or your profile. We do not use your resume to decide anything about you, we never infer your age, gender, race, religion, disability, nationality, citizenship or family status from it, and we never send it to an employer.

Your control. Untick the box on Profile to stop it at any time. Replacing your resume deletes the old file. Deleting it removes it at once, with the quotes taken from it. Lines you confirmed stay until you remove them. A later read replaces the untouched suggestions of each kind it suggests again, and replacing your resume removes them.

Your confirmed profile. While Jobs.Dog Assistant is on, it can read the profile lines you confirmed, such as your jobs, schools and skills, when a question needs them. What it reads is kept with that conversation, and deleted with it. Turn the assistant off to stop it.

Who else handles it

Service providers. These companies process personal information for us, under written terms that limit what they may do with it:

• Supabase. Runs our database and sign-in, and keeps daily backups. Holds: Everything in “What we collect” except analytics and messages to us. Where: United States (Oregon).
• Vercel. Hosts the site, keeps request records, and provides our page analytics and speed measurements, including counts of a few named actions on the public pages, the demo and the launch-list form, never what you type. Holds: Device, usage and log data; everything passing through the site while it is served. Where: United States (Oregon), with its network answering requests near you.
• PostHog. Records usage events inside the signed-in app (which pages and buttons are used, and a few named actions), so we can see what works. When your AI app uses Jobs.Dog, it also counts that use: which tool, whether it worked, how long it took, how many items it carried, and which AI app, with its model when the app reports it. Holds: Page addresses without their query, button clicks with their text masked, counts and kinds, approximate location (country and state) for the app’s events, and a pseudonymous identifier derived from your account. Never your email, name or IP address: our own site relays the events and strips the address, along with every cookie. Never the text of your jobs, notes or form fields, or what your AI app sent or got back. It also keeps session replays inside the signed-in app: a record of the page’s layout and of where you move, click and scroll, used to find what is confusing or broken. They are not video of your screen. Text on the page and what you type are masked in your browser before they are sent. You can turn all of this off. Where: United States.
• Resend. Sends account email, the launch email, product updates and the feedback you send from the app to our inbox, and, for the launch email, product updates and notification email only, records opens and link presses. Holds: Email addresses, the messages sent, delivery records and email engagement. Where: United States.
• Anthropic. Runs the language model behind Jobs.Dog Assistant, to answer the questions people ask it. Nothing of yours goes to it until you ask the assistant a question, or let it read your resume, and nothing more once you turn the assistant off or untick the box. It also writes a short summary of a job posting in our shared catalog once someone’s search matches it or someone keeps the job, whatever their assistant setting. Holds: For a question: what you type, the earlier messages of that conversation, and the account information the assistant uses to answer, such as your criteria (including any sponsorship or citizenship answers) and coverage, counts of how you answered new matches and the reasons you picked, relevant memories, and the jobs, companies, applications, notes and profile lines a question needs. Anything you type or store goes as written. For a resume read, if you let it: the text of your current resume, with the contact details we find taken out. For a posting summary: the posting’s title and description from an employer’s public job feed or a job data provider we license, which can name a recruiter or hiring manager. Anthropic keeps what we send as its terms set. Where: United States.
• Stripe. Takes payment for a plan, hosts the page where you enter your card, gives refunds, and sends payment emails. Holds: Your email address, your card and billing address, your plan, your payments and refunds, and the reason you picked when you cancelled, if you picked one. Where: United States.
• Cloudflare. Runs our domain’s DNS: it answers the lookups that point your browser and your mail app at our services, and sends us reports about mail sent in our name. It does not carry our pages or anything in your account. Holds: The lookups for our domain, with the address of the resolver that asked, which is usually your internet provider’s; reports about mail sent in our name. Where: United States, with its network answering lookups near you.
• Better Stack. Checks every few minutes that our site and the address agents connect to answer, alerts us when they do not, and runs our public status page, which takes no sign-ups. Holds: Nothing from your account: its own checks of our addresses and their results, and, if you open the status page, the request your browser makes to it. Where: United States and the European Union.
• Google (Google Workspace). Receives and hosts the mailbox our contact addresses deliver to: the hello, support, privacy and security addresses. Holds: Messages you send to us, with their sender addresses. Where: United States.
• Google (Sign in with Google). Only if you choose it: signs you in. Google learns that you use Jobs.Dog and when you sign in. Google is also the mail host above. Holds: That you use Jobs.Dog and when you sign in. To us it sends your name and email address. Where: As Google’s own policy says.
• Apple (Sign in with Apple). Only if you choose it: signs you in. Apple learns that you use Jobs.Dog and when you sign in. With Hide My Email, it also relays our email to you through its private relay service. Holds: That you use Jobs.Dog and when you sign in; for a relay address, the email we send you passes through its relay. To us it sends your name and email address, or the relay address. Where: As Apple’s own policy says.

Where job postings come from. These send us job postings and receive nothing about you:

• Employers’ own job feeds. JobsDogBot reads the postings employers publish through their hiring software, as our JobsDogBot page describes. It sends only the request for those public postings.
• Fantastic.jobs. A job data provider we license sends us postings from employers’ career sites. We send it only our requests for postings, never anything from an account.

If you sign in with Google or Apple. That is your choice, and the provider handles it under its own terms and privacy policy. Each learns that you use Jobs.Dog and when you sign in, and we receive your name and email address from it. With Apple’s Hide My Email, we receive an Apple private relay address instead, and we email you through Apple’s relay service. We keep your linked sign-in methods (the provider, the address and the date you connected it) with your account; Settings shows them and Download everything includes them. If Apple tells us you turned off forwarding to a relay address, we keep a one-way hash of that address (not the address) so we stop emailing it. We delete the hash when you turn forwarding back on, when the Apple sign-in is removed, or when you delete your account. If Apple tells us you revoked access or deleted your Apple Account, we remove the Apple sign-in and sign you out; we do not delete your Jobs.Dog account.

Your agent, at your direction. When you approve an AI app, we give it what you approved it to read. That is you directing us to disclose your information to a service you chose, as “AI and your agents” says.

Our advisers. Our lawyers, accountants and insurers see what they need to advise us, under a duty to keep it confidential.

When the law requires it. We disclose information if a valid legal process compels us, such as a subpoena or court order, or if we believe in good faith that disclosure is needed to protect someone’s safety or to defend our legal rights. Unless the law forbids it, we tell you first and give you time to object. We disclose only what is required.

If the business changes hands. If VeryBadDog LLC is merged, acquired or sells the service, your information may move to the new owner. The new owner must keep this policy’s promises for information collected under it, or tell you and give you the chance to delete your account first.

With your permission. Anything else, only if you ask us to or agree to it.

Selling and sharing. In the past 12 months we have not sold personal information, shared it for cross-context behavioural advertising, or used it for targeted advertising. We have no actual knowledge of selling or sharing the personal information of anyone under 16. No advertising network or data broker receives anything from us. We do not currently use personal information to train large language models.

Other people in your account

Job searches involve other people. Your account may hold a recruiter’s name, an interviewer’s email address, a hiring manager named in a job description, or a reply someone sent you. What you and your agent record, we keep inside your account, never show to another account, never mine, and delete with the record or the account. What you and your agent record about other people is your responsibility, so keep it to what your search needs.

If you believe your information is in someone’s account and you want it removed, write to privacy@jobs.dog. We cannot search people’s private accounts for you without cause, but we will pass your request to the account holder where we can identify them, and act on any unlawful content.

People named in job postings

Jobs.Dog reads the public job feeds that employers publish through their hiring software, as our JobsDogBot page describes, and receives postings fromFantastic.jobs, a job data provider we license. A source may be off at times. We keep the postings in one catalog shared by the service. A posting can name a recruiter or a hiring manager, with their contact details, because the employer wrote it that way. We keep the description as the employer wrote it, with no separate field for a person’s name or contact, and we build nothing about the people it names. We show a posting only inside Jobs.Dog, to signed-in people whose search it matches, and to the agents they approve. We do not publish postings on the open web. Once someone’s search matches a posting from an employer’s public job feed, or someone keeps the job, we send its title and description to Anthropic, which writes a short summary of it for us, shown as Jobs.Dog’s.

To ask us to stop reading an employer’s jobs, or to delete the postings we hold from it, write to hello@jobs.dog. We stop reading that employer’s feed and delete its postings from the catalog. If you are named in a posting and want it removed, write to the same address. A job a person already saved to their own account stays in that account, as their own record.

How long we keep it

• Account, account contents, decisions, applications, replies and message contents, work queue, settings, connected-agent records, access codes you shared, imports. Until you delete the item or your account. We keep closed jobs on purpose, so a posting stays readable after it comes down.
• Approved AI apps. Until you disconnect them or delete your account.
• Application details. Until you delete them or your account.
• Work authorisation and sponsorship answers on the Application details page. Until you delete them, withdraw your permission (we delete them at once), or delete your account. We also delete them after 12 months with no visit to your jobs page, no application and no new save of them, and a visit to Settings alone does not count. We show a notice on the site at least 30 days before.
• Sponsorship and citizenship answers under “What you’re looking for”. Until you change them, or withdraw your permission for work authorisation and sponsorship answers. They do not expire.
• Résumé files, the text taken from them, and profile entries. Until you delete the file or the entry, or your account. Deleting a file removes it at once, with the quotes taken from it, and replacing your resume deletes the old file. Nothing expires.
• Assistant conversations. 400 days from a conversation’s first message while chat sharing is on, 30 days while it is off, then deleted whole; turning sharing off deletes those older than 30 days. Sooner if you clear them on Settings, Assistant or delete your account.
• Daily totals of your questions to the assistant and their cost. 400 days, or until you delete your account.
• What the assistant sends to Anthropic. As Anthropic’s terms set.
• Job postings sent to Anthropic for a summary. Kept by Anthropic up to 29 days for us to collect the summary, then deleted within 30 days under its terms; a request its safety systems flag may be kept up to 2 years. The summary itself stays on the catalog posting while the posting does.
• The list of reads of your application details, and your agreements. For the life of the account, and deleted with it.
• Session cookies. Up to 30 days from your last visit.
• Sign-in records, with IP address and browser. 7 days.
• Hourly counts of how many job descriptions you open. 7 days, or until you delete your account.
• Our own error records: the kind of error, a code and a reference, a few counts, and a short error message with any quoted value removed. Never your IP address, email, anything from your account or anything you typed. 30 days.
• Daily counts of your AI app’s requests: per day, how many it made, of which kind, how many were refused, how many failed on our side, the most in any one minute, and how many of your connections were seen. Never what they asked or what came back. 13 months (400 days), or until you delete your account.
• Whether your account has a plan, and its status. Until you delete your account.
• Payments and refunds. When you delete your account, we delete our record of your plan and ask Stripe to delete your customer record, which also cancels your plan. The record of each payment and refund (the date, the amount, the tax, and the card’s brand and last four digits) stays at Stripe, for tax and accounting, for as long as the law requires us and Stripe to keep it, and links to nothing left in Jobs.Dog.
• Current pay and search answers. Until you delete them or your account.
• Job postings in our shared catalog. While the employer lists the job. After it closes, we clear its description within 7 days and delete the posting after 90 days. A closed posting that someone saved or was shown for their search stays whole while that holds. A takedown request deletes them. A job a person saved to their own account is their own record.
• Our host’s request records, with IP address, browser and the page asked for. About 1 day.
• In-app usage events (PostHog). Up to 7 years. They hold no name, email, IP address or job content.
• Assistant chat excerpts kept as examples or tests. While we use them to improve and test the assistant, then deleted.
• Assistant chats sent to LangWatch before 9 November 2026. Kept by LangWatch until we delete them. Nothing has been sent since.
• Session replays (PostHog). 30 days.
• Page analytics. The visitor identifier is a hash we discard after 24 hours. The counts it produces are kept as totals that identify no one.
• Account email delivery records. 30 days, at Resend.
• Email engagement on the launch email and product updates. 30 days, at Resend. The totals we work out from them identify no one and are kept as counts.
• Notifications, with their delivery, opening and press records. 180 days, or until you delete your account. Resend keeps its own delivery and engagement records for 30 days.
• Backups. Up to 90 days. Anything you deleted or withdrew, or a deleted account, can stay in a backup until that backup is deleted, up to 90 days later.
• A note that an account was deleted: its random account number and the time, nothing else. Kept for now.
• Launch list. We delete an address not confirmed within 7 days. Otherwise we keep it until you unsubscribe or ask us to delete it, and we delete the whole list 12 months after Jobs.Dog opens. When you unsubscribe, we delete your address and answers and keep only a one-way fingerprint of the address, so a new sign-up has to be confirmed again.
• Messages to us, and mail sent to any Jobs.Dog address. Two years after the last message in the thread, then deleted. Ask, and we delete yours sooner, unless we need them for a legal claim.
• Records of privacy requests: the date, the kind of request and how we answered, never the content of your account. 24 months.
• Counts that identify no one, such as weekly totals of how much each feature was used across at least five accounts. Indefinitely.

Your rights

Wherever you live, you can ask us to:

• Know and see what we hold about you, where it came from, why we have it and who handled it.
• Get a copy in a portable format.
• Correct anything inaccurate.
• Delete your information.
• Opt out of any sale, sharing, targeted advertising or profiling. We do none of these, so you are opted out already.
• Turn off usage analytics. It is on by default, you are asked when you set up, and you can turn it off, and on again, any time in Settings, on the Account page, under Usage data. Once it is off, nothing further is recorded for your account, in the app, in your other open tabs in this browser, or on our servers (on your other devices from their next page load), including the counts of what your AI app does with Jobs.Dog. Counts recorded before you turned it off are not removed.
• Limit our use of sensitive information. We already use it only to provide the service.
• Appeal if we turn down a request.
• Be treated the same whether or not you use these rights. We never charge for a request or treat you worse for making one.

Most of what we ask for is optional. Without an email address and a password we cannot open an account for you.

Doing it yourself. The service shows you everything on your account. Settings, Account downloads everything as one JSON file: your account, settings, companies, jobs with their postings and summaries, decisions and their history, applications and their history, your queue, connected-agent records and imports, and, if you used the assistant, your conversations with it and its daily totals. It also carries your application details in plain text, the list of reads of them, and your agreements. It leaves out your password and session, which nobody holds in a readable form. Your approved AI apps are listed on Settings, Connections. You can correct your decisions and settings in Jobs.Dog and in Settings, and ask your agent to correct facts.

Settings, Account also deletes your account. It asks for your password again and for DELETE typed out, then deletes everything on the account at once and ends every session. Deleting the account deletes your application details, the list of reads, your agreements and the key held for your account. Withdrawing permission on Settings, Application details deletes your work authorisation and sponsorship answers on its own. We do not yet send an email confirming the deletion.

Asking us. Write to privacy@jobs.dog. Tell us what you want and which email address it is about. You do not need an account to ask.

• We confirm receipt within 10 business days and answer within 45 days. If we need longer, we will tell you why within those 45 days and take no more than 45 more.
• We check it is you by replying to the email address on the account or the list, or by asking you to sign in and use the controls. We will not ask for a government ID.
• Someone can ask for you if you authorise them in writing. We may ask you to confirm directly that you gave that permission.
• If we say no, we explain why. You can appeal by replying with “Appeal” in the subject. We answer within 45 days and explain the result. If you are still unhappy, you can contact your state attorney general.

Global Privacy Control and Do Not Track. We do not sell or share personal information or use it for targeted advertising, and nothing on this site tracks you across other sites, so neither signal has a sale or sharing to switch off. We still act on them in two places. When your browser sends Global Privacy Control, session replays inside the signed-in app never start. The public pages’ page analytics honour both signals for their named actions. The rest of our usage analytics inside the signed-in app has its own switch instead, described above. If we ever sell or share personal information, we will treat a Global Privacy Control signal as a valid request to opt out of sale and sharing for that browser and any account signed in on it.

Your state’s rights. Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with privacy laws have rights under those laws. We honour the rights above for everyone, whether or not a law requires it of a business our size. Oregon residents may also ask for the list of the specific third parties we disclosed their information to. That list is the one in “Who else handles it”. California residents may ask what we disclosed for a business purpose in the past 12 months, and that section answers it too.

Your agreements

When you accept our terms and this policy, and when you dismiss a notice of a change, we record the version of each, the time, how you accepted or dismissed the notice, and, for an acceptance, that you confirmed you are 18 or older: on the sign-up page, on the page we show an existing account, or on the notice. When you give or withdraw permission for work authorisation and sponsorship answers, or for the assistant to read your resume, we record that the same way, with the version of the wording you saw. We only ever add to these records, never change them. We do not record your IP address or browser for them. We keep them for the life of the account, show them in your download, and delete them with the account.

Cookies and storage

This is everything Jobs.Dog keeps on your device.

• Sign-in cookie. When you sign in, Supabase, our sign-in provider, sets a cookie named sb-<project>-auth-token (split into numbered parts if it is large). It keeps you signed in, page scripts cannot read it, it travels only over HTTPS, and it lasts up to 30 days from your last visit. Signing out deletes it. The service cannot work without it.
• Sign-up and password-reset cookie. When you sign up or reset a password, Supabase sets a short-lived verifier cookie, named like the one above but ending -code-verifier, so the link in your email works only in the browser that asked for it. It is kept until the link is used, and at most 30 days.
• Colour scheme. On your jobs page only, if you choose light or dark, your browser’s local storage keeps that one word under the name jd.scheme, so the page does not flash the wrong colours before it loads. It stays until you clear it.
• Try again timer. Only after you press Try again on an outage page, your browser’s session storage keeps a press count and a time under the name jobsdog.retry, so the button waits 5, then 15, then 30 seconds before it can be pressed again. It ends when you close the tab.
• Service worker. The page that lets you install Jobs.Dog as an app registers a small service worker. It caches nothing and clears any cache it finds.

Our page analytics and speed measurements, from Vercel, our hosting provider, store nothing on your device and identify a visit by a hash of the request that is discarded after 24 hours. PostHog runs only when you are signed in, through a script served from this site and sent through this site’s own address. It keeps what it needs in memory, sets no cookie and uses no browser storage. It does not run on the public pages, the demo, the launch list or the sign-in pages. There is no advertising, no third-party script and no tracking across other sites. There is no cookie banner because everything above is either needed to give you the service you asked for or is a setting you chose.

Email we send

Three kinds of email. Account email is what you need to use your account: confirming your address, resetting a password, setting up an account, signing in, changing your email address, and notices about changes to your account. Launch-list email is the confirmation when you join the list, the launch email, and product updates. Notification email is what you can turn off on Settings, Notifications: new matches while you are away, and the welcome and one setup reminder when you join.

What we measure, and where. On the launch email and product updates, our email provider, Resend, may record whether a message was opened and which links in it were pressed. An open is counted when your mail app loads a small invisible image in the message. A link press is counted when the link takes you through Resend’s address, or an address of ours that Resend runs, on the way to the page. Each record holds the time, the IP address and the mail app that loaded the image or followed the link. Some mail apps load every image as soon as a message arrives, so we read open counts as a rough guide only. We use the records as totals across the list, to learn whether these emails arrive and which links are useful. We do not use them to decide anything about you.

Notification email. Notification email comes from its own address, and Resend records its opens and link presses the same way. We also count a press when a link in it opens a page of jobs.dog you are signed in to. We keep these records with your account, beside the notification they belong to, to learn whether notifications help and to send fewer when they do not. Turn any of them off on Settings, Notifications, through the link at the foot of each one, or with your mail app’s unsubscribe button.

What we never measure. Account email and the confirmation you get when you join the list carry no such image, and their links go straight to jobs.dog. A link that signs you in or resets a password never passes through anyone else’s address.

How long, and how to stop it. Resend keeps these records for us for 30 days. The totals we work out from the launch-list records identify no one. To stop it, unsubscribe through the link at the foot of any launch-list email, or press your mail app’s unsubscribe button, and we send you no more of these emails. Turning off images in your mail app stops the open count for every sender. Links still work either way.

How we protect it

• Every row in the database carries the account it belongs to, and a database policy on every table refuses any row that is not yours. Tests try to read, change and delete across accounts, and must fail.
• Agents connect with OAuth 2.1: you sign in and approve them, so you paste no password or key anywhere. We check their access on every request. When you disconnect one, it stops on its next request.
• The site holds no key that could skip those database rules, and the database’s direct web interface is off.
• Every page allows scripts, styles, fonts and images from this site only.
• Passwords are at least 12 characters, checked against known leaks, and stored only as a hash. Page scripts cannot read sign-in cookies.
• Private pages are never stored by a shared cache or shown to search engines.
• Our database host encrypts the database and its backups at rest.
• We encrypt application details before we store them, with a key made for your account and locked by a second key kept outside the database. A copy of the database, or a backup, shows only scrambled bytes. The work authorisation and sponsorship answers are sealed apart from the rest, so we can delete them without opening anything.
• We encrypt resume files, the text taken from them and profile entries the same way, with your account’s key, before we store them. Only you can fetch a file, from the page you are on, and never through a link that could be passed on. Your browser reads the text of a file, so we do not open the file on our servers to read it. No connected AI app reads your files or your profile. The assistant reads your resume’s text only if you let it, and the profile lines you confirmed only while it is on, as Your resume says.
• We encrypt assistant conversations the same way, with your account’s key.
• We never write application details to our logs, our usage measurements or our problem reports, and a problem report never carries them, the list of reads or your agreements.

What the operator can see. Whoever runs Jobs.Dog holds the database credentials and could read any row. We look at someone’s account only when its owner asks for help with it, when we need to investigate a security problem or abuse, or when the law requires it. When someone reports a problem with an agent, we look at the records of the job they name in their account to answer it.

Application details are different. We do not read your sealed application details in running or supporting the service, and no ordinary screen or report shows them. Reading them would need a separate step, using the key kept outside the database, that leaves a record first. We would take that step only if you asked us to help with them, to investigate a security problem, or if the law required it.

No system is safe from every attack. If a breach affects your information, we will tell you without unreasonable delay and within the time the law sets, and say what happened and what we are doing about it. The details are on our Security page.

Children

Jobs.Dog is for people 18 and older. It is not directed to children or teens. We do not knowingly collect information from anyone under 18. When you create an account, you confirm you are 18 or older. If we learn that an account or a launch-list entry belongs to someone under 18, we close the account and delete what it holds. A parent or guardian can write to privacy@jobs.dog.

Where it is

Jobs.Dog is offered to people in the United States. Our service providers store and process information in the United States, mostly in Oregon. If you use Jobs.Dog from somewhere else, we still process your information in the United States under US law.

We do not set out to serve people outside the United States, and we have not built what other countries’ laws can require of us. If we learn that someone outside the United States has opened an account, we may ask them to stop using it, and we will close it and delete it on request. You can give work authorisation and sponsorship answers for countries other than the United States, and we hold them the same way.

Changes to this policy

We may change this policy at any time. When we do, we post the new version here with its date, add a line to the change log below, and let you know in the product. A change takes effect when we post it. We do not email about it. If you keep using the service after a change, you accept the new policy. For a change that matters most, we may also ask you to accept it on a page in the product before you go on. If you do not agree, you can delete your account.

Notice at collection

Creating an account collects your email address and password (or, if you sign in with Google or Apple, your name and email address from it) and the access code you joined with, to open and run your account and send you account email. Using your account collects everything under “Account contents” and the categories after it in “What we collect”, to run it for you and the agents you approve. Joining the launch list collects your email address, the kind of job you want, an industry and your state, to send you the launch email and product updates from Jobs.Dog and to learn which kinds of searches to support first. By joining the launch list you agree to that email. Those emails may record whether they were opened and which links were pressed, and every one carries an unsubscribe link. We keep your entry until you unsubscribe or ask us to delete it, and delete the whole list 12 months after Jobs.Dog opens.

Adding a resume collects the file, its name and its text, to keep it for you. If you let the assistant read it, the text, with your name and contact details taken out where we find them, goes to Anthropic to suggest your profile lines and your search. We keep the file until you replace or delete it. While the assistant is on, the profile lines you confirm can go to Anthropic when a question to it needs them. Saving application details collects the details you type on Settings, Application details, to fill applications you ask your agent to make, and nothing else. If you give your separate permission, it also collects your work authorisation and sponsorship answers by country, for that purpose and for the sponsorship filter under “What you’re looking for”. You can leave every field blank, and delete them or withdraw permission at any time. Asking the assistant a question collects the question and its answer, to answer you. Your criteria and coverage go to Anthropic, our model provider, with every question, and other parts of your account only as a question needs them, for that purpose only. We keep each conversation 400 days while chat sharing is on, 30 while it is off. Turning the assistant off or back on records when you did. Starting a plan records your plan and billing records, to take payment and give refunds; your card goes to Stripe and never to us. Accepting our terms records the version, the time and how you accepted. Using the signed-in app also collects usage events and session replays, to fix and improve it, unless you turn Usage data off. Writing to us collects your address and your message, to answer you. We sell or share none of it, keep it for the periods in “How long we keep it”, and you can use every right in “Your rights”.

Contact

Requests about your data: privacy@jobs.dog. Questions, or anything you think we got wrong: hello@jobs.dog. By post: VeryBadDog LLC, 1522 Western Ave STE 77135, Seattle, WA 98101. See also our Terms and our Security page.

Change log

• 13 November 2026. Says more plainly what Jobs.Dog Assistant sends to Anthropic: the account information a question needs, including counts of how you answered new matches and the reasons you picked, and your sponsorship and citizenship answers with your criteria. Anything you type or store goes as written, contact details are taken out of a resume where we find them, and Anthropic keeps what we send as its terms set. Removes the line about information we already hold. Adds notifications: what we keep about the notifications we send or show you, that notification email records opens and link presses, kept with your account, and for how long.
• 12 November 2026. Adds a line to “How long we keep it”: hourly counts of how many job descriptions you open, kept 7 days.
• 10 November 2026. Says how Jobs.Dog uses the jobs it shows you and what you do with them, such as Save, Pass and the reason you pick, to rank jobs and improve our matching, including by training its own matching models. Says that counts which identify no one may be shared, for example with an employer who wants to know how many people a job fits. Replaces the list of things we would never do with what the law asks us to say about selling and sharing, and says we would update this policy and offer a way to opt out before any sale. Information collected before this version is not used in a new way without your agreement. Chat sharing is no longer limited to the beta: it stays on until you turn it off, and shared chats stay in our database (LangWatch no longer receives them). While sharing is on, the team may read any of your assistant conversations, in place of sampled review, and they are kept 400 days instead of 30; with sharing off, 30 days. Usage analytics now records what you did with a suggestion and a code for the conversation, so a count can be traced to its chat. Adds “Improving the assistant”: while sharing is on, excerpts of assistant chats, with contact details and sensitive information taken out where we find them, may become the assistant’s examples and tests. Says that we do not currently use personal information to train large language models.
• 6 November 2026. Says that the counts that identify no one, which we keep indefinitely, include weekly totals of how much each feature was used across at least five accounts. Backups are now kept up to 90 days, not 7, so something you delete can stay in a backup for up to 90 days. Says that Anthropic also gets your resume’s text, when you let the assistant read it, wherever the policy says when we send it anything. Removes Jobo, which no longer runs a job search for any account. Fixes the count of kinds of sensitive information.
• 5 November 2026. Adds session replays inside the signed-in app (page layout, clicks and scrolls, with text masked), kept 30 days, and turned off with Usage data. “Your resume” now says your name and contact details are taken out where we find them, that this is automatic and can miss something, and that Anthropic’s training and deletion terms are its own. Adds “Your confirmed profile”: while the assistant is on, it can read the profile lines you confirmed when a question needs them.
• 4 November 2026. How we tell you about changes: we may change this policy at any time, a change takes effect when we post it here, and we tell you in the product, with no notice period and no email. Adds “Your resume”: if you tick the box on Profile, the assistant reads the text of your current resume, with your name and contact details taken out where we find them (automatic, and it can miss something), each time you add one or ask it to read it again, whatever your plan, to suggest the lines of your profile and what to search for; what goes to Anthropic for it, and how to stop it.
• 27 October 2026. The policy for paid plans. Describes payments through Stripe and the payment records kept; names Fantastic.jobs, the job data provider we license, and says that it and the employers’ feeds receive nothing of yours; adds Cloudflare and Better Stack to the companies that help us; says your agent’s vendor acts under your own account with it; says Jobs.Dog Assistant is on for every account whose plan includes it and sends to Anthropic only when you ask it a question; says that Anthropic also writes a short summary of a job posting in our shared catalog from its public text only, and how long Anthropic keeps what we send for it; adds that our database host encrypts the database at rest; adds sign-in with Google or Apple and the Apple relay address.
• 24 October 2026. The full policy for the private beta. It replaces the short page we showed before, and adds who we are, everything an account can hold and where it comes from, sensitive information, why we use it, your agent and Jobs.Dog Assistant, who else handles it, people named in your account and in job postings, how long we keep each kind, your rights, your agreements, email we send, how we protect it, children, where it is, how we tell you about changes, and the notice at collection.