This policy explains what Jigup collects about you, what we do with it, who else handles it, how long we keep it, and how to get a copy or have it deleted. Jigup is run by Jigup LLC ("Jigup", "we", "us"). If something here is unclear, email privacy@jigup.co and a person will answer.
The short version:
- We collect what you type or upload into Jigup, plus the basic technical information any website receives.
- When you use an AI feature, the parts of your profile that feature needs are sent to Anthropic or OpenAI so it can write the result. Section 5 names every company that handles your data and says what each one receives.
- We do not sell your personal information, we do not share it for advertising, and we do not show ads.
- You can ask for a copy of your data, or have your account deleted, by emailing privacy@jigup.co.
1. Who This Policy Covers
This policy covers jigup.co and the Jigup web app. Jigup has no mobile app. It covers visitors who browse the public job board, people who join the waitlist, and people with a Jigup account.
2. What We Collect
Your account, such as your name, email address and password. Your password is handled by our sign-in provider (Supabase) and stored only in a scrambled form we cannot read. If you use your Google account to sign in, Google tells us your email address and your basic Google profile (your name and a link to your profile picture). While you are signed in, our sign-in provider keeps a record of each signed-in session, including its IP address and browser type.
Your profile ("About Me"). Whatever you choose to add: phone number, location, LinkedIn and portfolio links, a short bio, your education (school, degree, major, minor, dates, GPA), courses (with grades if you add them), work experience, projects, skills, certifications, clubs and activities, volunteering, and awards. Some of this you type in yourself, some comes from a resume or transcript you upload (below), and some comes from answering questions in Jigup's guided About Me flow or the "Make it a closer match" panel. When you answer Yes in "Make it a closer match", the statement you confirmed (and any detail you add in your own words) is saved into the matching About Me entry.
Your onboarding answers: the kind of job you are looking for (an internship, a full-time job or a part-time job, which is your career goal), the fields you are interested in, where you want to work, your academic year, and how you heard about Jigup, with any words you add under "Other". We use the kind of job, your first field and the place to open your job board already filtered, the career goal to choose one suggestion on your dashboard, and the year and how you heard about us to understand who uses Jigup and how they find it.
Files you upload. When you upload a resume or transcript, we read the text out of the file, use it to fill in your profile, and then discard the file itself. We do not store uploaded files. The text is sent to OpenAI to do the reading (section 5). What is saved afterwards is the profile information you confirm.
What you make in Jigup. The resumes, cover letters and interview prep you generate, earlier versions of them, the template you picked, and the answers you gave in "Make it a closer match" (including the questions you answered No to, so we never ask them again).
Your job tracker. The jobs you save or import, their status (for example interested, applied, interviewing, offer or rejected), the dates of each change, interview dates and deadlines you add, and your notes. If you import a job from a link, we keep the link and a text copy of the posting.
Your plan and payments. Your plan, whether you are on the free 72-hour trial and when it ends, and your subscription status and billing dates. Payments are handled by Stripe. We never see or store your card number. We keep the IDs Stripe gives your customer record and your subscription.
How much you use the AI features. Each time you use an AI feature we record which feature, when, the AI model used and what it cost us. We use this to apply your plan's limits and to keep costs under control. If an account reaches a daily limit or uses a feature unusually heavily, we record that too and send ourselves an alert that includes the account's name and email address.
Messages and reports you send us. If you use the contact form, your name, email address, topic and message are emailed to our support inbox. If you report a job, we keep the reason, any note you add and which job it was, linked to your account. If you report a bug, we keep what you wrote, the page you were on, your screen width and your browser and operating system names, linked to your account, and email it to ourselves with your email address.
How you found Jigup, and the waitlist. When you create an account, we keep the website that sent you to Jigup (if your browser tells us), any campaign tags in the link you followed (such as "utm_source"), which of our short links you used (such as jigup.co/go/jigup-ig), and the first Jigup page you opened. If you join the waitlist we keep your email address, which page you joined from, the website that sent you to Jigup (if your browser tells us), any campaign tags in the link you followed, and the dates you were invited and signed up.
Technical information. Like any website, our servers receive your IP address and your browser's description of itself with every request. We use your IP address for a short time to block abuse and to check you are not a bot (section 5). Our hosting provider counts page visits and measures how fast pages load for us (section 4).
We do not collect your date of birth, your Social Security number, your home address (unless you type one into your profile), or anything from your contacts or other apps.
3. Why We Use It
- To run Jigup for you: your account, your profile, the job board, the tracker, and the resumes, cover letters and interview prep you ask for.
- To make AI features work: to fill in your profile from an upload, and to write the documents and questions you ask for (section 5 says exactly what goes to Anthropic and OpenAI).
- To apply your plan: to count your usage against your plan's limits, run your free trial once, and handle payments.
- To keep Jigup safe: to stop bots, spam sign-ups and people trying to overload the service.
- To email you about your account: sign-up confirmation, invitations, password resets, and messages about your subscription. We do not send newsletters or marketing email.
- To answer you when you write to us or report a job or a bug.
- To fix problems and understand how Jigup is used, using page-visit counts, page-speed measurements and our server logs.
We do not use your data to train AI models, and we do not use it to profile you for advertising or to make decisions that significantly affect you, such as hiring decisions.
4. Cookies and Similar Tools
We use a small number of cookies, all for running the site. None is for advertising.
- Sign-in cookies (set by Supabase)
- Keep you signed in. They last until you sign out or the session expires.
- jigup_signed_in
- Tells the public pages you are signed in, so they show "Go to dashboard" instead of "Log in". It holds no name, email or ID, only a yes. Up to 30 days, and it is cleared when you sign out.
- jigup_post_auth_redirect
- Remembers the job you were looking at, so you return to it after signing in. 24 hours.
- jigup_inbound_attrib
- Remembers which website, campaign link or Jigup short link brought you to Jigup, and the first Jigup page you opened, so your account can record it (a waitlist entry records only the website and campaign link). It holds no name, email or ID. 7 days.
- Your browser's own storage
- Remembers small things on your own device: grid or list view on the job board, your place in the guided About Me flow (including text you have typed but not yet sent), tracker notes you have typed but not yet saved, and whether you have seen the trial-ended message. It stays until you clear it. Whether you closed a suggestion on your dashboard is kept only until you close the tab. None of it is sent to us until you save or send it.
Page-visit counts and page speed. Every page uses Vercel Web Analytics, which counts page views with basic details such as the page, the referring website, and your country, browser and device type, and Vercel Speed Insights, which measures how quickly the page loaded on your device. According to Vercel, neither uses cookies or tracks you across other websites.
Bot check. On the sign-in, sign-up, confirmation resend, password reset, waitlist and contact forms, Cloudflare Turnstile checks that you are a person. Cloudflare may set its own cookies to do that.
Do Not Track and Global Privacy Control. We do not sell or share your data for advertising, so there is nothing for these signals to switch off. We do not track you across other websites either way.
5. Who Else Handles Your Data
We use the following companies to run Jigup. Each receives only what it needs for its job, and we do not sell your data to any of them or to anyone else.
| Company | What it receives | Why |
|---|---|---|
| Anthropic | What is listed under "What goes to the AI companies" below. | Writes your resumes with its Claude AI model. |
| OpenAI | What is listed below. | Writes your cover letters, interview prep, the career path on a job, the guided About Me questions and "Make it a closer match"; reads an uploaded resume or transcript and a job you import; and writes a resume when Anthropic cannot. |
| Supabase | Everything in section 2 that is stored, including your password in scrambled form. | Our database and sign-in system. |
| Vercel | Every request to the site, including your IP address. Our own log lines identify an account by its Jigup ID, not its email address, and leave out your name and what you wrote in your profile. A rare error message from our database or another service can still repeat a value it was given, such as an email address, and is kept only as long as the logs (section 7). | Hosts the website, runs our servers, keeps short-lived server logs, counts page visits and measures page speed. |
| Stripe | Your email address, your Jigup account ID, your card and billing details (entered directly with Stripe, never with us), and your purchase history. | Takes payments and runs subscriptions. |
| Resend | Your email address, your first name, and the content of each email (for example a sign-in link or a subscription notice). | Sends Jigup's emails. |
| Upstash | Your IP address, your Jigup account ID when you search jobs, use an AI feature or send a report, and on the sign-up, confirmation resend, password reset, waitlist and contact forms your email address, each kept for about twice as long as the limit it counts (up to about two hours for most, about two days for job and bug reports). | Counts requests to block abuse. |
| Cloudflare | Your IP address and what its check collects in your browser. | Runs the Turnstile bot check. |
| Hunter | Your browser loads the logo straight from Hunter, so Hunter receives your IP address, your browser type and Jigup's web address (not the page or job you were viewing). | Shows a company's logo when a job listing has none. |
| Google learns that you signed in to Jigup. | Only if you use your Google account to sign in. |
Anthropic
What it receives
What is listed under "What goes to the AI companies" below.
Why
Writes your resumes with its Claude AI model.
OpenAI
What it receives
What is listed below.
Why
Writes your cover letters, interview prep, the career path on a job, the guided About Me questions and "Make it a closer match"; reads an uploaded resume or transcript and a job you import; and writes a resume when Anthropic cannot.
Supabase
What it receives
Everything in section 2 that is stored, including your password in scrambled form.
Why
Our database and sign-in system.
Vercel
What it receives
Every request to the site, including your IP address. Our own log lines identify an account by its Jigup ID, not its email address, and leave out your name and what you wrote in your profile. A rare error message from our database or another service can still repeat a value it was given, such as an email address, and is kept only as long as the logs (section 7).
Why
Hosts the website, runs our servers, keeps short-lived server logs, counts page visits and measures page speed.
Stripe
What it receives
Your email address, your Jigup account ID, your card and billing details (entered directly with Stripe, never with us), and your purchase history.
Why
Takes payments and runs subscriptions.
Resend
What it receives
Your email address, your first name, and the content of each email (for example a sign-in link or a subscription notice).
Why
Sends Jigup's emails.
Upstash
What it receives
Your IP address, your Jigup account ID when you search jobs, use an AI feature or send a report, and on the sign-up, confirmation resend, password reset, waitlist and contact forms your email address, each kept for about twice as long as the limit it counts (up to about two hours for most, about two days for job and bug reports).
Why
Counts requests to block abuse.
Cloudflare
What it receives
Your IP address and what its check collects in your browser.
Why
Runs the Turnstile bot check.
Hunter
What it receives
Your browser loads the logo straight from Hunter, so Hunter receives your IP address, your browser type and Jigup's web address (not the page or job you were viewing).
Why
Shows a company's logo when a job listing has none.
Google
What it receives
Google learns that you signed in to Jigup.
Why
Only if you use your Google account to sign in.
What goes to the AI companies
Only when you use an AI feature, and only the parts that feature needs:
- A resume (Anthropic): your name, email, phone, LinkedIn and portfolio links, location, bio, education (including your GPA only if your resume would show it), courses, work experience, projects, skills, certifications, activities, volunteering, awards, any instructions you type, and the job posting. If Anthropic cannot answer, the same request goes to OpenAI instead. On Jigup Pro and the trial, the job posting on its own may also go to OpenAI to pick out its keywords.
- A cover letter (OpenAI): your name, location, bio, education (including your GPA only if your resume would show it), courses, experience, projects, skills, certifications, activities, volunteering, awards, any instructions you type, the job posting and the company's description of itself. Not your email, phone, LinkedIn or portfolio.
- Interview prep (OpenAI): the same profile details as a cover letter, the job posting and the company's description. Not your email, phone, LinkedIn or portfolio.
- The career path on a job (OpenAI): only the job's title and company. Nothing about you.
- The guided About Me flow and "Make it a closer match" (OpenAI): the About Me entries the question is about, in your own words, the job posting, your resume's lines, and the answers you type. Not your email, phone or LinkedIn.
- Reading an upload (OpenAI): the full text of the resume or transcript you upload, which usually includes your name and contact details and, for a transcript, your grades.
- Importing a job (OpenAI): only the posting's text or the page at the link. Nothing about you.
What the AI companies do with it. Anthropic's published terms for its API say it may not train its models on what we send, and it deletes what it receives within 30 days, unless its safety systems flag a request (then it may keep it for up to 2 years) or the law requires it to keep it longer. OpenAI's published policy for its API is that it does not use what we send to train its models, and keeps it for up to 30 days to watch for abuse, or longer where the law requires. We have not arranged for either company to keep less than that. We do not remove names or contact details before sending, because a resume needs them.
Other things your browser loads. Company logos on the job board load directly from the address the job listing provides, so the website hosting a logo can see your IP address. When a listing gives no logo, your browser loads one from Hunter, as described above.
When the law requires it. We may disclose information if a valid legal process requires it, or to protect someone's safety or protect Jigup from fraud. If Jigup is ever sold or merged, your data would move to the new owner under this policy, and we would tell you first.
6. Job Listings and the Contacts in Them
The jobs on Jigup come from a job data provider (Fantastic Jobs) and a public job dataset, both of which gather public postings from employers' career sites. Nothing about you is sent to either. Some postings include the name and work email of a hiring contact that the employer published. If you are one of those contacts and want your details removed from Jigup, email privacy@jigup.co.
7. How Long We Keep Your Data
- Your account, profile, documents, tracker, reports and usage records
- Until you delete your account (section 8).
- Uploaded files
- Not kept. The text is read and the file is discarded right away.
- Your waitlist entry
- Until you ask us to delete it, or until your account is deleted.
- Sign-in sessions (Supabase)
- Until you sign out or the session ends, and deleted with your account.
- Server logs (Vercel)
- About a day.
- Abuse counters (Upstash)
- Up to about two hours for most, about two days for job and bug reports.
- Database backups (Supabase)
- Up to 7 days after the data is deleted, as backups roll off.
- What Anthropic and OpenAI receive
- Up to 30 days under their policies, longer only as section 5 describes.
- Payment records (Stripe)
- As long as Stripe and tax law require, even after your account is deleted.
- Emails you send us, and our internal alert emails that name your account
- Deleted from our mailboxes when you delete your account.
- One trial-use marker (below)
- Kept after deletion, on purpose.
The trial-use marker. The free 72-hour trial is once per person. To keep it that way after an account is deleted, we keep a one-way scrambled code made from your email address, plus the date your trial started. The code cannot be turned back into your email address, and it is linked to nothing else. It only lets us recognise the same email address if it signs up again.
8. Your Choices and Rights
Every Jigup user, in every state, can ask us to:
- Get a copy of the personal information we hold about you.
- Correct it. You can edit almost everything yourself in About Me and Settings. For anything you cannot edit, email us.
- Delete it, including your whole account.
- Find out which companies receive it (section 5 lists them all).
How to ask. Email privacy@jigup.co from the email address on your account and say what you want. There is no delete button in the app; a person handles every request. If you write from a different address, we will ask you to confirm the request from your account's address before we act on it, so nobody can delete or read your account by pretending to be you.
How long it takes. We confirm we received your request within 10 days, and we complete it within 30 days of receiving the confirmed request (for most people, the email itself). If we need longer we will tell you why. A copy of your data comes to you as a file you can open and reuse.
What deleting removes. Your account, your profile (including everything filled in from uploads), your documents, your tracker, your reports, your usage records, your subscription record, and your waitlist entry. We also delete the emails you sent us and our own internal alert emails that name your account. If you have an active subscription, we cancel it first. What we keep: the trial-use marker (section 7), payment records Stripe and tax law require, and anything still inside a backup or a service provider's own short-lived logs until it expires (section 7). Deleting cannot be undone.
Emails. We only send account and subscription emails, which you cannot switch off while you have an account. We send no marketing.
No penalty. We will not charge you more or treat you worse for using any of these rights.
Someone acting for you. You can have someone else make a request for you if you give them written permission. We may still ask you to confirm it.
If we say no. If we turn down a request, we will tell you why. You can ask us to look at it again by replying to that email, and we will answer within 45 days. If you are still unhappy, you can contact your state attorney general.
9. For California Residents
California law asks us to state these points directly.
- What we collect, in the law's categories: identifiers (name, email, IP address, account IDs); education information (school, degree, courses, grades, GPA); professional and employment information (work experience, skills, the jobs you track); commercial information (your plan and purchases); internet activity (pages visited, server logs); and account login details (email and password). Section 2 has the full list and section 3 the reasons.
- Where it comes from: you, your browser, Google if you use it to sign in, and Stripe for payment status.
- Who receives it: only the companies in section 5, for the reasons given there.
- Sale and sharing: we have not sold or shared personal information (as California law defines "sell" and "share") in the past 12 months, and we do not.
- Sensitive information: we do not ask for sensitive information such as health, religion, citizenship or immigration status. The only sensitive information we require is your account login, which we use only to sign you in. If you choose to type sensitive details into a free-text box (a bio or an activity, for example), we treat them like the rest of your profile and use them only to run Jigup for you.
- Retention: section 7.
- Your rights: section 8. They include knowing what we collect, deleting it, correcting it, and not being treated differently for asking.
- Shine the Light: we do not give your personal information to anyone for their own marketing.
10. Age
Jigup is for college students and recent graduates who are 18 or older. Jigup is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has an account, email privacy@jigup.co and we will delete it.
11. Security
Your data travels to and from Jigup over an encrypted connection (HTTPS). Our database only lets each account read and change its own records, and we never see your card details, which go straight to Stripe. No system is perfectly secure, so we cannot promise that your data will never be exposed. If a breach affects your personal information, we will tell you as the law requires.
12. Where Your Data Is Stored
Jigup is a US service. Our database and servers are in the United States (Oregon), and the companies in section 5 process data in the United States and possibly elsewhere under their own safeguards. Jigup is meant for people in the United States.
13. Changes and Contact Us
If we change this policy in a way that matters, we will update the date at the top and email account holders before the change takes effect. Smaller changes, such as fixing a typo, only update the date.
Questions or requests: privacy@jigup.co, or write to Jigup LLC, 17337 Bergis Farm Drive, Lake Oswego, OR 97034. Our Terms of Service cover the rest of how Jigup works.