1. Scope and data controller
This Privacy Policy applies to the JobBites website at jobs.eliasruiz.com, its native applications, its browser extension, and related services (together, the “Services”).
The data controller is Elías Ruiz Monserrat, the operator of JobBites, based in Spain. For privacy questions or requests, email elrumo97@me.com.
2. Personal data we collect
We collect the following categories, depending on the features you choose to use:
Account and authentication data
Username, email address, password credential, account identifiers, plan, and session tokens. Passwords are handled by our authentication system and are not available to us in readable form.
Candidate profile and documents
Name, contact details, location, desired role and salary, experience, work authorization, relocation preferences, professional links, summaries, career goals, working-style information, writing preferences, pasted LinkedIn profile content, CVs, and cover letters.
Job-search and application data
Search queries and filters, saved searches, watched companies, job listings, application status and history, notes, interview details, dismissal reasons, fit scores, generated drafts, research reports, form questions, and application answers you choose to save for reuse.
Billing data
Plan and subscription status, Stripe customer and subscription identifiers, and billing events. Stripe processes payment-card and payment-method details; JobBites does not receive full card numbers.
Native app and notification data
Apple Push Notification service token, app and operating-system version, locale, time zone, notification preferences, and last-seen time. We collect this only to maintain the app, authenticate your device, and deliver notifications you enable.
Technical and support data
IP address, request and error information, browser or device information, and any content you send when asking for support. The public job search uses an IP address for short-term abuse prevention and rate limiting.
Data we do not request from your device
The current native app does not request your precise GPS location, address book, photo library, camera, microphone, health data, or advertising identifier. A location you type into your profile is treated as profile information, not device location. If this changes, we will request any permission required by the operating system and update this policy.
3. How we collect data
- From you when you create an account, complete your profile, upload documents, track jobs, configure searches, use AI features, subscribe, or contact us.
- From your device when the Services establish a session, prevent abuse, store your preferences, or register for push notifications.
- From public sources when the service reads public job boards, company career pages, and applicant-tracking systems to find and enrich job listings.
- Through the browser extension when you activate a feature on an application page. The extension can read relevant form labels and page context, request suggested answers, attach documents, and—after submission—save eligible answers for reuse. It deliberately excludes passwords, identity-document fields, contact details, and consent or marketing choices from the learned-answer bank.
4. How and why we use personal data
| Purpose | Legal basis where GDPR applies |
|---|---|
| Provide accounts, job search, tracking, drafting, document storage, application assistance, billing, and support | Performance of our contract with you |
| Personalize fit scores, recommendations, searches, and generated application materials | Performance of our contract; our legitimate interest in providing a useful, personalized service |
| Secure the Services, authenticate sessions, prevent fraud and abuse, debug failures, and maintain reliability | Our legitimate interests in security and service operation |
| Send service emails and the job alerts or digests you configure | Performance of our contract and our legitimate interests; consent where required |
| Send native push notifications | Your consent, which you can withdraw in the app or device settings |
| Maintain transaction, tax, legal, and compliance records | Compliance with legal obligations |
We do not sell personal data, use it for third-party targeted advertising, or track you across unrelated apps and websites for advertising purposes.
5. AI features and automated processing
JobBites uses AI to search and summarize listings, score how a role fits your profile, draft CV changes and cover letters, suggest form answers, and prepare research, interview, and follow-up materials. For a requested feature, we may send relevant excerpts of your profile, CV, saved answers, job description, and instructions to AI model providers through our AI gateway.
We do not use your content to train our own general-purpose AI models. AI output can be inaccurate, so you should review it before relying on or submitting it. Fit scores and recommendations help you organize your search; they do not make employment decisions and have no legal or similarly significant effect on you.
An application is disclosed to an employer or its applicant-tracking provider only when you submit it yourself, enable an extension submission option, or explicitly ask the application agent to submit it.
8. International data transfers
JobBites is operated from Spain, but some service providers or job sites may process data outside Spain or the European Economic Area. Where required, we rely on an adequacy decision, approved contractual safeguards such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for more information about the safeguards relevant to your data.
9. Retention and deletion
We keep account and service data while your account is active and for as long as reasonably necessary to provide the Services, resolve disputes, enforce agreements, maintain security, and meet legal obligations. Retention depends on the data: for example, billing records may need to be kept for tax and accounting periods, while a push token is removed when you sign out or when it becomes invalid.
Deleting an individual job may initially hide it in a recoverable state so an accidental deletion can be undone. Uploaded CVs, cover letters, and other account content remain until you replace or delete them, delete your account, or they are removed under our retention process. Residual copies can remain temporarily in protected backups before aging out through the normal backup cycle.
To request deletion of your account and associated personal data, email elrumo97@me.com from the address associated with your account. We may verify your identity before completing the request. We will delete or anonymize the data unless retention is required by law or necessary for a legal claim, and will confirm when the request is complete.
10. Your choices and privacy rights
You can update profile information and notification preferences in the Services. You can also:
- withdraw push-notification permission in the app or your device settings;
- unsubscribe from optional email categories through notification preferences;
- replace or delete CVs and cover letters through your profile;
- request access to, correction of, deletion of, restriction of, or a portable copy of your personal data;
- object to processing based on legitimate interests and withdraw consent at any time, without affecting processing already carried out lawfully; and
- complain to your local data-protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
These rights may be limited in specific circumstances under applicable law. Send requests to elrumo97@me.com; there is no charge for a normal request.
11. Security
We use technical and organizational measures designed to protect personal data, including authenticated access, user-scoped records, restricted service credentials, secure session cookies on production connections, and access controls around stored files and device tokens. No internet service can guarantee absolute security, so please use a strong, unique password and contact us if you suspect unauthorized use.
12. Children
JobBites is a career service and is not directed to children under 16. We do not knowingly collect personal data from a child under 16. If you believe a child has provided data, contact us so we can investigate and delete it where appropriate.
13. Changes to this policy
We may update this policy when the Services, providers, or legal requirements change. We will publish the revised policy here and update the date above. If a change materially affects how we use personal data, we will provide an additional notice in the Services or by email where appropriate.
14. Contact
For privacy questions, rights requests, or account deletion, contact:
Elías Ruiz Monserrat — JobBites
Spain
elrumo97@me.com