Last updated: October 2026 · Job Hub IL

Job Hub IL (“we”, “the site”) is a job search and CV tooling service for Israeli high-tech, offered by invitation or by subscription. This policy explains what we collect and why.

What we collect

• Account data. Email address (also your sign-in name), password hash, and whether the address is confirmed.
• Sign-in with Google. If you choose “Continue with Google”, Google gives us your account identifier, verified email address, name and picture. We use them to sign you in or create the account; we get no Google password and read no mail, contacts or files. The identifier is stored so later Google sign-ins reach the same account.
• Billing data. If you subscribe: the provider's customer and subscription identifiers, plan, status and period end. We never receive or store your card number — Paddle, the merchant of record, takes it directly and is the seller on the invoice.
• CV and job data. Files and text you upload, skills you approve, job marks, and tailoring working copies you create in the app.
• Usage and traffic. Page views, coarse device/browser labels and visitor IP addresses. When configured, country, city and ISP come from MaxMind GeoLite2 (see MaxMind).
• AI usage. Per-account token counts, so plan ceilings and the cost report can be computed. Counts are numbers, not the text you sent.
• Optional Gmail connection. If you connect Gmail for LinkedIn job alerts, we store the credentials you provide so the server can read alert mail in the folder you set.
• AI features. If enabled, text you send for wording help is processed by the configured cloud LLM provider under their terms.

How we use it

We run the service, take and renew subscriptions, sync job feeds you enable, score and tailor CVs, and improve reliability. We do not sell personal data.

Retention

Account and subscription records stay while the account exists. Raw sign-in, audit, product-event and visitor-IP rows go after 90 days; non-identifying lifetime counters may last longer. Application and nginx logs are kept 14 days, and encrypted disaster-recovery backups expire after 30 days. Deleting an account removes the live workspace at once and ages out of those backups.

Sharing

We use AWS (hosting, encrypted backups, logs), Paddle (merchant of record), Google (optional sign-in and Gmail), MaxMind (local IP geolocation), the configured mail provider, and the configured cloud LLM for text you submit; some process data outside Israel, and each provider's region, transfer mechanism, DPA status and deletion route are recorded before it is enabled. Google sign-in is governed by Google's privacy policy; Paddle receives what it needs to charge, invoice and meet tax rules. Job listings come from public company sources and documented connectors.

Your choices

You can correct your profile and permanently delete the account in Account Settings → Delete Account. You can also contact us, disconnect Gmail in the app, revoke other sessions, and cancel a subscription from the billing screen so it does not renew.

Contact

Questions about this policy, or a billing question: contact us, or reply to any message we have sent you.