1. Introduction

JobKit LLC ("StandbyRoster", "we", "us", or "our") operates the website standbyroster.org. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using StandbyRoster, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.
• Resume Data: Resumes and documents you upload for AI matching and customization, including parsed text, skills, experience, and education.
• Profile Data: Professional headline, location, LinkedIn URL, years of experience, and professional summary you provide.
• Payment Information: Payment details are processed directly by Stripe. We do not store credit card numbers, CVV, or full card details on our servers. We store only Stripe customer IDs and transaction references.

2.2 Information Collected Automatically

• Session Data: We use essential cookies to maintain your login session and ensure platform security.
• Usage Data: We log interactions such as job matches generated, resumes customized, and features used for service improvement.
• Device and Browser Info: Standard web server logs including IP address, browser type, and access timestamps.

3. How We Use Your Information

• Service Delivery: To provide AI-powered job matching, resume customization, and cover letter generation.
• Payment Processing: To manage credit purchases, subscriptions, and billing through Stripe.
• Account Management: To authenticate your identity, manage your account, and provide customer support.
• Service Improvement: To analyze usage patterns and improve our AI algorithms and platform features.
• Communication: To send transactional emails related to your account, purchases, or service updates.

4. Third-Party Services

We use the following third-party services that may process your data:

• Google OAuth: For secure authentication. Subject to Google's Privacy Policy.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy. Stripe is PCI DSS Level 1 certified.
• OpenAI: For AI-powered resume matching and customization. Resume text is sent to OpenAI's API for processing. Subject to OpenAI's Privacy Policy. Data sent to OpenAI is not used to train their models.

5. Data Retention

• Account Data: Retained as long as your account is active.
• Resume Files: Stored securely on our servers for as long as your account exists. You may delete resumes at any time.
• Transaction Records: Retained for 7 years for accounting and legal compliance purposes.
• Server Logs: Retained for up to 90 days for security monitoring.

6. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Secure server infrastructure with regular updates
• Authentication via Google OAuth (we do not store passwords)
• Payment processing handled entirely by Stripe (PCI DSS compliant)
• Rate limiting on all API endpoints to prevent abuse

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Object: Object to processing of your data for specific purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at contact@standbyroster.org. We will respond within 30 days.

8. Account Deletion

You may request complete deletion of your account and all associated data by emailing contact@standbyroster.org. Upon deletion:

• All personal data, resumes, and generated content will be permanently removed.
• Transaction records may be retained for legal compliance as noted in Section 5.
• Any remaining credit balance will be forfeited.

9. Children's Privacy

StandbyRoster is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

JobKit LLC
Email: contact@standbyroster.org
Website: standbyroster.org