Last updated: 10 November 2026
This policy explains what Joblim collects, why, who receives it and what rights you have. The site is operated by Alexander Henry Patnick, who controls the information described here (the database owner). For privacy questions and requests, email admin@joblim.com.
1. What We Collect
| Information | When | Why |
|---|---|---|
| Sign-in details from Google or LinkedIn: your unique ID at that provider, email address and name | When you sign in | To create and secure your account and to keep your data separate from other users |
| The date and version of the Terms and Privacy Policy you accepted, your confirmation that you are 18 or older, and the date you agreed to each AI feature (CV profile, Tailor CV, cover letter, application answers, message drafts, Contract Checker) | When your account is created, each time you accept a significantly updated version, and each time you use one of those features | To keep a record of your agreement |
| A message you ask for about a job, and the contact details you type to send it | When you use "Draft message". The text is not stored and the contact address or number stays in your browser. The date you applied and the date you followed up are saved with the job so reminders work | To write a follow-up and to remind you when a reply is overdue |
| A CV you upload to be tailored to a job, and the rewritten version | When you use "Tailor My CV". Neither is stored. Contact details found in the CV are not sent to the AI service: they are processed temporarily on the server and added to the generated document, which is returned to your browser | To produce a CV adapted to one job |
| The profile built from your CV: skills, target roles, a short summary and supporting points | When you upload a CV. The CV file and its text are read once and then discarded; they are not stored | To score jobs against your experience |
| Public job postings found by searches (title, company, location, link, and up to 1,500 characters of the posting text with email addresses and phone numbers removed) | Every night and when anyone searches | To fill the shared Job Board shown to all visitors. They are public postings, not personal data about you. Email addresses and phone numbers in a posting (for example a recruiter's) are removed before it is stored |
| Saved jobs, notes, offered salary and conditions, offers, contract notes, search preferences (including your Hebrew level, if you set it), jobs you hid | When you enter or save them | To provide your job tracker |
| Search words and location you type | When you search or use the place suggestions | To run your search. They are not linked to your account. The words may be kept without your name, account or address to decide which searches the Job Board repeats at night, and are deleted 30 days after they were last searched; a search is kept only if it is short (at most five words, with no digits, links or email addresses) and every word already appears in the titles of several stored job postings, which keeps out most names and addresses. This is an automatic filter and cannot guarantee that no personal detail is ever kept. A company name you type in the Company box that Joblim cannot read yet is sent to the search service once to find that company's careers page; the name and the page found are kept for everyone, without any link to you |
| Server logs: errors, warnings and routine operational messages (start-up, how many postings a nightly refresh found). Requests are not logged, and the logs hold no IP addresses, search words or account identifiers | When something goes wrong | Fixing errors. Logs are kept in rotating files and deleted automatically |
| Your IP address and the time of each request to certain features (search, sign-in, uploads, AI tools) | When you use those features | Rate limits that stop abuse. Held only in the server's memory, never written to disk or logs, and dropped within an hour |
| A sign-in cookie (see the Cookie Policy) | When you sign in | To keep you signed in |
A contract can contain information about other people, such as the employer's signatory or a manager. Contract files you upload to the Contract Checker are processed temporarily on the server to produce the report (large uploads are buffered in a temporary area held in memory, not on disk, and removed when the request ends) and are not stored or sent to an AI service. The same applies to CV and tracker files. The site does not use advertising or cross-site tracking tools. It uses Cloudflare Web Analytics to count visits: a small Cloudflare script reports the page viewed, the referring site, your country, browser and device type, and how fast the page loaded. Cloudflare states that it uses no cookies and does not track you across sites or identify you; the operator sees only totals.
You are not required to give us any information to search for jobs. An account needs the sign-in details above. A CV is optional.
2. Who Receives Your Information
- Google and LinkedIn, when you use their sign-in. They tell us who you are and they learn that you signed in to Joblim. Their own privacy policies apply to them.
- The search service (SearXNG, hosted by the site operator (which may forward queries to configured search engines)) receives the search words, the location, and the job titles and company names taken from your preferences and profile that are added to the search. It also receives a company name when you press "Short summary on the company" (the answer is refreshed after two weeks and deleted after 90 days, and is not linked to you), and its general job searches run each night for the Job Board contain no personal data. It does not receive your CV text or account details. SearXNG is hosted by the site operator; queries may be forwarded to the search engines configured in that instance, which apply their own privacy policies.
- The AI service described on How AI Is Used receives CV text and job text as listed there. Currently: Ollama Cloud, reached through the site operator's own Ollama server.
- Open-Meteo (place suggestions) receives the place text you type in a location box. The request is sent by our server, so your own IP address is not shared with it.
- Employer websites and job boards are contacted by our server to check whether a job is open. Your information is not sent to them.
- Cloudflare carries the traffic between your browser and the site (DNS, secure tunnel and protection against attacks and abuse), so it processes your IP address and the requests you make, and keeps traffic and security records under its own privacy policy. If Cloudflare Web Analytics is on, Cloudflare also receives the page-view details described in section 1.
- Resend (our email provider), only if you turn on email: it receives your email address, your first name and what the email says (job titles, companies and links), to deliver it. Every email has an Unsubscribe link.
- Donation providers (Bit, a card payment provider, and NOWPayments for cryptocurrency), only if you choose to donate. They receive what you enter on their own pages and apply their own privacy policies. See Donations and Refunds.
- Authorities, if the law requires it. Your information is not sold and is not used for advertising.
Some of these services are located outside Israel, including in the United States and the European Union, so your information may be processed in other countries whose law may protect it less than Israeli law. By creating an account, uploading a CV or using an AI tool, you agree to this transfer to the services named above, for the purposes described here. If you do not agree, you can still search without an account, and no CV or profile is sent anywhere.
Basis for Using Your Information
We use your information because you ask for the service and agree to it when you create an account or upload a file, and to keep the site secure. Giving information is voluntary: you do not have to give any to search, and without an account you cannot save jobs or get personalised scores. The offered salary you can record against a job is financial information that Israeli law treats as especially sensitive: it is optional, visible only to you, and deleted with your account. Match scores and AI analyses are automated estimates that help you decide; nothing about you is decided automatically and no one else sees them.
3. How Long We Keep It
| Information | How long it is kept |
|---|---|
| Account (sign-in ID, email, name, terms accepted) | Until you delete your account |
| Email settings, and which reminders were sent (so none repeats) | Until you change them or delete your account |
| Profile built from your CV | Until you delete it ("Delete My CV Profile") or your account |
| Saved jobs, notes, offers, offered salary, contract notes, preferences, hidden jobs | Until you delete them or your account |
| CV files, contract files, tailored CVs, cover letters, application answers, message drafts, AI Analysis results | Not stored: discarded when the request finishes (a tailored CV exists only in your browser until you close the page) |
| Sign-in cookie | Up to 14 days, or until you sign out |
| Match scores and other AI results | Not kept: shown to you and then discarded |
| Your IP address and request times, for rate limits (stopping abuse) | In the server's memory only, never written to disk; dropped within an hour of your last request and on every restart |
| Records of what you agreed to (terms, age, each AI feature) and when | Until you delete your account |
| After you delete your account: a one-way fingerprint (SHA-256) of your sign-in ID and the deletion date, kept separately so a restored backup cannot bring the account back. It holds no name or email | 35 days after deletion, then removed automatically |
| Search words kept for the Job Board (without your name or account) | Deleted 30 days after the words were last searched; never linked to you |
| Job Board postings (public) | Hidden after 3 weeks unseen, deleted 60 days after they were last seen |
| Company summaries (public) | Refreshed after two weeks, deleted after 90 days |
| Server logs (errors, warnings and routine operational messages; no IP addresses, search words or account identifiers) | Rotating files of at most 10 MB, three files in all; older entries are overwritten automatically |
Deleting your account removes everything listed for your account from the live database at once, and the database overwrites deleted entries. Copies may remain in server backups, if the operator keeps any, for at most 30 days, after which they are deleted; backups are used only to restore the service, and if one is ever restored, deleted accounts are removed again before the site reopens. For that purpose only, a one-way fingerprint of your sign-in ID (not your name or email) is kept for 35 days after deletion. Deleting your account does not remove Joblim from your Google or LinkedIn account: you can do that in that provider's security or connected-apps settings.
4. Your Rights
- See, correct and take a copy: your jobs, CV profile and preferences are visible and editable in your account. "Download All My Data" on the Profile page gives you everything stored for you in one file (JSON); "Export CSV" on the My Jobs page downloads your saved jobs as a spreadsheet.
- Delete: Profile page, "Delete My Account". It takes effect immediately.
- Anything else (a copy of your CV text, a question, a complaint): email admin@joblim.com. We aim to answer within 30 days.
- Under Israeli law (the Protection of Privacy Law, 5741-1981, including Amendment 13) you may ask to inspect personal information held about you and to have it corrected or deleted if it is wrong, incomplete or out of date. We answer inspection requests within 30 days. If you are in the EU, EEA or UK you also have the rights given by the GDPR, including objection, restriction and portability.
- You may complain to the Israeli Privacy Protection Authority or, if you live in the EU/EEA/UK, to your local data protection authority.
5. Security
Technical measures: the site is served over HTTPS with strict security headers; sign-in uses Google and LinkedIn, so no passwords are stored; the sign-in cookie is signed, HttpOnly and SameSite; requests from other sites are refused; each account's data is kept separate; requests are rate-limited; uploaded files are size-limited and read in a separate, time- and memory-limited process; pages the server fetches are restricted to public web addresses; the database file is readable only by the server's owner and deleted entries are overwritten. Organisational measures: only the operator has access to the server and database, access is used only to run and fix the service, and dependencies are checked for known security problems. No system is perfectly secure. If a breach affecting you occurs, we will notify you and the authorities as the law requires.
6. Children
Joblim is for people aged 18 and over. Do not create an account if you are younger.
7. Changes
If this policy changes in a way that matters, the date above changes and, where required, you will be asked to accept it again. Current version: 2026-11-04.