JobJoy Privacy Policy

Privacy Policy

Thrive Career Co. | JobJoy — AI Resume Matcher and ATS Optimizer Last updated: April 21, 2026

1. Introduction

This Privacy Policy describes how Thrive Career Co. ("we," "us," or "our") collects, uses, and protects information when you use JobJoy — AI Resume Matcher and ATS Optimizer (the "Extension") and any related services (collectively, the "Services").

We collect only what we need. We do not sell your data. We do not share it with advertisers. Your resume, your job descriptions, and your personal information are processed to provide you a service — nothing more.

We also want to be upfront: JobJoy uses artificial intelligence to rewrite resume content and analyze keyword matches. AI is a powerful tool, but it is not perfect. It can make errors, misinterpret context, or produce suggestions that do not accurately reflect your experience. You should always review every output before using it. Your privacy throughout this process is fully protected — but your judgment remains essential.

By using the Services, you agree to the terms of this Privacy Policy.

2. Who We Are

Thrive Career Co. Operator of JobJoy — AI Resume Matcher and ATS Optimizer Website

3. What Information We Collect and Why

We follow a strict data minimization principle. We collect only what is directly necessary to provide the service you asked for, and nothing else.

3.1 Your Email Address

When you create an account, we collect your email address. That is the only personal identifier we collect.

We use your email address to:

Create and manage your account

Send you payment receipts and subscription confirmations from Stripe

Notify you of important changes to the Service or this Privacy Policy

Allow you to recover access to your account

We do not use your email address to send promotional or marketing emails without your explicit consent. We do not share your email address with any third party except as required to process your payment through Stripe.

Your email address is stored securely and is never sold, rented, or traded.

3.2 Resume and Job Description Content

When you upload your resume or paste a job description into the Extension, that content is sent to our AI processing infrastructure to generate your optimized resume, keyword analysis, ATS match score, and downloadable PDF.

We do not store your resume or job description content after processing is complete. This content is processed in real time and discarded immediately upon delivery of your results. It does not sit on our servers. It is not reviewed by humans. It is not used to train AI models. It is used once, for the purpose you submitted it, and then it is gone.

We want to be clear about what this means for your privacy: your resume contains sensitive personal and professional information — your work history, your skills, your contact details. We take that seriously. We have designed the system so that this content is never retained.

3.3 A Note on AI-Generated Output

JobJoy uses AI to rewrite your resume bullets, analyze keyword gaps, and generate an ATS-ready PDF. This technology is genuinely useful, but it has real limitations you should be aware of:

The AI can misinterpret the context of your experience and produce inaccurate rewrites

The AI may add, omit, or rephrase details in ways that do not fully reflect your work history

Keyword match scores and ATS analysis are estimates, not guarantees of how any specific employer's system will evaluate your resume

The AI may occasionally produce suggestions that sound plausible but are factually incorrect in the context of your specific role or industry

You are responsible for reviewing every piece of AI-generated output before submitting it to an employer. Never submit a resume without reading it carefully. Your career and your professional reputation matter — use JobJoy as a starting point and a tool, not as a final authority.

Your privacy is fully protected regardless of AI accuracy. The fact that AI may make mistakes does not affect how your data is handled. Your resume content is still discarded after processing. Your email address is still protected. The two issues — AI accuracy and data privacy — are entirely separate, and your privacy is not compromised in either case.

3.4 Payment Information

Payments are processed entirely by Stripe, a leading payment processor trusted by millions of businesses worldwide. We do not collect, see, store, or have access to your credit card number, CVV, bank account details, or any other payment credentials.

When you make a payment, Stripe handles the entire transaction and returns to us only a confirmation that payment was successful and a Stripe customer identifier that links to your account. Please review Stripe's Privacy Policy at stripe.com/privacy for full details on how Stripe handles your payment information.

3.5 Usage Data

We collect basic, anonymized usage metrics such as how many analyses were run and which features were used. This data is aggregated — it cannot be traced back to you as an individual — and is used only to understand how the Extension is being used so we can improve it.

3.6 Browser Local Storage

The Extension uses your browser's local storage to save your preferences and track free usage limits on your device. This data lives entirely on your device. We do not have access to it.

3.7 Log Data

Our servers automatically collect standard log data including IP addresses, browser type, operating system, and timestamps when you interact with our infrastructure. This is used for security monitoring and debugging. Log data is retained for a maximum of 30 days and then permanently deleted.

3.8 What We Do Not Collect

To be explicit:

We do not collect your name, phone number, or physical address

We do not collect your LinkedIn credentials or login information for any other service

We do not collect location data beyond what is incidentally included in your IP address

We do not purchase or supplement your data from data brokers

We do not build advertising profiles

We do not collect biometric data

We do not store your resume or job description content after processing

4. How We Use Your Information

We use the information we collect for these purposes only:

To provide the Service. Your resume and job description content is processed by AI to generate optimized output. This is the sole reason it is processed.

To manage your account. Your email address is used to authenticate your sessions, manage your subscription, and send you service-related communications.

To process payments. We work with Stripe to confirm your subscription status and provide access to paid features.

To improve the Service. Aggregate, anonymized usage data helps us identify bugs and make improvements.

For security. Log data and account activity are monitored to detect and prevent unauthorized access or abuse.

5. How We Share Your Information

We do not sell your personal information. We do not share it with advertisers or data brokers. Period.

We share information only in these limited circumstances:

Stripe. We share the minimum necessary information with Stripe to process your payment and manage your subscription. Stripe is bound by their own privacy policy and industry-standard security requirements.

Legal Requirements. We may disclose information if required by law, court order, or government regulation, or if we have a good-faith belief that disclosure is necessary to protect our rights or prevent harm.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may transfer to the acquiring entity. We will notify you before this occurs and before your data becomes subject to a different privacy policy.

6. Data Retention

Resume and job description content — not retained. Deleted immediately after processing.

Email address and account information — retained while your account is active and for up to 90 days after deletion to allow for account recovery requests.

Payment records — retained for up to 7 years as required by tax and financial regulations. These records are maintained by Stripe.

Log data — retained for a maximum of 30 days, then permanently deleted.

Anonymized usage data — retained indefinitely as it contains no personally identifiable information.

When you delete your account, your personal information will be deleted or anonymized within 30 days, except where retention is required by law.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your information. These include encrypted data transmission via HTTPS, secure credential storage using industry-standard hashing, and access controls that restrict who can access user data.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [your contact email].

8. Your Rights and Choices

Regardless of where you live, you have the following rights:

Access. You can request a copy of the personal information we hold about you.

Correction. You can update your email address in your account settings or by contacting us.

Deletion. You can delete your account at any time through account settings or by contacting us. Your personal information will be removed within 30 days.

Opt Out of Marketing. You can opt out of any marketing communications by clicking unsubscribe in any email or contacting us directly.

Data Portability. You can request a copy of your account data in a readable format.

To exercise any of these rights, contact us at [your contact email]. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to know that we do not sell your personal information, the right to request deletion of your personal information, and the right to non-discrimination for exercising these rights.

10. European Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases: performance of a contract (to provide the Services), legitimate interests (security and service improvement), and consent (marketing communications). You have the right to access, correct, delete, and port your data, and to lodge a complaint with your local data protection authority.

11. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you by email and update the date at the top of this document. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your information, please contact us: thrivecareerco@gmail.com

We are committed to resolving any privacy concerns promptly and fairly.

This Privacy Policy was last updated on April 21, 2026.