Privacy.

The short version

Job Deck holds your email address, the roles on your board, and whatever notes you write on them. Nobody else can see any of it. There is no advertising here, nothing is sold, and nothing is shared with anybody for their own purposes.

There is nowhere in Job Deck to store an email password and no inbox permission to grant, so your mail is not something this can reach.

What is stored

• Your email address. It is how you sign in and how we reach you.
• Your password, if you set one. Held by our authentication provider as a hash. Nobody, here included, can read it back.
• The roles on your board. Title, company, location, salary where the advert gave one, the link, and which source sent it.
• What you did with each role. Saved, applied, passed, and the date.
• Your notes. Yours alone. Nothing automated writes to them, and no daily top up touches them.
• Your connections. The connector address and any tokens you create, plus when each was last used, so you can spot one that has stopped.

No cookies for advertising, no third party analytics, and no tracking pixels in the emails.

Who can see your board

Only you. Every row is tied to your account and the database refuses to hand a row to anybody else, which is enforced by the database rather than by the app remembering to ask.

One thing is shared between accounts: the background research on a company. If somebody has already looked up an employer, you get that write up rather than paying for the lookup a second time. It describes a company and holds nothing about anybody's job search, which board it came from, or who is looking.

As the person running Job Deck, Ashraf Mizo can see the list of accounts and can reach the database directly, which is unavoidable for anyone running a service. Your board is not read for any other reason.

What your AI can see

Connecting an AI tool gives it one private address for your board. Through that address it can read your roles, add new ones, and change a status or a note when you ask it to. It reaches nothing else in your account, and it never sees your password.

Anything you then say to that AI tool is covered by that tool's own privacy policy, not this one. Revoking the address in Settings cuts the connection off straight away.

Email

Two kinds. Sign in codes, confirmations and password resets, which you cannot turn off because they are how the account works. And occasional updates about what the tool can do, which you can turn off from the link at the bottom of any of them, or from Settings. Turning them off changes nothing else.

Who processes it

• Supabase stores the database and runs authentication.
• Vercel serves the site and runs the endpoints.
• Resend delivers the email.

Each of them handles data only to run the part of the service they run.

If you invite someone

Sending an invite stores the address you typed and the fact that you sent it, so the same person is not invited twice and so there is a cap on how many go out. They get one email. They are not signed up for anything, they are not added to a list, and they never hear from that address again unless they make an account.

How long it is kept

For as long as you have an account. Delete it and your roles, notes, tokens and profile go with it. Shared company research stays, because it is about companies and not about you.

Getting it back, or getting rid of it

Settings has an export, and it needs nothing from anybody: one JSON file with every role and note, and a CSV of the tracker for a spreadsheet.

Deleting the account is a button, in Settings. It asks you to type your own email address first, and then it is immediate and final: your roles, notes, connections, tracker and profile are gone, and nobody can get them back for you. Export first if you want to keep a copy.

Shared company research is the one thing that stays. It is about companies rather than about you, and it holds nothing about anybody's job search.

Where it lives

On servers in the European Union. If that changes, this page changes with it.

Changes to this page

The date at the top moves when something here does. Anything that materially changes what is stored or who can see it will be emailed to everyone who has not opted out, whether or not they wanted feature updates.

Asking about any of this

Message Ashraf on LinkedIn. Job Deck is run by one person, so it is that person who answers.