Privacy Policy

BespokeJobs LLC ("we," "us," or "our") operates an AI job-search tool that ranks live job openings against your resume and can generate tailored resumes and a cover letter for a match you choose. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to visitors and account holders in the United States, which is the only market we currently serve.

If you do not agree with this policy, please do not use the service. If you have questions, contact us at privacy@bespokejobs.ai.

We collect only what we need to run the service.

Information you provide

• Account details. Your email address and a securely hashed password, or, if you sign in with Google or Microsoft, the basic profile identifier those providers return. We never receive or store your social-login password.
• Resume and profile. The resume file you upload, the structured profile we derive from it (such as work history, education, skills, and titles), and any edits you make.
• Preferences. The search terms you configure, your email digest cadence, and application-tracking status and notes you add.

Information collected automatically

• Essential session data. A first-party authentication cookie that keeps you signed in. Your browser may also store a local identifier that remembers which account is active between visits; it stays on your device and is not required for the service to work.
• Basic server logs and service monitoring. Standard request metadata such as IP address, timestamp, request path, and error information. We send this operational telemetry to Microsoft Azure Monitor (Application Insights) so we can keep the service running and diagnose failures. It is retained on Azure's monitoring retention cycle, separately from your account data, and it is not used to profile you or to build an advertising audience.

We do not use third-party advertising networks, behavioral-analytics trackers, or marketing pixels.

A resume can contain information that some laws treat as sensitive. You decide what to upload. We process the contents of your resume only to provide the service to you: to parse it, match it against openings, and generate tailored documents. We do not use it to infer characteristics for advertising, and we do not sell it.

• Parse your resume into a structured profile.
• Rank live job listings and compute match scores.
• Generate tailored resumes and a cover letter for a match when you ask.
• Send transactional email (verification, password reset) and, if you opt in, match digests. A digest lists jobs we matched you to, including title, company, location, salary where we have it, and why we think it fits. Your email provider processes that content like any other email. You can turn digests off at any time from your account settings, or from the unsubscribe link in the email where one is included.
• Secure the service, prevent abuse, and debug problems.
• Comply with legal obligations.

Matching and document generation rely on AI models. Their output can be incomplete or wrong, so treat scores and generated documents as decision support, not guarantees. We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Always review any generated document before you submit it to an employer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We rely on a small set of service providers that process data only on our instructions to run the product:

• Microsoft Azure. Hosting, database, and file storage for your account and resume data.
• Azure OpenAI. Parsing your resume, scoring matches, and generating tailored documents. This includes embedding models, which turn your resume and profile into numeric vectors so we can compare them against job postings. Azure OpenAI does not use the data we send it to train or improve its foundation models. Microsoft may retain prompts and responses for a limited period for abuse monitoring, which can include review by authorized Microsoft personnel.
• Azure Monitor (Application Insights). Operational telemetry about requests and errors, used to keep the service healthy.
• Azure Communication Services. Delivery of the emails we send you.
• Google and Microsoft. Only if you choose to sign in with one of them, and only to authenticate you.

We crawl publicly posted job listings to build the catalog. We do not send your resume or personal information to those job boards. When you apply, you do so on the employer or job board site, under their terms.

We may also disclose information if required by law, to respond to lawful requests, to enforce our terms, or to protect the rights, safety, and property of our users or the public.

Your data is stored and processed on Microsoft Azure infrastructure in the United States.

Nothing about you is stored on our servers until the first time you create an account or upload a resume. After that, we keep your data until you remove it. We do not delete accounts automatically after a period of inactivity, so your profile and matches are still there if you come back after a long break.

You can delete your account and all associated data at any time from your account settings. When you do, we permanently delete from our database your profile, resume text, generated documents, matches, match explanations, feedback, in-product activity records, and application records, and we delete the associated resume and document files from blob storage on a best-effort basis. We keep no separate archive of your data.

You do not have to close your account to remove your resume. Deleting it from your profile page removes the uploaded file, the resume text and career history we parsed from it, your match scores, and any documents we generated, with stored files removed on the same best-effort basis described above. The rest of your profile, including your saved search preferences and skills, stays until you change it or close the account.

Two things sit outside that deletion. Routine database backups age out on their normal short-term cycle. Operational telemetry and server logs, described above, are kept separately from your account and age out on their own retention cycle rather than being deleted on request.

We encrypt data in transit, restrict access using managed identities and least-privilege controls, and store data with a reputable cloud provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your state of residence, you may have some or all of the following rights regarding your personal information:

• Know and access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Obtain a portable copy of the information you provided.
• Opt out of the sale or sharing of personal information. We do not sell or share it.
• Limit the use of sensitive personal information. We already limit use to providing the service.
• Be free from discrimination for exercising these rights.

You can delete your account from your account settings, and download a copy of your data from the "Your data" section there. For any other request, email us at privacy@bespokejobs.ai. We will verify your request against your account and respond within the time your state law allows, generally 45 days. You may use an authorized agent where the law permits.

The service is intended for adults who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy as the product changes. When we do, we will revise the "Last updated" date above, and we will provide a more prominent notice for material changes. Continued use of the service after an update means you accept the revised policy.

Questions or requests about this policy or your data: email privacy@bespokejobs.ai. See also our Terms of Use.