Privacy Policy — Job For Me

Job For Me (jobforme.app) is operated by Otech Labs LLC (“Otech Labs,” “we,” “us”), a Connecticut limited liability company, 33 W Palmer St, Danielson, CT 06239, United States.

This Privacy Policy is the privacy contract. A short plain-language summary sits at the top of this page so people can read the product promises quickly. If the summary and this policy differ, this policy controls. This page is not a non-binding overview.

Questions: privacy@otechlabs.io. Product support: support@jobforme.app.

In plain language

Your profile is private by default. Nothing about you is visible to an employer until you make your profile public, apply to a role, or turn on a findability option.

Your assessment answers belong to you. We use them to score matches and to improve match quality. We do not sell them.

Employers using Job For Me see candidate matches anonymized until they reveal you through the product, you apply, or you otherwise choose to share. Names, contact details, and full work history are not included in a ranked match list of individual profiles.

Reveals are free and unlimited. An employer gets your email only if they reveal you through the product. Reveals are included in every employer plan. They are not paid unlock credits, and there is no unlock-credit meter.

If you email yourself your results without creating an account, you can choose to be found by local employers. That is off unless you turn it on. When it is on, employers hiring for work that matches your trade fit, within about 50 miles of you, can see a limited view — for example archetype, strengths, what energizes you, trade fit, and city — never your name, email, or phone, until a reveal. You can turn the whole thing off from Settings, or from the link in your results email.

You can make your profile private again, edit any field, or delete your account data at any time from Settings.

We record product events — assessment completed, match viewed, application submitted — so we can measure whether Job For Me actually leads to better fit. Those events are tied to your account and used for product measurement, not for sale to brokers.

Seekers never pay. Employers pay for measured people (invite + completed assessment). Roles, résumé uploads, matching, and reveals are unlimited and are not a second bill.

The numbered sections below are the contract.

1. Who this covers, and who is responsible

Job For Me is employer hiring software and a free individual assessment.

Employer-uploaded applicant data. When an employer uploads résumés or other candidate files, that employer is the controller (or “business”) for that stack. Otech Labs processes it as the employer’s service provider / processor to provide scoring and matching. The employer’s own privacy notices and hiring policies also apply to that data. If you applied to a shop and they uploaded your résumé, start with that employer for access or deletion of that file; we will assist them.

Individual assessment accounts and optional findability. For data you give us directly as an individual (assessment answers, your profile, your visibility choices), Otech Labs is the controller.

Employer account and billing data. For the shop’s own users (names, work emails, seats, plan, invoices), Otech Labs is the controller.

2. What we collect

We collect only what the product needs. We do not invent extra profiles for advertisers.

Accounts

• Name, work or personal email, and password (stored as a secure hash by our authentication provider), or equivalent sign-in identifiers if we offer a third-party sign-in.
• Employer: company / shop name, role, and the people invited to the workspace (seats).
• Contact details you send us when you request employer access, early-access / hand onboarding, or support.

Résumés and hiring files (employers)

• Résumés and related documents you upload (PDF or Word), including whatever personal data those files contain (name, contact details, work history, education, and anything else the applicant wrote).
• Role definitions, job descriptions, day-one bars, locations, shift constraints, and scores we generate against those roles.

Assessments and individual profiles

• Assessment responses and results (work style, strengths, what energizes you, trade fit, contribution style, non-negotiables such as shifts or physical demands, and similar fields the product uses).
• Profile fields you edit, city or area you provide, and your visibility settings.
• If you email yourself results without creating a full account: the email address you give us, the results we send, and your findability choice (off unless you turn it on).

Usage and product events

• Device and browser type, approximate location derived from IP, diagnostic logs, and security events.
• Product events tied to an account or session — for example assessment completed, match viewed, application submitted, résumé uploaded, invite sent, measurement returned, candidate revealed — so we can measure whether Job For Me leads to better fit and so we can bill employers on measured people. Those events are used for product measurement, reliability, and employer billing, not for sale to brokers.

Payments (employers only)

• Plan, seats, measured-people allowance and usage, invoices, and payment status.
• When card checkout is enabled, card payments are processed by Stripe. Checkout may be presented as Stripe Checkout and/or through Lovable managed payments. We do not store full card numbers. As of September 1, 2026, self-serve card checkout is live for Starter–Scale. We also collect billing-contact and bill-to details needed to invoice or set a plan up by hand.
• Enterprise is invoiced; we collect billing-contact and bill-to details needed to invoice.
• Seekers never pay. We do not collect payment information from individuals taking the assessment.

We do not require sensitive government IDs, bank accounts, or health records to use Job For Me. Do not upload them. If a résumé happens to contain extra data, we still process the file as part of the stack you uploaded.

3. How we use it

• To provide the Service: define roles, parse and score résumés, produce explainable fit scores (skills, work style, day-one readiness, gaps and training pathways), run the individual assessment, operate invites and measurements, and operate reveals (included, unlimited, not billed as credits).
• To honor visibility rules: profiles private by default; anonymized employer matches until a reveal, an application, or another choice you make in the product; local-employer findability only if the individual opts in.
• To bill employers: count measured people (an invite that was completed and returned a result), hold and release invite holds, and process Stripe charges when self-serve is live or invoiced / hand-collected amounts. We do not bill seekers. We do not operate a paid unlock-credit meter.
• To communicate: account, security, onboarding, and billing messages. Product updates related to a shop you asked us to onboard. Marketing email only with a lawful basis (for example consent or an existing customer relationship where allowed), with unsubscribe in every marketing message.
• To secure and improve the product: prevent abuse, fix bugs, measure match quality, and improve scoring. Improvement uses events and, where we use it for training or model improvement, de-identified or aggregated data that does not identify a person or a shop — or employer content only as the employer permits.
• To meet the law: tax, accounting, lawful requests, and enforcing our Terms.

We use automated processing, including software models, to generate fit scores and explanations. That processing is decision support for the employer. We do not, by ourselves, decide who is hired.

The models we use are provided by Google Gemini, reached through the Lovable AI Gateway. They receive résumé text and role requirements only to produce the score and explanation. Candidates can ask the employer for a human review of any score, and can email privacy@otechlabs.io to ask how a score was produced or to correct their information.

4. Visibility rules (the product promises)

These rules are part of how Job For Me is built. They apply on top of the legal bases below.

• Private by default. Nothing about an individual is visible to an employer until that person makes a profile public, applies to a role, or turns on a findability option.
• Anonymized matches until a reveal or mutual interest. Employers using Job For Me see candidate matches anonymized until they reveal you through the product, there is mutual interest, or you apply. Names, contact details, and full work history are not included in a ranked match list of individual profiles.
• Reveals are free and unlimited. An employer obtains your email (and other contact details the product then shows) only by revealing you in the product. Reveals are included on every employer plan. They are not paid unlock credits. There is no per-reveal charge and no unlock-credit meter.
• Employer-uploaded stacks are different. A résumé an employer already has and uploads is that employer’s applicant file. That employer’s own recruiters can see what they uploaded. We are not hiding a shop’s own stack from that shop.
• Local-employer findability is off unless you turn it on. When on, employers hiring for matching work within about 50 miles of you can see a limited view: for example archetype, strengths, what energizes you, trade fit, and city — never your name, email, or phone until a reveal. You can turn the whole thing off at any time (from Settings, or from the link in your results email if you used email-only results).
• We do not sell personal data to data brokers or advertisers. We do not share it with advertisers for their own marketing.

5. Who we share it with

We share personal data only as follows:

• The people you intend. Your shop’s authorized users see your workspace. If you are an individual and you opt into findability or apply, the limited fields above may be shown to matching employers; email and other contact details only after a reveal (or as you otherwise choose to share).
• The employer who uploaded your résumé — for applicant files they already held.
• Service providers under contract who help us run Job For Me:
  • Infrastructure, database, and authentication: Supabase, provisioned by Lovable Cloud. (Job For Me does not use Firebase as the app database.)
  • Payments (employers): Stripe, for card checkout. Checkout may run as Stripe Checkout or through Lovable managed payments. Billing contact details are also used for hand onboarding and invoices.
  • Fit scoring: Google Gemini, reached through the Lovable AI Gateway, which receives résumé text and role requirements only to produce the score and explanation.
  • Job search: Firecrawl, which receives job-search queries and job-page URLs.
  • Fonts: Google Fonts, which serves the site’s fonts (Google receives your IP address when they load).
  • Analytics: Lovable first-party analytics, which counts page views without advertising IDs.
  • Other providers we use under contract to operate the Service (for example transactional email), only on our instructions (or the employer’s, where we are a processor) and not for their own advertising.
• We will provide a current subprocessor list on request, including for an enterprise order form or DPA.
• Legal and safety. If required by law, or to protect rights, security, or safety.
• Business transfer. If Otech Labs is involved in a merger, acquisition, or asset sale, data may transfer under this policy’s protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We do not name processors we have not confirmed. Confirmed processors: Lovable Cloud / Supabase (infrastructure, database, authentication); Stripe (employer card checkout); Google Gemini via the Lovable AI Gateway (fit scores); Firecrawl (job search); Google Fonts; and Lovable first-party analytics. Job For Me does not use Firebase as the app database.

Cookies and similar

We don’t use advertising or cross-site tracking cookies. Our host’s security service (Cloudflare) sets __cf_bm to filter bots, and our hosting sets __dpl to keep you on one version of the site. Both are strictly necessary and expire quickly. We count page views with our hosting provider’s first-party analytics (Lovable), which doesn’t use advertising IDs. The app also saves your settings in your browser’s local storage. Pages load fonts from Google Fonts, so Google receives your IP address when fonts load.

6. Legal bases (short form)

Where a law such as the GDPR asks for a “legal basis,” we rely on:

• Contract — to provide the account, assessment, and paid employer Service you asked for;
• Legitimate interests — to secure the Service, measure product quality, bill employers on measured people, and operate anonymized matching in a way that does not override your rights;
• Consent — for optional findability, marketing email where consent is required, and any non-essential cookies or similar technologies if we use them;
• Legal obligation — tax, accounting, and lawful requests;
• Employer instructions — when we process an applicant stack as the employer’s processor.

7. Retention and deletion

• Employer workspaces. We keep shop data while the account is active. After cancellation or a deletion request, we delete or de-identify personal data within 30 days, except backups that rotate out on a longer cycle and records we must keep (invoices, security logs, legal holds).
• Individual accounts. You can make a profile private, edit fields, or delete your account data at any time from Settings, the public account deletion page, or by emailing privacy@otechlabs.io. Deletion of your individual personal data is completed within 30 days, except where law requires retention.
• Email-only assessment results. Use the link in that email to turn off findability or request deletion of that email and results.
• Employer-uploaded résumés. The employer controls that stack. If you want that copy removed, ask the employer; we will help them delete it from Job For Me when they instruct us.
• Product events. Kept as needed for measurement, billing, and security, then aggregated or deleted.

Deletion does not unwind a hire/no-hire decision an employer already made using a score, and does not unwind a measurement already billed to an employer.

8. Your choices and rights

Everyone can:

• access and correct profile fields the product lets you edit;
• turn findability off;
• make a profile private;
• delete an individual account, or ask an employer admin to remove a workspace user;
• opt out of marketing email.

Depending on where you live (including California and the EEA/UK), you may also have the right to:

• know / access what personal data we hold, and an export of it;
• correct inaccurate data;
• delete data, subject to legal exceptions;
• opt out of “sale” or “sharing” — we do not sell or share as those laws define those words for advertising, and we will honor a request anyway;
• limit use of sensitive personal information, if we hold any (assessment answers about work style are used only to provide matching);
• object to or restrict certain processing, and withdraw consent where we rely on consent;
• appeal a denial, and complain to a data-protection authority (EEA/UK) or the California Attorney General / CPPA.

We will not discriminate against you for exercising these rights.

How to exercise: email privacy@otechlabs.io from the address we have on file, or write to the postal address below. We may need to verify it is you. You may use an authorized agent where the law allows. We will respond within the time those laws require (generally 45 days in California, one month in the EEA/UK, extendable as permitted).

If we process your résumé only as an employer’s processor, we will point you to that employer or relay the request to them.

9. Children

Job For Me is a hiring and career-assessment product. It is not directed to children under 13, and we do not knowingly collect their data. If we learn we have data from a child under 13, we will delete it. If you believe a child under 13 used the Service, write to privacy@otechlabs.io.

10. Security and where data lives

Data is stored on cloud infrastructure (Supabase / Lovable Cloud) with encryption in transit and at rest, and access limited to what is needed to operate the Service. No method of transmission or storage is 100% secure. We will notify affected customers and individuals of a breach as required by law.

We currently operate from the United States. If you access Job For Me from elsewhere, your data may be processed in the United States. Where a law requires a transfer mechanism (for example standard contractual clauses), we will put that in place with our providers.

11. Sensitive data and automated scoring

Do not upload special-category data we do not need (health diagnoses, union membership, precise religious belief, biometric identifiers, and similar). A résumé or assessment may still reveal work-related traits. We use assessment answers only to score fit and to improve match quality in de-identified form. We do not use them to advertise.

Fit scores are automated decision-support. They are not Otech Labs making a legal or similarly significant decision about you on its own. The employer decides. If a law gives you a right to human review of a solely automated employment decision, that right is against the employer who uses the score; we will reasonably assist them.

12. Changes

We will post changes on this page and update the date. Material changes will be announced in the product or by email where we have an address. Continued use after the effective date is acceptance of the updated policy, except where the law requires consent.

13. Contact

• Privacy: privacy@otechlabs.io
• Product / support: support@jobforme.app
• Company: contact@otechlabs.io · otechlabs.io

The short summary at the top of this page is for readers. This Privacy Policy is the contract.