JobShifu Privacy Policy

Last updated: October 27, 2026

JobShifu is operated by TiiHub LLC, based in California, USA ("JobShifu", "we", "us"). This policy covers the JobShifu website, apps and browser extension.

What we collect

• Account data: your email address and sign-in credentials (or your Google, Apple or LinkedIn identity if you sign in with one of them).
• Your career vault: the resumes, work history, skills, answers, and documents you upload or confirm. This is the product's working data; you control it. Parts of it are turned into numeric embeddings (by Voyage AI) so we can match your experience to postings. When you upload a resume during setup, we keep the original file for 30 days so our team can find and fix problems with setup, then delete it. A resume you upload from your profile is kept as your master resume until you delete it.
• Job data: postings you save or capture, applications you track, and the tailored documents JobShifu builds for you.
• Billing data: handled by Stripe (web) or Apple/Google via RevenueCat (mobile). We never see or store your card number.
• Service metering: token counts and task names for AI requests, used for plan limits and abuse prevention. Apart from Shifu conversations (below), the content of AI requests is not stored.
• Shifu conversations: if you use the Shifu assistant, we store your messages, Shifu's replies and a record of the steps it took (for example which parts of your vault or which saved jobs it read), so you can return to a conversation. Our team may review these conversations to improve answer quality and fix problems. Conversation text is deleted after 90 days, or sooner when you erase your data or delete your account. The cost and token counts of each message are kept for usage limits.
• Product analytics: how the website and app are used (pages viewed, signup-link clicks, features used, and similar events) via PostHog and in our own database, so we can understand and improve the product.
• Free tools on jobshifu.com: when you use the job-posting checker, the visa sponsor lookup or the resume read check, we record counts and outcomes only, for example whether an answer was found, the file type, the number of layout issues and how long it took. These records do not include the link you paste (only its website), the company name you type or your IP address; a hashed form of the IP address is kept for about ten minutes to limit abuse. The resume read check reads your file in your browser; the file and its text are never uploaded.
• Extension usage: when the Chrome extension is signed in, we record which account the installation belongs to (a random installation identifier, its version, and when it was last seen) and, for each autofill run, counts and outcomes only: how many fields were attempted, filled, skipped or failed, and which applicant-tracking system it was. We never record the page address or the values filled, and field labels only as described under Workday application questions. Both are deleted with your data.
• Workday application questions: when the extension fills a Workday "Application Questions" step, it sends the questions that step asks (their wording, the kind of answer, the choices offered and whether each is required) with the public address of the job posting. Before sending, it removes your name, email address and phone number, and any other email address or phone number, from that wording. Your answers are never sent, and the record is not linked to you or your account: it is kept once per employer questionnaire, shared by everyone who applies through it, so the questions can be shown up front the next time anyone applies to a job that uses the same questionnaire. Because it holds nothing about you, it is not part of your data and stays when you delete it.
• Saved employer sign-ins: if you use cloud apply, where our service fills a job application on the employer's site for you, you can save your sign-in for that employer's site: its address, your email or username and your password. The password is stored encrypted in Supabase Vault, and the rest of our database keeps only a reference to it. It is used only by our cloud apply service, to sign in to that employer's site during a run you approved, either for that one application or for every application to that employer. It is never shown back to you or anyone else. A sign-in you mark "Use once, then forget" is deleted after that one use. Any saved sign-in is deleted when you remove it, erase your data or delete your account.
• Cloud apply receipts: at the end of a cloud apply run, our service takes one picture of the filled application form so you can see what was entered. Password boxes are masked in it. It is stored privately with your account and shown only to you. It is deleted after 30 days, or sooner when you erase your data or delete your account.
• Uninstall feedback: if you remove the Chrome extension, your browser opens a short optional survey page. Whatever you choose to answer there is recorded, along with a few facts about that installation: how many days it had been installed, its version, whether you were signed in, whether the panel was ever opened, and rough activity bands (none / 1–4 / 5+) for jobs saved and autofills run. The response carries the installation's random identifier, not your name or email. Because we also record which account an installation is signed in to (see Extension usage), a response from an installation you were signed in to can be linked to your account. Your IP address is not stored; a salted, one-way hash of it is kept for up to two hours purely to limit spam, then erased. You can answer nothing and simply close the tab.
• How you found us: the website that linked you here and any campaign tag or click identifier on the link, recorded once when you create an account so we know which channels are worth our time. It is kept with your account and deleted with it. No cookie is used: the value is held in your browser's session storage for the current tab only. Where you arrived from an ad, we may send that click identifier and the time you signed up back to the advertising platform (for example Google Ads) so it can count the signup against its own click. We do not send your name, email, or anything from your vault with it.
• Email: job alerts, digests and account emails are delivered by Resend, which receives your email address and the contents of that message. You can turn alert and update emails off in Settings; account and billing emails are transactional and are not marketing.
• Error monitoring: automatic crash and error reports via Sentry, so we can find and fix bugs. Resume and job content is scrubbed from these reports.
• Diagnostics (opt-in only): troubleshooting events you explicitly enable. Off by default, content-free, and deleted with your data.

How your data is used

• To run JobShifu: tailoring resumes, matching jobs, filling applications, tracking your search, all scoped to your account.
• AI features send the relevant parts of your vault and the job posting to Anthropic's Claude API to generate results. Anthropic processes these requests as a service provider and does not train on this data.
• Job matching also sends short pieces of your vault and of job postings to Voyage AI, which returns numeric embeddings used to rank how well a posting fits you.
• To understand product usage and improve JobShifu, using the analytics described above.
• Advertising: JobShifu shows no advertising inside the product. We buy ads on other platforms, and the only thing that goes back to one of them is the click identifier and signup time described above. Nothing from your vault is sent with it.
• Sale of personal information: JobShifu does not sell your personal information. If that ever changes, this page will say so before it takes effect and will carry the opt-out the law requires.

Your choice about AI processing

The features that read your resume, tailor it, match you with jobs and answer you in Shifu send your data to the two AI providers named above: Anthropic (Claude) and Voyage AI. In the JobShifu iOS and Android apps you are asked before any of it is sent, on a screen that names both providers and what is sent (your resume, your profile, the jobs you choose and your Shifu messages). You can answer Agree or Not now.

• If you choose Not now: nothing from your account is sent to Anthropic or Voyage AI. You can still type your profile, search jobs, save jobs and track applications. Features that need AI show a locked row you can tap to turn AI on.
• Changing your answer: Settings → Privacy → "AI processing" shows your current answer and lets you turn AI processing off or back on at any time, on the web or in the app. Turning it off takes effect on the next request and applies to your whole account, on every device, including the website.
• What we keep: each answer is stored with your account (the answer, the date, the platform and the providers it named), so we can honor it everywhere. A data wipe or account deletion removes these records.

Where it lives

Your vault is stored with our database provider (Supabase) with row-level security: every record is scoped to your account, and no other user can read it. Traffic to and from JobShifu is encrypted in transit (HTTPS/TLS), and our hosting providers encrypt stored data at rest. The website and app are served through Cloudflare, which also provides the anti-bot check on our public forms. Payment records live with Stripe / the app stores.

Importing from Google Drive

If you choose "Add from Google Drive" when adding your resume, JobShifu asks Google for the drive.file permission. That permission is per file: JobShifu can open only the files you select in Google's own file picker, and it has no access to anything else in your Drive. When you select a file we retrieve its contents once and store it as a source document in your vault, the same way an uploaded file is stored. A native Google Doc is exported to Word format on the way in so it can be read by the same parser. We do not browse, list, modify or delete anything in your Drive, and we do not keep standing access to the document. JobShifu's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Deleting your data

• One-click wipe: in Settings, turn on "Developer mode" and choose "Erase all data & start over". This keeps your account but deletes your entire vault and every derived record (match profiles, feeds, saved jobs, diagnostics, per-user telemetry and usage logs). A wipe keeps: billing records (purchase and subscription history), the current month's free-usage counter (so a wipe can't reset the free allowance), and any active community moderation records; expired ones are deleted. Community posts you authored are anonymized in place ("[deleted]") so conversations aren't torn apart.
• Account deletion: Settings → "Delete account" removes your account itself, cancels any active web subscription (a subscription bought through the App Store or Google Play must be canceled there), and wipes your vault in the same step. You do not need to email us. We retain only what the law requires: purchase records and content-free usage metering.
• Subscription consent records: when you subscribe on the web, we keep a record of your agreement to the auto-renewal terms (the subscription, its price and renewal interval, the terms version you agreed to, and when). It holds nothing from your vault. Because it is legal proof of that consent, it is kept through a data wipe and an account deletion, which removes its link to your account. We delete it once it is more than 3 years old and the subscription ended more than a year ago.

Third parties we rely on

• Supabase: database and authentication hosting.
• Anthropic: AI processing (Claude API), as described above.
• PostHog: product analytics.
• Sentry: error monitoring and crash reports.
• Voyage AI: text embeddings for job matching.
• Resend: delivery of alert, digest and account email.
• Cloudflare: website and app hosting, content delivery, and the anti-bot check on public forms.
• Stripe / RevenueCat: payments and subscriptions.
• Google Ads: receives the click identifier and signup time described above when you arrive from one of our ads. Nothing from your vault is sent.
• Google: sign-in with Google, the Google Drive picker if you use it, and push notifications on Android (Firebase Cloud Messaging).
• Apple: Sign in with Apple and push notifications on iPhone.
• Capgo: delivers updates to the mobile app.
• logo.dev, Google and DuckDuckGo icon services: company logos shown beside job listings. Your browser requests the logo image directly, so the service that serves it sees that request.
• Have I Been Pwned (Pwned Passwords): when you choose a password, your browser checks it against this public list of passwords exposed in data breaches. It sends only the first five characters of a one-way hash of the password, never the password itself, and no account details.
• Your browser's speech service: if you use the microphone button in Shifu, your browser turns what you say into text. Chrome sends the audio to Google, Edge to Microsoft, and Safari to Apple. The audio goes to that company, not to us; Shifu receives only the text, which is kept like any other Shifu message.

Users in India

If you use JobShifu in India, the Digital Personal Data Protection Act, 2023 applies to your personal data. For that law, TiiHub LLC is the data fiduciary: it decides why and how your data is processed. We process it for the purposes described in "How your data is used" above, on the basis of the consent you give when you create an account and use its features.

• Your rights: you can ask for a summary of the personal data we hold about you and how it is processed, ask us to correct, complete or update it, and ask us to erase it. You can also nominate another person to exercise these rights for you if you die or become unable to. Most of this you can do yourself in the app: Profile holds and edits your data, and "Deleting your data" above describes the one-click wipe and account deletion.
• Withdrawing consent: Settings → Privacy → "AI processing" turns off the sending of your data to our AI providers at any time, and a wipe or account deletion withdraws it entirely. Withdrawing does not affect processing that already took place.
• Where your data is processed: JobShifu is run from the United States. Your data is stored and processed in the United States and by the providers listed in "Third parties we rely on", which may process it in other countries.
• Grievances: write to privacy@jobshifu.com with "India" in the subject. We will acknowledge your request and respond within the period the law sets. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Changes & contact

If this policy changes materially, we'll note it in the app before the change takes effect. Questions or deletion requests: privacy@jobshifu.com, or by mail to TiiHub LLC, 2108 N St, Ste N, Sacramento, CA 95816, USA.