Plain words. What we collect, and why.
JobHacki (“we”, “us”) runs jobhacki.com — a membership site with job-search tools, playbooks and a live job board. This page explains what we collect, which services and tools we use, how long we keep things and how to get your data deleted.
What we collect
- Your email address — when you create an account, finish one of our quizzes or join a waitlist. That's how we identify your account, check your membership and send you the emails listed in section 6.
- What you add to our tools — for example a resume you upload, your Auto Apply profile answers and saved jobs. We use it only to run those tools for you.
- Job alerts — only if you set one up with Alert me. We keep what the alert searches for (words, company, category, level, US state or remote), the email it goes to (your account email), which jobs we matched and when we emailed you. The job board is rebuilt every hour. When a new job matches one of your alerts, we email you within about 15 minutes. At most 2 alert emails a day; extra matches wait for your next one. To stop: use the link in any alert email (one alert or all of them), or delete the alert on your Job Alerts page. Separately we count, with no names or emails, which roles, categories and companies people follow.
- Quiz answers — when a JobHacki quiz sends us your answers (some of our quizzes keep them only in your browser).
- Waitlist details — if you join the done-for-you waitlist: your email, the plan you're interested in, the page and ad link you came from, and the email choices you ticked.
- Usage and device data — the pages you visit, what you click, and basic device and browser details, collected by us and by the analytics and advertising tools in section 4.
- Standard server logs — our hosting provider records basic request data (IP address, browser type, pages requested) for security and debugging.
- Your phone number — when you book a call with us, and whether you agreed to calls and texts. If you opt in, we also keep records of the calls and texts we send you: when they were sent and, for calls, the recording.
What we never collect
We never see or store your card details. All payments are processed by Whop. Card numbers go directly to Whop's payment system — they never touch our servers. We only learn whether your membership is active and what you paid.
We never sell or rent personal information to anyone.
The services we run on
JobHacki is built on a small set of providers, each of which handles a specific piece of your data under its own privacy policy:
- Supabase — sign-in and our database. Your email, account record, tool data and any waitlist entry live here.
- Google Cloud — hosting and file storage. Serves the site and its files; produces the server logs above.
- Whop — payments and memberships. Handles all billing data, including card details.
- Resend — email. Sends the emails listed in section 6.
- Cal.com — booking. Holds the details you enter when you book a call, including your phone number and the boxes you tick.
- SignalWire — phone calls and text messages. Carries our calls and texts to your number.
- xAI — the AI voice behind Sophia, JobHacki's AI, on calls. Processes the call audio while the call is live and produces the recording and transcript.
Analytics and advertising tools
We use these tools to see how the site is used and to measure and improve our ads. They load when you open our pages and can set their own cookies or browser storage:
- Google Analytics — visit and page statistics.
- Google Ads — measures which ads lead to sign-ups and purchases, and can show our ads to people who visited before.
- Meta Pixel (Facebook and Instagram) — measures our ads and can show them to people who visited before.
- LinkedIn Insight Tag — measures our LinkedIn ads and can show them to people who visited before.
- OpenAI ads measurement — measures the results of our ads shown in OpenAI's products.
- Whop pixel — Whop's tool for measuring visits and purchases that start on our pages. It also runs a device-identification script.
- PostHog — product analytics: page views, clicks, heatmaps and session recordings that replay how a page was used. Two PostHog projects run on the site: our main one on every page, and a second one that came with the site builder we used for our main pages (home, jobs, resume, toolbox, pricing, dashboard and the other pages built with it). The second one also records sessions. Both are set to mask the text you type into form fields in recordings.
- ManyChat — runs our Instagram and Messenger chat links and loads a small widget.
Our server also sends some events straight to ad platforms so they can measure our ads:
- Page visits and clicks — to Meta: page views, visits to some pages and clicks such as a click to checkout, with your IP address, browser details and Meta's own cookies (_fbp and _fbc).
- Purchases — when you pay through Whop, our server reports the purchase to Meta (the amount and a SHA-256 hash of your email) and a new paid membership to OpenAI (the plan and a SHA-256 hash of your email), with no IP address or browser details. When you land back on our site after paying, our server also reports the purchase to LinkedIn (the amount and a SHA-256 hash of your email). A SHA-256 hash is a scrambled code made from your email address, never the address itself; the ad platform uses it to match the event to its own accounts.
Our server also tells PostHog when a signed-in visitor reaches a members-only feature, linked to that visitor's account ID or email.
Some pages also load content from Google (fonts and company logos), icon.horse and Clearbit (company logos), Cloudflare's cdnjs and jsDelivr (page code) and Pexels (a photo). These services see your IP address when your browser fetches that content.
You can block these tools with your browser's privacy settings or an ad blocker. The site still works. Blocking them stops the tags in your browser, not the events our server sends (listed above), and the site has no setting of its own to turn those off.
Cookies
We set jh_at, a sign-in cookie that keeps you logged in between visits. We also set a few small cookies of our own: an anonymous visitor and session ID, where your visit came from (for example an ad click), which version of a page you saw in a test, and a flag for our own test traffic. The tools in section 4 set their own cookies and browser storage, for example Meta's _fbp and Google's _ga.
How we use your information
- To create and maintain your account.
- To check whether your membership is active and unlock the tools you have access to.
- To run the tools you use, such as the job board, Auto Apply and the Resume Builder.
- To send email: sign-in links and account notices; job alerts, only for alerts you set up; and, to people with a JobHacki account, a welcome series and job-search tips and offers. Every welcome, tips and offers email has an unsubscribe link.
- To measure and improve the site and our ads, using the tools in section 4.
- To keep the site secure and fix problems.
Phone calls and text messages
Calls and texts are optional. You can book a call and buy from us without agreeing to them.
- Calls. If you agree when you book, we call the number you gave us about your booking. Some calls are made by Sophia, JobHacki's AI, and a person may join if needed. Calls are recorded and transcribed for quality and training purposes, including training our AI, and so we can follow up on what you booked.
- Texts. If you opt in to texts, we use your mobile number to send the messages you asked for: booking confirmations and reminders, account updates, and links and offers related to your job search. Some texts are written and sent by our AI. Message frequency varies. Message and data rates may apply.
- Opting out. Reply STOP to any text to stop texts, or HELP for help. To stop calls, tell us on the call or email support@jobhacki.com.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers that deliver our calls and messages. See our SMS Terms.
Data retention and deletion
- Account data — kept for as long as your account exists.
- Quiz answers — if you don't become a member, we keep your quiz answers for 12 months, then delete them.
- Waitlist entries — kept until you ask us to remove yours.
- Call recordings and transcripts — kept for 1 month, then deleted. During that month we review calls and keep written summaries and lessons in our internal knowledge base, which trains our AI and improves our service. In those summaries your name, phone number and email are replaced with an alias.
- Interview Role Play practice — when you practice with voice, we send your microphone audio to our voice provider (ElevenLabs) so it can talk with you. We keep the text of the conversation, your quiz answers and your scores for up to 12 months [OWNER TO CONFIRM: retention period]. We use them to give you feedback and to learn which parts of interviews members find hard. We study them in groups, not by name. We do not sell them. Delete them any time: email support@jobhacki.com. The free voice uses your browser's own speech recognition, and some browsers (like Chrome) send the audio to their maker.
Want your data gone? Email support@jobhacki.com from the address on your account and ask for deletion. We'll delete your account record and confirm when it's done. Whop keeps billing records under its own policy, as payment processing requires.
Your rights (GDPR / CCPA)
Depending on where you live (including the EU/EEA under GDPR and California under CCPA/CPRA), you can:
- Access — ask what personal data we hold about you.
- Correction — ask us to fix inaccurate data.
- Deletion — ask us to delete your data (see above).
- Portability — receive a copy of your data in a usable format.
- Opt out of sale or sharing — we don't sell your personal information. Some of the advertising tools in section 4 may count as “sharing” for targeted ads under California law. You can block their tags in your browser; that does not stop the events our server sends (section 4), and the site has no setting of its own to turn those off. You can email us with any request.
- Non-discrimination — using any of these rights will never affect your access or pricing.
To use any of these rights, email support@jobhacki.com. We'll respond within the timelines the applicable law requires.
Children
JobHacki is not directed at children under 16, and we don't knowingly collect data from them. If you think a child has made an account, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the effective date at the top of this page. Material changes will be flagged on the site.
Real humans. Same inbox.
Send anything legal-, privacy- or refund-related to support@jobhacki.com and we'll get back to you.