Privacy Policy

1. Who we are

This Privacy Policy describes how JD Scanner collects and uses information when you use our website and services at www.jdscanner.com. JD Scanner is operated by LockTheGoal.com LLC("we," "us," or "our"). Contact: Contact us.

2. Information we collect

Security codes: We send 6-digit verification codes to your registered email when you create an account, reset or change your password, and (if you enable two-factor authentication) each time you sign in after entering your password.

Transactional emails: We may also email you a welcome message after verification, confirmations when your password changes or your account is deleted, interview summaries when you request them from Calendar, and copies of feedback you submit from your profile (sent to our support team).

Account information: name, email address, and password (stored hashed).

Application data: job descriptions, CV text, analysis results, gaps, chat messages, generated CVs, interview prep content, and status you enter for each role application.

Contact details (optional): contact block you store in My CV for PDF output — encrypted at rest in your account and not sent to AI for analysis when redaction is applied.

Network & referral contacts: names, emails, phones, LinkedIn URLs, and notes you save in Network or on an application — encrypted at rest. These are never used for match scoring. Draft Message (optional) may send contact context to AI only when you choose that feature.

Voluntary support payments (optional):if you choose to offer support, payment is completed on Stripe's site. We receive confirmation metadata (such as amount paid and a Stripe session identifier) but do not collect or store your full payment card number or security code.

Technical data: IP address, browser type, timestamps, and diagnostic logs needed to secure and operate the Service.

3. How we use information

We use your information to:

• Provide account access and authenticate you
• Analyze job fit, generate summaries, gaps, tailored CVs, and interview prep
• Store your applications and progress
• Prevent abuse, fraud, and security incidents
• Improve reliability and fix errors

4. AI processing (Google Gemini)

When you use JD Scanner AI, relevant prompts and context (such as job descriptions, redacted CV excerpts, and edited summaries after automatic PII scrubbing) are transmitted to Google (Gemini API)to generate responses. Contact details stored in My CV contact details are never sent to AI. Do not submit sensitive personal data you do not want processed. See Google's privacy policies for their handling of API data.

5. reCAPTCHA (Google)

Registration may use Google reCAPTCHA v3 to reduce abuse. The reCAPTCHA badge is not shown in the corner of the site; instead, attribution appears in the footer and on the registration form.

Third-party notice: reCAPTCHA is a Google service. For reCAPTCHA use only (not for JD Scanner as a whole), Google may collect usage data under its own policies:

• Google Privacy Policy (external)
• Google Terms of Service (external)

JD Scanner's own policies are our Terms of Service and this Privacy Policy — not Google's documents above.

6. We do not sell your data

We do not sell, rent, or trade your personal information to third parties for money or marketing lists. We share data only with service providers that help us operate the Service (such as cloud hosting and AI inference), under confidentiality and security obligations, and when required by law.

7. Service providers

We use infrastructure providers (such as Google Cloud) to host the application and database. These providers process data on our behalf to deliver the Service.

If you make a voluntary support payment, Stripe, Inc. processes the transaction on our behalf. Stripe collects payment information according to its own Privacy Policy. We do not store your card details on our servers.

8. Retention and deletion

We retain your data while your account is active. When you delete a job application, related gaps, chat, and analysis for that application are removed. When you delete your account from Profile, we remove all applications, CV data, chat history, and settings, but we retain basic profile information (such as name and email) and mark the account status as "deleted" for our records.

Account statuses are: registered (signed up, email not yet verified), email verified, active, and deleted.

9. Security

We use industry-standard measures such as encrypted connections (HTTPS), hashed passwords, access controls, and field-level encryption at rest for sensitive personal data — including network contacts, application referral details, network interaction/chat notes, and My CV contact details — using AES-256-GCM. Your account email remains available in a form needed for sign-in and account recovery. Application workspace content such as CV and job-description text is stored so the product can analyze and generate documents; we apply PII redaction on outbound AI calls where applicable. No method of transmission or storage is 100% secure.

10. Your choices

You may update My CV, delete applications, and contact us to access or delete account data subject to applicable law. Registration requires consent to our Terms of Service.

11. Children

The Service is not intended for users under 16. If you believe a child provided us data, contact us to request deletion.

12. Changes

We may update this Privacy Policy. We will post the revised policy and update the effective date. Material changes may be communicated via the Service or email where appropriate.

13. Contact

Privacy questions: use our Contact page.