Privacy policy

Jobbo is an Australian job-application service operated by Karani Labs, based in Sydney. When this policy says "we", that is who it means. You can reach us any time at hello@jobbo.au.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Only what the product needs to do its job:

• Your account. Name, email address, and a password. We never see your password — it is hashed by our authentication provider before it reaches us, and there is no way for us to read it back.
• Your resume and the answers you give at onboarding. Your work history, the roles and locations you are targeting, your salary floor, your preferred work type, your timezone, and the interview answers you write in your own words. This is the raw material every application is tailored from.
• What we produce for you. The job ads we found, the resumes and cover letters we drafted, and a record of what you sent and where.
• How the site is used. We use Google Analytics and the Google Ads tag to see how the site is used and which advertising brings people here. These set cookies in your browser and send Google the pages you visit, roughly where you are, and what device you are on. Google processes that data to give us the reports and, under its own terms, to measure and improve its advertising. You can block these cookies in your browser or use Google’s opt-out add-on; the site works the same either way. We also count visits with Plausible, which sets no cookies.
• How you found us. If you arrive from an ad or from a link on another site, we record which one in a cookie stored in your own browser for thirty days, so we can tell which advertising is worth paying for. It holds the campaign name, the page you landed on, and — if you came from a Google ad — that click’s identifier. It holds no name and no email address, and if you arrive by typing our address it is never written at all.
• What that is used for. Nothing here is ever sold. When a visit that began with a Google ad reaches a sign-up or a purchase, we tell Google Ads that that click converted — the click’s own identifier and the fact of the conversion — so we can tell which advertising is worth paying for.

If you later tell us about your visa status, right to work, licences or clearances so we can answer screening questions, that is sensitive information and we will collect it only with your consent, use it only to answer those questions, and never guess an answer you have not given.

When we draft outreach for a role, we may store a recruiter's name, public profile link, or work email address — taken from the job ad or a public professional profile. Those people never signed up with us, so we hold this to the same standard: work contact details only, never anything sensitive, used only to help you contact them about that specific role, and never sold, rented, or built into a marketing list.

If you are a recruiter and want your details removed, email hello@jobbo.au and we will delete them.

This is the part that matters most, so it gets its own heading rather than a line in a list.

To tailor an application, we send your resume and the job description to the AI model we use for writing. It is a commercial service, under terms that say your information is not used to train it. We do not send your email address, your name as an account holder, or anything about your payment.

If that is not acceptable to you, the honest answer is that this product cannot work without it — tailoring is the thing we do.

We do not sell your personal information, and we never will. We share it only with the services that make Jobbo work: the one that stores your data, the one that runs the site, the AI model that writes your applications, the ones that find job ads, and the one that sends you email. Each of them receives only what it needs for its own job — the services that search for ads, for instance, get search terms such as job titles and locations, and never see your resume. All of them are bound by contract to protect your information and to use it only for the work we have asked them to do.

Google receives site usage data through Google Analytics and the Google Ads tag described above: the pages you view, your approximate location, your device, and whether a visit that began with one of our ads reached a sign-up or a purchase. It uses that to give us the reports, and under its own terms to measure and improve its advertising. It does not receive your resume, your cover letters or your interview answers.

Payments are handled by Stripe. Your card details go into Stripe's own payment page and we never see or store your card number — it never touches our servers. Stripe receives your email address and name; all we keep is which plan you are on and when it renews. Stripe also uses some of that data to detect fraud, which is a condition of them handling payments at all.

Some of these services operate outside Australia, so your information is stored and processed overseas as well as here. That is true of almost any modern software business, and we would rather say it than let "Australian owned and operated" imply something it does not mean. If you want to know exactly which services we use, email hello@jobbo.au and we will tell you.

We will also disclose information if the law genuinely requires it — a court order or similar. We will tell you if that happens, unless we are forbidden from doing so.

These are enforced by a scheduled job, not just written here. When something passes its period, it is deleted.

One honest caveat: our database provider keeps short-term backups for disaster recovery, so deleted information can survive in those for up to seven days before ageing out. We cannot reach into a backup to remove a single record, and we would rather say so than imply an instant that does not exist.

Delete everything, yourself, right now. Go to your account page and choose "Delete my account". It removes your profile, your resume, every application we drafted, and your send history from our live systems — immediately, and without anyone needing to approve it. The one exception is our disaster-recovery backups: a deleted record can survive there for up to seven days before it ages out, and we cannot reach into a backup to pull a single record early. After that it is gone. We do not keep a working copy, and there is no grace period where we hold your data "just in case".

See or correct what we hold. Your account page lists what we store, and your profile is editable at any time. If you want a copy of everything in a portable form, email us and we will send it within a reasonable time and at no charge.

• Everything is encrypted in transit, and encrypted at rest by our database provider.
• Passwords are hashed by our authentication provider. We cannot read them, so we cannot leak them.
• The database enforces separation between accounts itself, at the row level — not only in application code. A bug in our code cannot show your resume to another customer, because the database will not return it.
• Access to production data is limited to the people who need it to run the service.

No system is perfect. If we ever suffer a data breach likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Email hello@jobbo.au and tell us what went wrong. We will acknowledge it and give you a proper answer within 5 to 7 business days.

If we change something that materially affects you — a new overseas provider, a shorter retention period, a new category of information — we will email you before it takes effect. Minor wording fixes just get a new date at the top.