Privacy Policy

1. Who we are and what this coversReview

thejoblead operates the Service. This policy covers information about account holders and their team members ("users"), visitors to the website, and business contacts researched through the Service ("prospects"). Where you use the Service to research and contact prospects, you are the controller of that prospect data and we process it on your behalf.

2. Information we collect

• Account information: name, email address, password (stored hashed by our authentication provider), phone number if you enable text-message verification, passkey public credentials (never biometrics), and your two-step verification settings.
• Workspace information: company profile, logo, services, territory, outreach preferences, team members and invitations.
• Prospect and outreach information: companies and contacts you discover or add, research notes, AI-generated drafts, sent messages, replies, and suppression entries.
• Usage and technical information: pages and features used, actions taken (kept in an activity log for your workspace), approximate location derived from your IP for security and rate limiting, device and browser type, and diagnostic logs.
• Consent records: the versions of these policies you accepted, your marketing preference, and your cookie choices, with timestamps.
• Payment information: handled by our payment processor; we store only a customer reference, plan, and subscription status — never full card details.
• Location: only if you choose "Use my current location" when setting your territory; we store the city/region you save, not precise coordinates.

3. How we use information

• To provide and secure the Service: authentication, two-step verification, fraud and abuse prevention, rate limiting, backups.
• To perform the Service for you: company discovery through third-party data providers, AI-assisted research and drafting, sending approved outreach through your connected mailbox, detecting and classifying replies.
• To communicate with you: service emails (verification, security, replies, summaries) which cannot be opted out of while you have an account; and, only if you opt in, product updates and promotions.
• To improve the Service: aggregate, de-identified usage analysis. We do not currently run analytics or advertising cookies; if we introduce them they will respect your cookie choices.
• To meet legal obligations and enforce our terms.

4. Legal bases (EEA/UK users)Review

• Performance of a contract (providing the Service you signed up for).
• Legitimate interests (security, preventing abuse, improving the Service), balanced against your rights.
• Consent (optional marketing communications, optional cookies) — withdrawable at any time.
• Legal obligation (tax, accounting, responding to lawful requests).

5. Service providers we share information withReview

• Hosting and application infrastructure: Vercel.
• Database, authentication, and file storage: Supabase.
• Company and contact data provider: Hunter.
• AI processing of research and drafts: the configured model provider (OpenAI or Google Gemini). Prompts contain the company details and approved facts needed to produce the output.
• Email delivery for service notifications: Resend. Optional SMS: Twilio.
• Payments and subscription management: Stripe.
• Each provider processes information under its own terms and only to provide its service to us.

6. We do not sell personal informationReview

We do not sell or rent personal information about users or prospects, and we do not share it for cross-context behavioural advertising. Any future program involving aggregated or de-identified data would exclude information that can identify a person and would be described here first, with opt-out rights where required.

7. Prospects' rights

If you are a business contact who received a message sent through the Service, the sender is responsible for that message. You can reply with a removal request and the sender's workspace will add you to its suppression list. You may also contact us directly and we will pass the request to the relevant workspace and, where we hold the data as a processor, act on our customer's instructions and applicable law.

8. RetentionReview

Workspace data is kept while the account is active. When an account is deleted, its workspace data is deleted immediately and removed from backups on the backup rotation schedule. Consent and audit records may be kept longer where needed to demonstrate compliance. Automated retention limits for prospect data are a planned feature.

9. Security

Data is encrypted in transit and at rest by our infrastructure providers. Access is limited by role-based, row-level authorisation; administrative actions are logged; passwords are never stored in plain text; two-step verification is required for new accounts. No system is perfectly secure — report concerns to the contact below.

10. Your rights and choices

• Access, correct, or export your data from Account → Data and account (JSON export).
• Delete your account and workspace from the same place.
• Change your marketing preference from Settings → Notifications and cookie choices from Settings → Privacy or the footer.
• Depending on where you live you may also have rights to restrict or object to processing, to portability, and to complain to a supervisory authority. Contact us to exercise them.

11. International transfersReview

Our providers operate in the United States and other countries. Where required, transfers are covered by standard contractual clauses or equivalent safeguards offered by those providers.

12. Children

The Service is for businesses and is not directed to anyone under 18.

13. Changes and contact

We will notify you of material changes in the app or by email; the version you accepted is recorded on your account. Questions and requests can be sent through the request-access form or to the operator contact published on the website.