Last updated 9 November 2026
The short version
- We use your information only to find jobs for you and prepare your applications.
- Your CV is private. It is never public and never sold.
- We never ask for your job-site passwords.
- You can delete everything at any time from your Profile.
Who we are
JobPao is run by Anwar Jahid, trading as YourTech AI, a sole proprietor based in Bangladesh, who is responsible for your data (the "controller"). Contact: hello@jobpao.app.
What we collect
- Account: your email address and login details.
- Career details: your CV (text, and the file or photo you upload), work history, education, skills, job preferences, target country and the country you live in.
- Your activity: jobs you save or dismiss, applications and their status, interview notes, and job-alert emails you choose to forward to your JobPao address.
- Payments: the pack, amount, date and payment reference. Card numbers go straight to Creem, our payment reseller, and we never see them. For bKash we keep the transaction ID you enter.
- Gmail (only if you connect it): permission to send emails you approve. We cannot read your inbox.
- Technical data: your approximate country from your IP address (to suggest prices and job markets), and basic logs to keep the service secure.
How we use it
- To match you with jobs and write tailored CVs, cover letters and interview preparation.
- To send you account emails, reminders and alerts you can turn off in the app.
- To take payments, prevent abuse and keep the service secure.
We process this information to provide the service you asked for (our contract with you), and for our legitimate interest in keeping JobPao safe. We do not use your data for advertising and we do not sell it.
Who helps us run JobPao
We share data only with the service providers we need, each bound to protect it:
- Supabase: database, file storage and login.
- Cloudflare: website hosting and receiving forwarded emails.
- Anthropic: the AI that reads your CV and job posts to write your documents. Data sent through its API is not used to train its models.
- Creem (card payments, as Merchant of Record) and bKash (Bangladesh payments).
- Email providers (such as Brevo) to deliver our emails, and Google if you connect Gmail.
Some of these providers process data outside your country. Our database is hosted by Supabase in South Korea, the AI runs with Anthropic in the United States, and Cloudflare serves the site from the data centre nearest to you. Where data leaves the UK or EU, these providers use the approved safeguards for international transfers, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
Match scores and AI
The AI scores how well each job fits your CV and drafts your documents. These scores only help you choose: nothing is sent to an employer and no decision about you is made without you. You can ignore any score, edit every document, and ask us to check a score by email.
Employers
Your CV and cover letter go to an employer only when you apply to that job yourself.
Cookies
We use only the cookies needed to keep you signed in and to remember basic settings. There are no advertising or tracking cookies.
How long we keep it
We keep your data while your account is open. When you delete your account, your CVs, photo, profile, applications and forwarded emails are deleted straight away. Encrypted backups are kept for up to 90 days and then removed. Payment records are kept as long as tax law requires, without your CV or profile.
Your rights
You can see and edit your details in the app, download your documents, and delete your account from your Profile. You can also ask us to access, correct, export or delete your data, or object to how we use it, by emailing hello@jobpao.app. We reply within one month.
If you are in the UK, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. If you are in the EU, you can complain to the data protection authority where you live. We would be grateful for the chance to put things right first.
Security
Data is encrypted in transit, each person can only reach their own records, and payment and email keys are kept as server secrets. No system is perfectly secure, so please tell us at once if you notice anything wrong.
Children
JobPao is not for anyone under 16.
Changes
If we change this policy in an important way, we will tell you by email or in the app first.
Questions? Write to hello@jobpao.app. See also our Terms, Privacy Policy and Refund Policy.