Privacy Policy

1. What we collect

• Account info: name, email, profile photo (via Google or email signup).
• Resume content you upload or paste.
• Job preferences: target role, location, work mode, visa status, salary.
• Your interactions: saved / applied / hidden jobs, tracker notes, copilot chats.
• Mock interviews: your answers, and your voice recording if you use the spoken mode.
• Standard web logs: IP, user-agent, timestamps — for security and debugging.
• If your university licenses LumiJobs, it may share roster information (name, email, programme, expected graduation) so we can link your account to your institution.

2. How we use it

• Match jobs to your resume and profile.
• Generate tailored resumes, cover letters, and outreach messages.
• Remember what you've saved, applied to, or hidden.
• Send you product updates (only if you opt in at signup).
• Debug issues and prevent abuse.

3. What we share

We don't sell your data. We do rely on the providers below to run the service, and your data reaches them only for the purpose listed.

• Microsoft Azure — hosting, database, file storage, and maps. Everything we store lives here, including your resume.
• Azure OpenAI — the AI that tailors resumes, writes cover letters, and scores matches. Your resume content and prompts are processed here under Microsoft's enterprise terms, with no training on your content. If Azure is unavailable we may fall back to Anthropic or OpenAI on the same terms.
• Google Firebase — sign-in.
• Vercel — website hosting.
• Resend — account email and job digests.
• Sentry and PostHog — error monitoring and product analytics (see section 6).
• ElevenLabs — voice for mock interviews, only if you use that feature.
• Stripe — payments. Students are not billed during the beta, so no payment data is flowing today.

If your university licenses LumiJobs and you are linked to its roster, its career-office staff can see your name, email, cohort, when you last signed in, whether you have uploaded a resume, your target role, and your placement outcome. They use this to spot students who may need help. Every staff view of a student record is logged.

They cannot see your resume content, your copilot chats, or which specific jobs you save or apply to. We never share any of it with employers — no employer has an account on LumiJobs.

4. Your rights

• Export your data at any time — Settings → “Download my data”.
• Delete your account — this removes your resumes, chats, and tracker data from the live service immediately. Encrypted database backups are kept on a rolling 35-day window for disaster recovery, so deleted records persist there until they age out. We do not use backups for anything else.
• Ask us anything: email privacy@lumijobs.ai.

5. Security

Data is encrypted in transit (HTTPS) and at rest. Firebase handles authentication. We follow standard security hygiene but can't guarantee absolute security during the beta period.

6. Cookies and analytics

We use essential cookies for sign-in and session management. We also run two third-party tools that record how the product is used: PostHog for product analytics — which pages you visit and what you click — and Sentry for error monitoring, which captures a small sample of sessions when something breaks. Sentry replays are configured to mask text and block images, so your resume content is not captured.

We do not sell your activity and we run no advertising trackers. We do not yet offer a cookie-consent control; if you want your analytics data removed, email privacy@lumijobs.ai.