Privacy Policy
WorkIt (workitjobs.ai) helps students find job postings, build and tailor resumes, fill job applications and track them. This policy says what information WorkIt collects, why, who it shares it with, and the choices you have. WorkIt is operated by [TEAM TO DECIDE: legal name of the operator].
Information You Give Us
- Your account. Your name, email address and password. Supabase Auth, our sign-in provider, stores your password. WorkIt's own database does not.
- Google or LinkedIn sign-in. If you sign in with Google or LinkedIn, the provider shares your name, email address and basic profile details with our sign-in provider. We use them only to create your account and sign you in. We do not ask for access to your email, contacts, files or calendar.
- Your profile. Your phone number, headline, contact email, links (LinkedIn, portfolio, GitHub and one other) and an optional profile photo.
- Your resumes. Resume files you upload, the text we read from them, and resumes you build in WorkIt. We keep a copy of each resume you send with an application, so you can see what an employer received.
- Your experiences. The education, work, projects, bullets and skills you add to your experience bank.
- Your job preferences. The work styles, experience levels, job types, start dates, pay range, roles and locations you want, and whether you need visa sponsorship.
- Your application answers. Answers to questions that hiring systems ask on most applications: work authorization, sponsorship, citizenship and visa status, and security clearance. You can also give voluntary self-identification answers (gender, Hispanic or Latino, race, veteran status and disability). These are optional, and you can choose not to answer.
- Your applications. The job postings you save or apply to, each application's stage and dates, the resume you sent with it, and the interviews, assessments, offers and replies you add to it, with any meeting link and note you write.
Information We Collect Automatically
- Session cookies. WorkIt sets cookies that keep you signed in. WorkIt does not use advertising or analytics cookies.
- AI feature use. We count how many times you use each AI feature each day, to apply daily limits.
- Server logs. Our hosting providers keep standard request logs. [TEAM TO DECIDE: what these logs hold and how long they are kept]
Job Postings
The Jobs page shows job postings that we read from public company job boards on hiring systems such as Greenhouse. These postings describe jobs, not you.
How We Use Your Information
- To create your account and sign you in.
- To match you with job postings and show how well each one fits.
- To build, tailor and download your resumes.
- To fill job applications when you ask, and to track your applications.
- To run Scout, the job assistant, and the other AI features you use.
- To keep WorkIt working, secure and within its daily limits.
We do not sell your information. We do not use it for advertising.
AI Features
Scout, resume tailoring, resume import, written answers to application questions and job matching send text to AI model providers. This text comes from your experiences, resumes and the job postings you look at. Before any text leaves WorkIt, we remove your name, email address, phone number and links, and any other email address, web address or phone number in it. Your application answers, including self-identification answers, are not sent to AI model providers.
The providers WorkIt is set up to use include Google (Gemini) and Groq. Job matching sends text to Google (Gemini) only when that is turned on. [TEAM TO DECIDE: the final list of AI model providers] Some of these providers' free plans let them use the text they receive to improve their services. Because we remove your identity details first, that text does not include your name or contact details.
AI output can be wrong. WorkIt checks that tailored resume text and written answers do not add facts you did not give, but you should still review what the AI wrote.
The WorkIt Chrome Extension
The WorkIt Chrome extension fills job applications on hiring systems with your WorkIt information. It reads WorkIt's sign-in cookie so that it can get your information from WorkIt as you. It fills an application only when you click to start it, either in the extension or with Auto Apply. It never submits an application. You review what it filled and click Submit yourself.
The WorkIt Connector for Claude
You can add WorkIt to your own Claude account as a connector, so that your Claude writes the answers to your applications' written questions. Claude can connect only after you sign in to WorkIt and click Allow. WorkIt then gives Claude a token that reaches the connector and nothing else. We keep only a scrambled copy (a hash) of each token. A token lasts 1 hour, and Claude renews it while you use the connector; one unused for 90 days stops working.
- What Claude can read: one application at a time: its company, job title, job posting and the written questions it still has unanswered, and your experience bank and skills. Claude never gets your contact details, your application answers (including self-identification answers), your resume files or your other applications.
- What Claude can save: answers to that application's written questions. WorkIt keeps each answer with the application, and the extension fills it into the application's open tab. You review it and submit the application yourself.
- What WorkIt does not collect: your Claude conversations, your Claude memory, chat history or files. WorkIt calls no AI model for the connector; Claude writes with your own Claude plan, under Anthropic's terms and privacy policy.
- Stopping it: in WorkIt, Settings > Sign-In & Security > Connected Apps > Disconnect deletes every token Claude holds, so it stops at once; you can also remove WorkIt in Claude's connector settings. Deleting your WorkIt account deletes its connector tokens and saved answers.
Who We Share Information With
- Service providers that run WorkIt: Supabase (sign-in, database and file storage), Cloudflare and Vercel (hosting), and the AI model providers above.
- Employers, only when you apply. When you fill an application on a hiring system and submit it, the employer and its hiring system get what you submit. WorkIt does not send it for you.
- When the law requires it. [TEAM TO DECIDE: how WorkIt answers legal requests]
How Long We Keep Information
We keep your information while your account exists. [TEAM TO DECIDE: retention period after an account closes, and for backups and logs]
Your Choices
- You can change or delete your profile, profile photo, resumes, experiences, preferences, application answers and tracked applications in WorkIt at any time.
- You can delete your account in Settings. Deleting it deletes its profile, its files and everything linked to it, for good. For other privacy requests, contact [TEAM TO DECIDE: contact email for privacy requests].
- [TEAM TO DECIDE: privacy rights by region (for example GDPR or CCPA) and how to use them]
Security
Every request for your information goes through WorkIt's server, which checks that you are signed in and that the information is yours. No system is perfectly secure, and we cannot promise that your information will never be accessed without permission.
Children
WorkIt is for students looking for jobs and internships. You must be at least [TEAM TO DECIDE: minimum age] to use it.
Where Your Information Is Stored
[TEAM TO DECIDE: the country or region where data is stored and processed]
Changes to This Policy
When we change this policy, we update the date at the top of this page. [TEAM TO DECIDE: how users are told about important changes]
Contact
Questions about this policy: [TEAM TO DECIDE: contact email]