Privacy at JobMatcha

Last updated 6 October 2026.

Who we are

JobMatcha (jobmatcha.ai) is an Australian online service that helps people find work and plan their careers. In this policy, "we" means the people who run JobMatcha. You can contact us at [email protected].

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect, and why

• Account basics — email, name, password (stored hashed). To sign you in and save your work.
• Resumes and profile details you add, for example your phone number, suburb, work history and languages — to build and tailor your documents.
• Files you upload — we keep a copy of the original resume file, so that we can rebuild it for you.
• Job ads, applications and interview practice — the job ads you paste, your match reports, tailored resumes and cover letters, your list of applications, and your interview answers. To check how well you fit a job, write your documents and give you feedback.
• Achievements, wins and selection-criteria answers — to write answers from your own examples.
• Goals and plans in Career Manager — to send the weekly steps you asked for.
• Career Explorer answers — to compute your profile and career matches. Reports can be viewed by anyone you give your private link to.
• Career Health answers — to score your check-up and diagnose your job's design. Some optional questions touch on wellbeing (for example, whether a situation is affecting your safety or mental health). That question is opt-in with an explicit consent tick, and you can always skip it.
• Weather Station logs (energy, dread, short notes) — to measure whether your job repairs work. No human reads these; automatic support messages are generated by simple rules on your own device's view.
• Notes you write in Career Health — kept so you have your own dated record. You can delete any of them yourself.
• Payments — if you buy Premium. Stripe handles your card, and we never see or store the full card number. We keep your plan and whether a payment worked.
• Emails — which emails we sent you, and your choices about marketing email.
• Technical information — your IP address and browser type, kept with your sign-in session, and the result of the robot check. To keep your account and the service secure.
• Product events (e.g. "a test was completed", or "this page was opened") — to see which features help and how many people arrive. No note content, no answers, no personal details in these events, and they're disconnected from you if you delete your account.

The savings calculator in the Exit Ramp runs entirely in your browser — savings and spending figures are never sent to our servers.

How we collect it

Most of it comes from you: what you type, choose or upload. Your browser sends the technical information. Stripe tells us whether a payment worked. We do not buy information about you from anyone.

Sensitive information

Some Career Health answers can reveal information about your wellbeing. We only collect those with your express consent at the moment of asking, we use them solely to show you the right support and pause career-change suggestions when appropriate, and they're never shared. Australian crisis and support services are listed openly at jobmatcha.ai/support.html.

How your documents and results are made

Your drafts, match scores and reports are produced automatically by computer, from the information you give us. A person does not write them, and they can contain mistakes. Check everything before you use it. We do not make decisions about you: the decisions are always yours.

How we use it

• To give you the service: your documents, scores, reports and practice.
• To send the emails you ask for: your report link, plan reminders and account messages. We send marketing email only if you tick the box, and every marketing email has an unsubscribe link.
• To keep JobMatcha secure and to stop misuse.
• To fix problems and to see which features help people.

We do not use your information to train any writing system, and our writing service has agreed not to either.

Who we share it with

We don't sell or rent personal information. We share it only with the services that run JobMatcha, with people you choose, and when the law requires it.

• Contabo — our server and its backups. It holds everything you store in JobMatcha. Sydney, Australia.
• Our writing service — produces your drafts, scores and reports. It receives only the text needed for what you asked for, for example your resume and a job ad. It does not train on your information, and it deletes it within 30 days. United States.
• Stripe — payments. It receives your name, your email address and your card details (sent straight to Stripe, not to us). Australia and the United States.
• Brevo — sends our emails. It receives your email address and the email. France; it may also process data in the United States and India.
• Purelymail — our [email protected] mailbox. It receives the emails you send us. United States.
• Cloudflare — security, the robot check, fast delivery of the site, and a measure of how fast our pages load (with no cookies). It receives your IP address, your browser details and the page you open. A worldwide network; the company is in the United States.
• Adzuna — job listings in job search. It receives the search words and the place you type, not your name or email. United Kingdom.
• Your browser's speech service — only if you answer aloud in Mock Interview. Your browser turns your voice into text, and we receive only the text. Who does this depends on your browser: Google in Chrome, Apple in Safari.

Anyone you give a report link to can see that report. Documents you download are yours to share. We give information to a court, the police or a government agency only when the law requires it.

Information outside Australia

Your account data is kept on our server in Sydney. Some of the services above are outside Australia: in the United States, France (and possibly India) and the United Kingdom. They receive only what the list above says. We choose services that publish strong privacy terms.

How we keep it safe

• Passwords are stored hashed, never as plain text.
• Every connection to JobMatcha is encrypted (HTTPS).
• Our server is in a data centre in Sydney, and only the people who run JobMatcha can sign in to it.
• We back up the database every night, on the same server, and keep each backup for 14 days.

How long we keep it

• While your account is open, we keep your information so that you can use it.
• Career Explorer reports made without an account are kept so that the private link keeps working, until you ask us to delete them.
• Backups: 14 days. Our writing service: up to 30 days. Stripe keeps payment records for as long as the law requires.

Deleting your account

Email [email protected] from your account's email address and ask us to delete your account. We delete your account and the personal information linked to it — your profile, resumes and uploaded files, applications, reports, answers and notes — and we email you when it is done, within 30 days. Copies in our backups are gone 14 days after that.

If you ask us never to email you again, we keep your email address on a "do not email" list, only for that purpose.

You can also delete many things yourself at any time, for example a resume, an application, a saved match report, an achievement or a selection-criteria document.

Seeing and correcting your information

You can see and change most of your information yourself, in your account. To get a copy of everything we hold about you, or to correct something you cannot change, email us. We reply within 30 days, and there is no charge.

Complaints

If you think we have mishandled your personal information, email us first. We will look into it and reply within 30 days. If you are not happy with our reply, or we do not reply within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

Data breaches

If a data breach is likely to cause you serious harm, we will tell you and the OAIC as soon as we can, in the way the Notifiable Data Breaches scheme describes.

Age

The free Career Explorer is for people 15 and over. We ask your age at the start. If you are under 18, use it with a parent, a guardian or a careers adviser who has agreed. Accounts and payments are for people 18 and over. We do not send marketing email to people under 18.

Cookies and local storage

One session cookie keeps you signed in. Cloudflare may set a cookie that protects the site from robots. Your browser's local storage holds drafts and small preferences (like your savings figures) so they never have to leave your device. We do not use advertising or tracking cookies.

For employment service providers

• JobMatcha does not connect to any government system. Clients create and control their own accounts.
• Client information is kept on our server in Sydney. The writing service is in the United States: it receives only the text needed for each draft, does not train on it, and deletes it within 30 days.
• JobMatcha is not accredited under the Right Fit For Risk framework, and it is not an approved third-party employment system.
• If your clients are in a programme funded by the Department of Employment and Workplace Relations (DEWR) or the Department of Social Services (DSS), check your deed before you use JobMatcha as part of your service. The department's approval may be needed for tools of this kind, and for information that is kept or processed overseas.
• We will give you these facts in writing and help you answer the department's questions. Email [email protected].

Changes to this policy

When we change this policy, we change the date at the top. If a change affects how we use your information, we email account holders before it starts.

Questions? [email protected]