Privacy Policy
What we collect, why we collect it, and what you can ask us to do with it.
Last updated 2026-05-11. This is an interim policy. A finalised version reviewed by Australian privacy counsel will replace it as the Service grows. The substantive commitments below will not weaken in the final version.
1. Who this policy covers
This policy applies to JobMaster (the "Service"), including the marketing site at jobmaster.com.au and the web application at app.jobmaster.com.au. JobMaster is operated by a registered Australian business. Details on the About page.
2. What we collect
- Account information. Email address, hashed password, and (for paying customers) billing details handled by Stripe. We do not see or store your full card number.
- Profile content. The resume, optional cover letter, writing samples, profile facts, and answers to common application questions you provide so JobMaster can match jobs against you and write tailored documents.
- Job-pipeline data. Listings JobMaster surfaces for you, your match scores, the resumes and cover letters generated, and the pipeline status you assign to each role.
- Usage data. Standard server logs (IP address, user agent, timestamp, pages requested) for security and abuse detection. Retained for 90 days.
- Support communications. Anything you send to contact@jobmaster.com.au and our reply.
3. Why we collect it
- To run the Service: matching jobs to your profile, generating tailored documents, displaying your pipeline.
- To bill you: Stripe processes payments and sends us a webhook on each charge.
- To support you: replying to your emails and contact-form submissions.
- To secure the Service: detecting and blocking abuse, fraud, and breaches.
- To comply with the law: responding to lawful requests from Australian authorities.
4. Where it lives
The SaaS tier hosts your data in Google Cloud Platform's Sydney region (australia-southeast1) with strict per-user data isolation. Encryption at rest is provided by Google Cloud KMS; encryption in transit is TLS 1.2 or higher. Stripe processes payments under their own privacy and security regime (stripe.com/privacy).
5. AI providers
When JobMaster generates a resume, cover letter, match score, or skill insight, it sends the relevant inputs to a third-party AI provider that you select: Anthropic Claude, OpenAI, or Google. We pass the minimum content needed for the task and receive the model's output. We do not authorise these providers to train their models on your inputs; their default API terms align with this commitment but are subject to change. Their privacy policies:
6. Who else sees your data
Only the third-party processors strictly required to run the Service: Stripe (payments), Resend (transactional email), Google Cloud (hosting), and the AI provider you select. We do not sell your data. We do not share it with advertisers. We do not run third-party analytics on the SaaS app.
7. How long we keep it
Account and pipeline data: for as long as your account is active. After cancellation, your data is fully deleted within 30 days. Server logs: 90 days. Billing records: 7 years (mandated by Australian tax law). Support emails: 2 years from the last contact.
8. Your rights
You can ask us to:
- Show you what we hold about you.
- Correct anything that's wrong.
- Delete your account and the data tied to it.
- Export your data in a portable format.
- Stop processing your data for any non-essential purpose.
Email contact@jobmaster.com.au. We will respond within 30 days.
9. Cookies
The marketing site (jobmaster.com.au) does not use tracking cookies. The SaaS application uses a strictly necessary session cookie to keep you signed in. We do not use third-party advertising or analytics cookies on either surface.
10. Children
JobMaster is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has used the Service, email us and we will delete the account.
11. Complaints
If you believe we have mishandled your personal information, please email contact@jobmaster.com.au first; we want to fix it. You can also lodge a complaint with the Office of the Australian Information Commissioner: oaic.gov.au.
12. Changes to this policy
We will update this policy as the Service evolves. Material changes will be announced by email to active users at least 14 days before they take effect.