GotAJob ("GotAJob", "GAJ", "we", "us") operates gotajob.com, a community platform for real job-offer stories, free AI career tools and related career services. This policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. Questions? Reach us through our contact page.
Who we are
GotAJob is the controller of the personal data described in this policy.
What we collect
Information you give us
- Account details: your email address, and optionally a username, display name, phone number and profile photo, when you register. If you sign in with Google or LinkedIn, we receive your name and email address from that provider.
- Story submissions: the role, company, location, salary, employment type, work model, application and interview counts, source of hire, outcome and the free-text write-up you choose to share. You decide whether a story is attributed to your username or shown anonymously, and which optional fields to include.
- Verification documents: if you choose to verify an offer, the file you upload (offer letter, signed agreement, paystub or HR email). These are stored privately and used only to confirm your story.
- What you enter into our free AI tools: the resume you paste or upload to the Resume Review, the LinkedIn profile URL you submit to the LinkedIn Profile Analyser, and the offer details you enter into the Job Offer Evaluator. See "Free AI tools" below for exactly what happens to them.
- Payment information: if you buy a coaching session, payment is handled by Stripe. We never see or store your full card number; we keep a record of the order (plan, amount, status) and the email used.
- Messages: anything you send us through the contact form or by email.
Information collected automatically
- Sign-up context: at registration we record the IP address, browser user-agent and browser language of the request. We use this only to detect and prevent spam, fraud and abuse.
- AI tool usage records: each time you run one of our free AI tools we record your IP address, browser user-agent and browser language, plus a few non-identifying facts about the request: the target role you entered; for the Resume Review, the uploaded file's name; for the Job Offer Evaluator, the role title, company stage, country, work model, currency, a salary band (not the exact salary), whether equity was offered, and the score it gave. We use these records to enforce the tools' daily usage limits, prevent abuse, and understand how the tools are used.
- Site search: when you search stories, we record the search term, the page you searched from and the time. These records are not linked to you or your account.
- Cookies and similar technologies:
- Essential: a cookie set by our authentication provider that keeps you signed in.
- Advertising measurement (Meta Pixel): our pages load the Meta Pixel, which sets a cookie (
_fbp) and sends Meta information about your visit, such as the page you viewed, your IP address and browser details. We use it to measure and improve our advertising on Meta's platforms (Facebook and Instagram). Meta may combine this with other information it holds about you under Meta's Privacy Policy. You can limit this through your browser's cookie settings and Meta's ad preferences.
- Web analytics: we use Vercel Web Analytics to count page views and referrers. It does not use cookies and does not identify you personally.
- Bot protection: Google reCAPTCHA runs on our sign-up, login and contact forms and on our free AI tools to tell humans from bots. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms.
- Embedded videos: some stories include a YouTube video, loaded in YouTube's privacy-enhanced mode. When it loads, Google receives information about your visit, such as your IP address, under Google's Privacy Policy.
Free AI tools
Our Resume Review, LinkedIn Profile Analyser and Job Offer Evaluator are free and need no account.
- What we send, and to whom: the text you submit (your resume, the offer details you enter, or the public contents of the LinkedIn profile you point us to) is sent to Anthropic, which provides the AI model that writes your review. For the LinkedIn Profile Analyser, we use serper.dev to fetch the publicly visible page at the URL you submit.
- What we keep: we do not store your resume text or file, the LinkedIn profile URL or its contents, or the free-text details of your offer. We keep only the usage record described above.
- Please do not submit other people's data through these tools unless you have their permission.
How we use your data
- To create and run your account and let you sign in, including through Google and LinkedIn.
- To publish the stories you submit, after moderation, and to power the aggregate statistics on our Offer Index. Published statistics are aggregated and do not identify individual storytellers.
- To verify offers you ask us to verify.
- To run the free AI tools you use and to enforce their usage limits.
- To process coaching payments and deliver the service you bought.
- To respond to your messages.
- To measure and improve our advertising, as described under "Cookies and similar technologies".
- To keep the platform safe by detecting spam, fraud and abuse and enforcing our terms.
- To send essential service emails such as sign-in confirmation, password reset and receipts, via our email provider. We do not send marketing email without your consent.
If you are in the EEA or UK, our legal bases for processing are: performing our contract with you, our legitimate interests (security, fraud prevention, running and improving the service, and measuring our advertising), your consent where we ask for it, and compliance with legal obligations.
Sharing and service providers
We do not sell your personal data. We share it with these providers, who process it to provide their services to us:
- Supabase: database, authentication and file storage (hosted in the EU).
- Vercel: application hosting and cookieless web analytics.
- Anthropic: the AI model behind our free AI tools.
- serper.dev: fetching public LinkedIn profile pages for the LinkedIn Profile Analyser.
- Stripe: payment processing.
- Resend: transactional email delivery.
- Google: reCAPTCHA bot protection, Google sign-in, and embedded YouTube videos.
- LinkedIn: LinkedIn sign-in.
- Meta: advertising measurement through the Meta Pixel.
If you book a coaching session, you schedule it through Cal.com, a third-party scheduling service; what you enter there is handled under Cal.com's privacy policy.
We may also disclose data where required by law, or to protect the rights, safety or property of GotAJob, our users or others.
Public content
Stories you publish, together with any username or display name you attach to them, are visible to anyone on the internet and may be indexed by search engines and read by AI assistants. Choose anonymous submission if you do not want a story linked to your profile. Aggregate statistics never identify individual storytellers.
International transfers
Our database and application servers run in the EU (Ireland), but some providers process data in other countries, including the United States (for example Anthropic, Meta, Google, Stripe and Resend). Where required, we rely on appropriate safeguards, such as the providers' standard contractual clauses, for these transfers.
Data retention
- Account and story data is kept while your account is active.
- Verification documents are kept only as long as needed to verify a story, then deleted.
- Order records are kept as required for tax and accounting.
- Sign-up security data and AI tool usage records (IP address, user-agent and language) are kept for fraud prevention and usage limits.
- Site search records (search term, page and time only) are kept to improve search.
You can ask us to delete your account and associated personal data at any time.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to object to certain processing, including processing for advertising measurement. You can manage much of your data directly in your profile, or contact us to exercise any of these rights. If you are in the EEA or UK, you also have the right to complain to your local data-protection authority.
Security
We use industry-standard measures to protect your data, including encryption in transit, access controls and private storage for sensitive uploads. No system is perfectly secure, but we work hard to keep your data safe.
Children
GotAJob is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will update the "last updated" date above and, for material changes, take reasonable steps to notify you.
Contact
For any privacy questions or requests, please use our contact page.