Privacy Policy
Last updated: June 2025
Who we are
JobMatch AI ("we", "us", "our") is a Chrome browser extension that helps job seekers compare their CV against job descriptions on LinkedIn. The extension is operated by IronGrid Tech, UK.
Contact: privacy@irongridtech.co.uk
What data we collect
Account data
When you create an account, we collect:
- Your email address
- A bcrypt-hashed version of your password (we never store your plaintext password)
- Stripe customer ID (if you subscribe to Pro)
Analysis data
When you run a job analysis, we receive:
- Your CV text (for analysis only — see retention policy below)
- The job description text (public, from the LinkedIn page you viewed)
We store the match score and analysis result (linked to your account) and the job title and company name (optional metadata).
We do not store your CV text after analysis is complete, or raw LinkedIn page data.
Usage data
We track how many analyses you run per month to enforce the free-tier limit.
Payment data
Payments are processed by Stripe (PCI DSS Level 1 compliant). We receive only a Stripe customer ID and subscription status — we never see your card details.
What we do NOT collect
- Browsing history
- LinkedIn profile data
- Any data from pages other than the LinkedIn job page you are actively viewing
- Location data
- Cookies (beyond what is required for session management)
How we use your data
| Data | Purpose |
|---|---|
| Email + hashed password | Account authentication |
| CV text (transient) | Running the AI analysis you requested |
| Analysis results | Showing you your history (Pro) |
| Monthly usage count | Enforcing the free-tier limit |
| Stripe customer ID | Managing your subscription |
We never sell, rent, or share your personal data with advertisers or data brokers.
Third-party processors
OpenAI
Your CV and the job description are sent to OpenAI's API to generate the analysis. We use the API endpoint only — your data is not used to train OpenAI's models (per OpenAI's API usage policy). OpenAI processes the data and returns the result; we do not permit OpenAI to retain it.
Stripe
Payment processing only. Stripe is PCI DSS Level 1 compliant.
Hosting
Our API is hosted on Google Cloud Platform (Cloud Run). Data is stored in the EU/UK region.
Data retention
| Data | Retention |
|---|---|
| CV text | Not stored — discarded after analysis |
| Analysis results | 90 days, then automatically deleted |
| Account data | Until you delete your account |
| Usage counters | Rolling 12-month window |
| Payment events | 7 years (legal/accounting requirement) |
Your rights
Under UK GDPR / EU GDPR you have the right to:
- Access the data we hold about you
- Delete your account and all associated data
- Export your analysis history
- Correct inaccurate data
- Object to processing
To exercise these rights, email: privacy@irongridtech.co.uk. We will respond within 30 days.
Chrome extension permissions
| Permission | Why we need it |
|---|---|
| storage | Store your CV and auth token locally on your device |
| activeTab | Read the current LinkedIn job page when you click Analyse |
| tabs | Detect if you're on a LinkedIn job page |
| host_permissions: linkedin.com | Allow the content script to run on LinkedIn job pages only |
We do not access any other tabs, websites, or your browser history.
Children
JobMatch AI is not intended for users under 16. We do not knowingly collect data from children.
Changes to this policy
We will notify users of material changes by email or in-extension notice. The current version is always at jobmatchai.irongridtech.co.uk/privacy.html.
Contact
JobMatch AI — Privacy
Email: privacy@irongridtech.co.uk
Website: jobmatchai.irongridtech.co.uk