Privacy Policy

1. What we collect

• Account info: name, email, profile photo (via Google or email signup).
• Resume content you upload or paste.
• Job preferences: target role, location, work mode, visa status, salary.
• Your interactions: saved / applied / hidden jobs, tracker notes, copilot chats.
• Mock interviews: your answers, and your voice recording if you use the spoken mode.
• Standard web logs: IP, user-agent, timestamps — for security and debugging.
• If your university licenses LumiJobs, it may share roster information (name, email, programme, expected graduation) so we can link your account to your institution.

2. How we use it

• Match jobs to your resume and profile.
• Generate tailored resumes, cover letters, and outreach messages.
• Remember what you've saved, applied to, or hidden.
• Send you product updates (only if you opt in at signup).
• Debug issues and prevent abuse.

3. What we share

We don't sell your data. We do rely on the providers below to run the service, and your data reaches them only for the purpose listed.

• Microsoft Azure — hosting, database, file storage, and maps. Everything we store lives here, including your resume.
• Azure OpenAI — the AI that tailors resumes, writes cover letters, and scores matches. Your resume content and prompts are processed here under Microsoft's enterprise terms, with no training on your content. If Azure is unavailable we may fall back to Anthropic or OpenAI on the same terms.
• Google Firebase — sign-in.
• Vercel — website hosting.
• Resend — account email and job digests.
• Sentry and PostHog — error monitoring and product analytics (see section 6).
• Meta (Facebook) — measuring our ads: which pages were visited after an ad and whether a visit led to a sign-up (see section 6).
• ElevenLabs — voice for mock interviews, only if you use that feature.
• Stripe — payments. Students are not billed during the beta, so no payment data is flowing today.

If your university licenses LumiJobs and you are linked to its roster, its career-office staff can see your name, email, cohort, when you last signed in, whether you have uploaded a resume, your target role, and your placement outcome. They use this to spot students who may need help. Every staff view of a student record is logged.

They cannot see your resume content, your copilot chats, or which specific jobs you save or apply to. We never share any of it with employers — no employer has an account on LumiJobs.

4. Your rights

• Export your data at any time — Settings → “Download my data”.
• Delete your account — this removes your resumes, chats, and tracker data from the live service immediately. Encrypted database backups are kept on a rolling 35-day window for disaster recovery, so deleted records persist there until they age out. We do not use backups for anything else.
• Ask us anything: email privacy@lumijobs.ai.

5. Security

Data is encrypted in transit (HTTPS) and at rest. Firebase handles authentication. We follow standard security hygiene but can't guarantee absolute security during the beta period.

6. Cookies and analytics

We use essential cookies for sign-in and session management. We also run two third-party tools that record how the product is used: PostHog for product analytics — which pages you visit and what you click — and Sentry for error monitoring, which captures a small sample of sessions when something breaks. Sentry replays are configured to mask text and block images, so your resume content is not captured.

PostHog also records sessions so we can see where the product is confusing or broken: page layout, clicks and scrolling. When you are signed in, every piece of text is replaced with asterisks before it leaves your browser, so your resume, your chats with Lumi, your name and your email are never recorded. Everything you type into a form is masked for every visitor, and resume previews, payment forms and interview video are not recorded at all. On our public pages (such as the home, pricing and job listing pages), visitors who are not signed in are recorded with the page text visible.

We also use the Meta Pixel to measure our advertising on Facebook and Instagram. It tells Meta which of our pages you open and whether you signed up, started an upgrade, or requested a university demo, so we can see which ads work. Meta may combine this with what it already knows about you if you use its services, under Meta's privacy policy. We send Meta event names only: never your resume, chats, email address, name, or the jobs you look at. You can limit this in your Facebook ad settings or with a tracker-blocking browser.

We do not sell your activity. We do not yet offer a cookie-consent control; if you want your analytics data removed, email privacy@lumijobs.ai.