Privacy Policy

Who we are

JOSAI is a personal AI job-search service operated by PMB Software ("we," "us"). This policy explains what we collect, why, and what we will never do with it.

What we collect

• Account basics — your name and email, so you can sign in and we can reach you about your account. If you pause your account, the reason you choose and any note you write.
• Your resume — you upload it; it's the ground truth JOSAI scores jobs against and tailors documents from.
• Job-search data — the job cards JOSAI builds from your job-alert email (role, company, location, salary, posting text, which email it came from, and for recruiter emails the text of the message JOSAI scored, kept with the card so you can read it in the app) or, if you ask for a starter set, from postings JOSAI finds directly on employer job boards, plus the research, tailored documents, notes, tasks, and chats you create in the app.
• Your preferences — the scoring preferences and settings you configure.
• Basic service records — sign-in and operational logs needed to keep the service running and secure. No advertising trackers, ever.
• Beta signup details — if you request an invite on josai.ai, we keep what you submit (name, email, who referred you, and the optional LinkedIn URL and note) on our waitlist so we can review your application and send your invitation. If you're approved and join, the LinkedIn URL you provided is added to your account; you can ask us to remove your waitlist details at any time at privacy@josai.ai.

How the email scan works

If you connect Gmail, JOSAI uses a read-only permission to scan for job-related mail: job-alert emails (from sites like LinkedIn and Indeed, or a label you choose) and inbox messages that may be recruiter outreach. Only job-related information is saved. Emails that turn out not to be job-related are screened just long enough to determine that, then discarded — nothing from them is stored. JOSAI never modifies, moves, or deletes your email, and a send permission is used solely to deliver your own summary email to your own address. You can disconnect Gmail at any time in Settings or from your Google account.

Google user data — the Limited Use commitment

JOSAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In plain English: Gmail-derived data is used only to provide the job-search features you see, is never used for advertising, and is never sold or transferred to third parties except as needed to provide those features (see AI processing below), for security, or to comply with law.

AI processing

JOSAI's intelligence comes from Anthropic's Claude. To score jobs, research companies, tailor documents, and answer your questions, we send the relevant job postings, recruiter emails, and your resume to the Claude API. When you use the per-card tools (Ask JOSAI, the Interview Dossier, the Resume Tailor), JOSAI also gives Claude what it already holds for that card and your search: your notes, tasks and application notes, the card’s score and AI assessment, its ghost-check verdict and status history, the research report, dossier and tailored documents it made earlier, your confirmed search profile, a one-line summary of your other active opportunities, and your recent Ask JOSAI conversation on that card — so its answers are grounded in your own work rather than guessed. Some of this happens on a schedule rather than at a click: overnight scans score new jobs, and once a week JOSAI sends summary statistics about your search activity (counts and status changes — not your emails) to Claude to write your coach’s note. Under Anthropic's commercial API terms, this data is not used to train AI models. We use no other AI providers.

Checking that jobs are real

JOSAI's ghost-job detection makes read-only requests to public sources — employer career pages and the Internet Archive — and, for some checks, performs web searches through our AI provider (for example, to confirm a posting on the employer's own careers site, recover a missing job description, or refresh company news before your interview). Those requests and searches contain only the job title, the posting's URL, or the company's name. Nothing about you — not your name, resume, or email — is ever included.

Finding jobs for you (the optional starter-set search)

If your job-board emails haven't started arriving yet, JOSAI can offer a one-time search of employer job boards (Greenhouse, Lever, Ashby, and Workable) to start your board. This only runs if you say yes. The searches go through our AI provider and contain only generic search terms drawn from your stated preferences — job titles, seniority, and locations, such as "senior product manager" or "remote". They never include your name, your contact details, or your resume text. The postings JOSAI finds are fetched from the employer's own job board and saved as job cards like any other.

Where your data lives, and how it's protected

Your job-search data lives in a hosted database on our cloud infrastructure provider (Heroku, hosted in the United States), encrypted in transit and at rest, with every account's data isolated from every other account's at the database level. Access is limited to what's required to operate the service. Nothing is stored on your own computer beyond what your browser keeps for a signed-in session.

What we share — and with whom

We share your information with no one without your approval, with these narrow operational exceptions:

• Service providers that process data on our behalf and under our instructions — cloud hosting, Anthropic (AI processing, as described above), and an email-delivery service (Resend) that sends JOSAI's own emails to you: signup verification, your beta invitation, and service notices.
• You-initiated sharing — for example, when you email a job card to someone you choose.
• Legal requirements — if we're legally compelled, we'll disclose the minimum required and, where allowed, tell you first.

What we never do

• Never sell your data. Never share it for advertising. No ad trackers, no data brokers.
• Never use your data to train AI models.
• Never show your resume, your search, or your activity to employers or recruiters. JOSAI works for you, not for them.
• Never email anyone on your behalf without you initiating it.

Emails we send you

Service emails only: your daily summary, account and security notices, and replies when you contact us. If we ever add optional product-news email, it will be opt-in and every message will unsubscribe in one click.

Keeping and deleting your data

We keep your data while your account is active or paused. Delete your account and everything — resume, job cards, research, documents, chats — is deleted from our systems within 30 days, except minimal records we're legally required to keep. You can export your data first, and you can ask us to delete a website sign-up request at any time.

Your rights

Wherever you live, we honor the same rights: see what we have about you, export it, correct it, or delete it. Email us and we'll act on it promptly.

Cookies

The app uses a session cookie to keep you signed in — that's it. This website uses no cookies, analytics, or tracking.

Age

JOSAI is for job seekers aged 16 and over and isn't directed at children.

Changes

If this policy changes materially, we'll post the update here with a new effective date and call the changes out plainly — and email account holders before they take effect.

Contact

Questions, requests, or concerns: privacy@josai.ai