Version 2026-10-19
Effective date: October 19, 2026.
This policy explains what personal information SlateJob collects, how we use it, who we share it with, how long we keep it, and the choices you have. It covers the SlateJob app, on any device, and the services behind it. In this policy, "SlateJob", "we" and "us" mean the business that provides SlateJob. Questions are welcome at privacy@slatejob.com.
We apply only to jobs you approve.
We build every application only from information you gave us and confirmed. We never add skills, jobs or qualifications you don't have.
We never sell your personal information or use it for advertising.
We never log in to, scrape or fetch LinkedIn.
Your documents, job-site passwords and sensitive answers are stored encrypted.
You can export or delete your data in the app at any time.
If you never subscribe, we delete your account 14 days after the free trial ends.
We collect the information below. To use SlateJob you need to give us your account details, your resume and your two work eligibility answers. Everything else depends on what you choose to add and do.
Account details. Your email address, your name, an identifier for your Apple or Google sign-in, and the phone number and time zone you enter. If you use Apple's Hide My Email, we receive the relay address Apple gives us. We never see your Apple or Google password.
Documents. Your resume. If you add them, also your LinkedIn profile (the "Save to PDF" file or data export you download from LinkedIn yourself, or text you paste), your cover letter, and files that prove a qualification.
Facts about you. What we read from your documents and you confirm or correct: contact details, work history, education, certifications, skills, languages, publications, projects and links. This also includes qualifications you add and the answers you save to application questions.
Work eligibility answers. Whether you are authorized to work in the US and whether you need visa sponsorship. If you add them, also your salary expectation and notice period.
Voluntary self-identification answers. Only if you choose to give one when an employer's form asks, for example about gender, race or ethnicity, veteran status or disability.
Job preferences and activity. Your target profiles (such as roles, locations, work arrangement and salary), the jobs you approve or skip, what we learn from those choices to rank your feed, your settings, and the skills you tell us you have or are learning.
Applications. The jobs you approve, the exact resume, cover letter and answers sent with each one, tailored resume PDFs, the confirmation from the employer's site, notes, and the status you set.
Job-site accounts. When an employer's job site needs an account, the site, the email address used, and the password we generate for it.
Your website and linked profiles. If you add your own website, ORCID iD or GitHub username: the public content we read from them, a copy of that source text, and the items you keep.
Shared job links. LinkedIn job links you share into the app, and the job title and company if you type them. We keep the link; we never open it.
Subscription details. Your plan, its status and renewal date, how you pay (Stripe, Apple or Google), and a reference to the purchase.
Notifications. If you allow notifications, your device's push token.
Account activity. When you last signed in or used the app, and which versions of this policy and the Terms of Service you accepted, and when.
Messages. If you email us, your email address and your message.
We don't collect your precise location or your contacts, the app doesn't use your camera or microphone, and it contains no advertising or analytics trackers. We don't access your email account.
From you: what you type, upload or share in the app.
From your sign-in provider: when you sign in with Apple or Google, it sends us your verified email address, your name if you share it, and an account identifier, through Supabase, which runs our sign-in.
From sources you point us to: your own website, and your ORCID and GitHub profiles through their official public APIs. On your website we stay on your site, follow its robots.txt rules and read only a limited number of pages. We never contact LinkedIn or Google Scholar.
From payment providers: Stripe, Apple and Google tell us when your subscription starts, renews, changes or ends.
From employers' job sites: the result of each application, such as a confirmation number.
Job listings come from public job boards, company career sites and job search services. They describe jobs, not you.
We use your information only to provide SlateJob to you:
To find jobs that match your target profiles, explain each match, and show skills you could add.
To prepare applications from your confirmed facts, as described in "How we apply for you".
To submit the applications you approve, and to create accounts on employer job sites when a site requires one.
To track your applications. An application with no status update for 14 days is marked "No response" and stays in your history.
To send you notifications and emails about your account and your applications, such as a step only you can finish, a job that newly matches, or a trial or deletion notice.
To run the free trial and subscriptions, including making sure each person gets one free trial.
To keep SlateJob secure, prevent abuse, and meet our legal obligations.
We don't use your information for advertising, we don't sell it, and we don't use it to train AI models.
You approve every application. Nothing is sent to an employer unless you approved that job.
We prepare each application only from your confirmed facts and your own documents. We may reword, reorder and shorten your material to fit a job. We never add skills, employers, job titles, degrees, certifications or numbers you didn't give us, and everything we write or change is checked against your facts before it is used.
If a form asks something your facts can't answer, the application waits for your answer. We never guess.
Answers about work authorization, visa sponsorship, salary and notice period come only from what you entered.
Voluntary self-identification questions are filled in only with the answer you gave for that question.
If a job site needs an account, we create one with your email address and a strong password made for that site alone.
If a site shows a CAPTCHA, we stop and ask you to finish that step yourself. We never solve or bypass CAPTCHAs.
Job-site login details, work authorization and sponsorship answers, and voluntary self-identification answers are used only to complete your own applications. We store them encrypted and never use them to infer anything about you. Giving us a self-identification answer is always your choice.
We use Claude, an AI model made by Anthropic, to read job postings, to reword single lines of your resume for a job, to write your cover letter for a job, to write a resume line from your own description of how you used a skill, and to pick out items such as publications from pages of your website that have no clear structure.
We send Anthropic only the text each task needs: for example, one resume line and key terms from the posting, or the visible text of one page of your website. To write a cover letter, we send the employer's name, the job title and key terms from the posting, your name, the confirmed parts of your profile a letter can draw on (summaries, work history, education, certifications, skills, projects and languages), and your own cover letter if you gave us one. We never send Anthropic your email address, phone number, job-site passwords, or your answers about work eligibility or self-identification. Anthropic processes this text for us under its commercial terms and does not use it to train its models.
We check every AI result before using it. Wording for your resume or cover letter may contain nothing you didn't give us, a cover letter may not mention work eligibility, visa sponsorship or pay, and anything read from a job posting or your website must appear in that text. A result that fails the check is thrown away: for your resume your own wording is used instead, and for a cover letter, one made from your own lines. You can read and edit a cover letter until the application is sent. Items picked out of your website also wait for your review before we use them. Text from job postings and websites is treated as information, never as instructions.
We share your information only in the cases below.
Employers you approve. For each job you approve, we send the employer's job site your name, email address, phone number, resume, cover letter, your answers to its questions, and links you added, such as your LinkedIn profile URL or website. The employer's own privacy policy then applies to your application, and deleting your SlateJob account does not remove it from their systems.
Service providers. The companies listed in the next section run parts of SlateJob for us. They may use your information only to provide their services to us.
Legal reasons. We disclose information when the law requires it, for example to comply with a valid court order, or when it is needed to protect someone's safety.
Business changes. If SlateJob is merged with or acquired by another company, your information may pass to the new owner, who must continue to protect it as this policy describes.
We do not sell your personal information, share it for targeted advertising, or give it to data brokers.
Supabase: our database and sign-in.
Render: hosting for our servers.
Amazon Web Services: the keys that protect your encrypted data (AWS Key Management Service), and delivery of our emails.
Anthropic: AI processing, as described above.
Stripe: web payments, as merchant of record.
Apple: Sign in with Apple, App Store purchases, and delivery of notifications to Apple devices.
Google: Google sign-in, Google Play purchases, and delivery of notifications to Android devices.
Expo: sending push notifications to your device.
Cloudflare: receiving email sent to our slatejob.com addresses and passing it on to us.
On the web, you pay on Stripe's checkout page. Stripe acts as the merchant of record for these payments: it processes the payment, handles sales tax and sends your receipts. Stripe's privacy policy applies to the payment details you give it. We send Stripe your email address and an internal account number so the payment is linked to your account.
In the iPhone and Android apps, you pay through Apple or Google under their terms and privacy policies. We receive the details we need to check the purchase with Apple or Google and link it to your account, through an account token that contains no name or email address.
Either way, we never receive your full card number.
When you subscribe, we record the plan, the price, the billing period, the renewal terms you were shown, the time and the channel (Stripe, Apple or Google). When you turn off renewal or a subscription ends, we record that too.
We keep these records as evidence that we follow California's automatic-renewal law, and we use them for nothing else. They are included in your data export. If you delete your account, we keep them with nothing that links them to you, for as long as that law requires, and then delete them.
Every new account gets a 3-day free trial with every feature, limited to 1 application a day and 1 active target profile. The trial starts when your account is created.
If the trial ends and you haven't subscribed, the app locks. You can still sign in, subscribe or restore a purchase, export your data, delete your account, and read this policy and the Terms of Service. Applications you approved that weren't sent yet are paused, and they continue only if you subscribe.
If you never subscribe, we delete your account and all its data 14 days after your trial ends. We email you when the trial ends with the deletion date, and again 7 days before. The deletion never happens sooner than 14 days after the first email. If you subscribe before then, everything is kept.
If a paid subscription ends, the app locks the same way. Your data is kept until you delete your account or it is deleted after inactivity, as described below.
When an account is deleted, we keep one-way codes made from its email address and from its sign-in identifiers, including those of the Apple or Google account used to sign in. Each code is a keyed hash (HMAC-SHA256) and can't be turned back into the email address or identifier.
Before making the code, we normalize the email address: capital letters and anything after a "+" sign are ignored, and so are dots in Gmail addresses.
When someone signs up, we compare their codes with these. If one matches, the new account starts without a free trial. We use these codes only for this check, and we keep them for as long as we offer a free trial.
Activity means signing in or using the app while signed in.
After 6 months without activity, we delete the saved passwords of the job-site accounts we created for you. The list of those accounts stays, so you can still see where you have one.
After 12 months without activity, we delete your account and all its data, and email you the list of job-site accounts we created, so you can close them.
We email you 30 days and 7 days before each deletion. Any activity resets the clock, even after a warning.
We never delete anything for inactivity while a paid subscription is in force. Accounts that never subscribed follow the free trial rules above instead.
We keep your information while your account exists: until you delete it, or until it is deleted under the free trial or inactivity rules above. Saved job-site passwords can be deleted earlier, after 6 months without activity.
After an account is deleted, we keep only the items below. None of them contains your name, email address or documents.
The one-way codes that allow one free trial per person, as described above.
Subscription consent and cancellation records, with nothing that links them to you, until their retention period ends.
Counts of AI use and computing time, which we keep for our accounts.
The reference numbers of payment notifications from Stripe, Apple and Google, so that a repeated notification has no effect.
Deleted data can remain in our database backups until those backups expire, within 14 days.
We store your documents, the facts we build from them, tailored resumes, application materials, job-site passwords, and your work eligibility and self-identification answers encrypted, with AES-256-GCM. Each item is encrypted with its own key, and those keys are protected by keys held in AWS Key Management Service, separate from our database.
Information travels between the app and our servers over encrypted connections.
Each user's data is kept separate from every other user's.
Our logs identify records by internal numbers and are scrubbed of email addresses, phone numbers and other personal details.
On your phone, the app keeps your sign-in session in the device's secure storage.
No system is perfectly secure. If a security incident affects your personal information, we will notify you, and the authorities where required, without unreasonable delay and as the law requires.
These choices are open to every SlateJob user, wherever you live.
Export your data. In the app, go to Account and tap Export my data. You get one file with everything we store about you, including your documents. Job-site passwords are included only if you turn that on.
Correct your data. Replace your documents, review your facts, add qualifications, and change your answers and job preferences in the app. For anything else, email us and we will correct it.
Delete your account. In the app, go to Account, type your email address and tap Delete my account. If your subscription still renews, or a payment for it is past due, cancel it first. We delete your data, except the items listed in "How long we keep your information", and remove your sign-in record from Supabase. We can't close accounts on employer job sites for you, so we show you the list of those we created, and you can close them yourself. You can also ask us to delete your account by emailing privacy@slatejob.com from the email address on your account.
Notifications. You can turn notifications off at any time in your device's settings.
Other requests. Email privacy@slatejob.com. We may ask you to confirm a request from the email address on your account. We reply within 45 days.
We will not treat you differently, for example by charging you a different price, because you used any of these rights.
If you live in California, the California Consumer Privacy Act (CCPA) gives you the rights in this section. It adds to the rest of this policy.
We collect the categories of personal information below, from the sources and for the purposes described above. How long we keep them is described in "How long we keep your information".
Identifiers: your name, email address, phone number, sign-in and account identifiers, and push token.
Customer records: your resume and other documents, with your contact details, education and work history.
Characteristics of protected classifications: only if you give them, self-identification answers such as gender, race or ethnicity, veteran status or disability. Your work authorization and sponsorship answers can also show citizenship or immigration status.
Commercial information: your plan, subscription and purchase history.
Internet or other electronic network activity: how you use the app, such as the jobs you approve or skip and when you were last active.
Professional or employment-related information: your work history, skills, qualifications, job preferences, salary expectation, notice period, and your applications and their status.
Inferences: match scores, skill gaps and the preferences we learn from your choices.
Sensitive personal information: job-site login details; citizenship or immigration status shown by your work authorization and sponsorship answers; and, only if you give them, self-identification answers that reveal racial or ethnic origin, sexual orientation, or health information such as disability.
We do not collect precise geolocation or biometric information.
Disclosures. We disclose these categories to our service providers for the purposes described in this policy, and to employers when you approve a job. We do not sell or share personal information, as the CCPA defines those terms, and we have not done so in the past 12 months. We do not sell or share the personal information of anyone under 16.
Sensitive personal information. We use and disclose it only to provide the services you ask for, as the CCPA permits, and never to infer characteristics about you. We use it for nothing else, so there is no further use to limit. You can still ask us to delete it at any time.
Your rights. You can ask to know what personal information we collect, use and disclose, and to get a copy of it. You can ask us to correct it or delete it. You can opt out of the sale or sharing of personal information, which we don't do, and limit the use of sensitive personal information, which we already limit. We will not discriminate against you for using these rights.
How to make a request. Use Export my data or Delete my account in the app, or email privacy@slatejob.com. To protect your data, we confirm requests through your signed-in account or by email from the address on your account. You can also use an authorized agent: we will ask for your signed permission and may ask you to confirm your identity with us directly. We reply within 45 days. If we need more time, up to 45 more days, we will tell you why.
Direct marketing. We do not share personal information with third parties for their direct marketing.
Do Not Track. SlateJob does not track you across other companies' apps or websites, so Do Not Track signals don't change how we handle your information.
SlateJob is for adults. You must be 18 or older to use it, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email privacy@slatejob.com and we will delete it.
When we change this policy, we publish the new version with a new effective date, and the app asks you to accept it before you continue using SlateJob.
Privacy questions and requests: privacy@slatejob.com.
Everything else: support@slatejob.com.