1. Who operates the service
Job Application Tracker is operated by Chit-Thway from Perth, Western Australia. Questions, access requests, correction requests, or deletion requests can be sent to chitthway67@gmail.com.
2. Information we collect
Account information includes your name, email address, password hash, account tier, verification and security status, policy acceptance records, timezone, creation time, and last sign-in time.
The service does not request or retain a phone number for account registration or administration.
Tracker information may include applications, employers, job descriptions, captured source text, links, status history, contacts, interactions, tasks, appointments, notes, and retention preferences that you enter, import, or approve.
Security and operational records may include sign-in failures, administrative audit entries, health and retention-run timestamps, request metadata, and short error codes. Passwords, verification codes, password-reset tokens, and complete private tracker content are not written to application logs.
3. Why we use it
- To create, verify, secure, and support your account.
- To provide the application-tracking, reminders, retention, import, and browser-capture features you request.
- To enforce account tiers, prevent abuse, diagnose faults, and protect users and the service.
- To send transactional messages such as email verification codes and password-reset links.
4. Service providers and disclosures
The service uses Microsoft Azure for application hosting and transactional email, and Supabase-hosted PostgreSQL for database storage. These providers process information only as needed to operate the service. Information may also be disclosed when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a service transfer with appropriate safeguards.
We do not sell personal information, run behavioural advertising, or provide private tracker records to data brokers. Deterministic extraction rules run within the application; job descriptions are not sent to an external AI model.
5. Browser extension and public demo
The optional extension reads a job page only after you explicitly activate it and sends the captured content to your tracker for review. Read the separate browser extension privacy notice for its precise permissions and data flow.
The public demo uses separately constructed synthetic records and does not query private account data.
6. Retention and deletion
Account information is retained while your account is active and for a reasonable period needed for security, backup, dispute, and legal purposes after closure. Individual tracker records remain until you delete them or they become eligible under your configured retention settings. Connected workflow records are removed when their parent application is deleted. An administrator may permanently remove an account and its private tracker records when handling an authorised closure or support request.
Backups and provider logs may retain limited copies for a short operational period before scheduled deletion or overwrite. Administrative audit entries may be retained to protect account and service integrity.
7. Your choices
You can review and edit most tracker records directly. You may request access to your account information, correction, account closure, or deletion by contacting the privacy address above. Some records may be retained when reasonably required for security, fraud prevention, legal obligations, or resolving disputes.
You can understand essential cookies and local browser storage through the Cookie Policy.
8. Security and international processing
Safeguards include password hashing, email verification, rate limits, account lockout, encrypted HTTPS transport, owner-scoped data access, administrative audit trails, and no-store headers on authenticated pages. No internet service can guarantee absolute security.
Infrastructure providers may process data in Australia or other regions where they operate. Provider safeguards and access controls are used to reduce the risks of cross-border processing.
9. Children and policy changes
The service is intended for people managing their own employment search and is not directed to children under 16. If information was provided by a child without appropriate authority, contact us for review.
This policy may be updated as the service or legal requirements change. The effective date and version will be updated, and material changes may be communicated in the service or by email.