Privacy Policy

JobSpecCheck is operated by Helton Labs LLC ("Helton Labs," "we," "our," or "us"), which is committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered job specification auditing platform.

By using JobSpecCheck, you agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Personal Information

We collect information you provide directly to us, including:

• Account information (name, email address, username, password)
• Company information (company name, job title, industry)
• Payment information (processed securely through Stripe)
• Communication data (support requests, feedback)
• Profile preferences and settings

Usage Information

We automatically collect information about how you use our services:

• Job specification content you submit for analysis
• API usage data and patterns
• Feature usage and interaction data
• Log files and analytics data
• Device and browser information

Technical Information

• IP addresses and location data
• Cookies and tracking technologies
• Performance and error data
• Security event logs

We use your information for the following purposes:

Service Provision

• Process and analyze job specifications using AI
• Provide bias detection and compliance checking
• Generate improvement recommendations
• Maintain and improve our service
• Provide customer support

Account Management

• Create and maintain user accounts
• Process payments and billing
• Send important service notifications
• Authenticate users and prevent fraud

Product Improvement

• Analyze usage patterns to improve features
• Conduct research and development
• Improve features and reliability using aggregated, de-identified usage metrics
• Monitor system performance and security

We do not use your job-posting content to train AI models. Job postings are analyzed using OpenAI's API, which, under OpenAI's API terms, does not use submitted content to train its models.

We do not sell your personal information. We may share information in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our platform:

• Render (cloud hosting, managed PostgreSQL database, and job queue)
• OpenAI (AI processing and analysis of job-posting text)
• Stripe (payment processing)
• Resend (transactional email delivery)
• Sentry (error monitoring)
• Google Analytics (aggregated usage analytics)

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Enforce our terms of service
• Prevent fraud or abuse

Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred as part of the business assets.

We implement comprehensive security measures to protect your information:

Technical Safeguards

• TLS/HTTPS encryption for all data in transit
• Encryption at rest for our managed database and job queue, provided by our hosting platform
• Secure API endpoints with authentication and API-key access controls
• Passwords stored using industry-standard one-way hashing

Operational Safeguards

• Access controls and least-privilege principles
• Employee security training and background checks
• Incident response and breach notification procedures
• Regular backups and disaster recovery planning

Compliance Standards

• Support for GDPR data-subject rights (access, deletion, portability) for EU users
• Support for CCPA rights for California residents
• Industry-standard security practices

We retain different categories of information for different periods, and only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active; deleted when your account is terminated, except records we are required to keep for legal or tax reasons
• Job-Posting Content: Stored in your usage records while your account is active so you can review your history; deleted when your account is terminated
• Payment and Invoice Records: Retained for 7 years to meet legal and tax obligations
• Audit Logs: Retained for 90 days, then deleted
• Support Communications: Retained for 2 years for quality assurance
• Usage Analytics: Aggregated, de-identified data that no longer identifies you may be retained indefinitely for product improvement

You can request deletion of your data at any time through your account settings or by contacting support.

Depending on your location, you may have the following rights regarding your personal information:

Universal Rights

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format

EU Residents (GDPR)

• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge complaints with supervisory authorities

California Residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination

To exercise these rights, please contact our support team through your dashboard.

We use cookies and similar technologies to enhance your experience:

Types of Cookies

• Essential Cookies: Required for basic site functionality
• Authentication Cookies: Keep you logged in securely
• Preference Cookies: Remember your settings and preferences, including your analytics-consent choice
• Analytics Cookies: Set by PostHog and Google Analytics to help us understand product usage

Analytics Cookies and Consent

We use two third-party analytics services: PostHog (product analytics) and Google Analytics (aggregated usage analytics). Neither service is loaded, and no analytics cookies are set, unless you accept analytics cookies via the consent banner shown on your first visit. If you decline, analytics never load and the banner does not reappear. Your choice is stored in your browser's local storage on this site.

Managing Cookies and Changing Your Choice

You can change your analytics-consent choice at any time by clearing this site's data (cookies and site/local storage) in your browser settings; the consent banner will then appear again on your next visit so you can make a new choice. You can also control cookies generally through your browser settings. Note that disabling essential cookies may affect site functionality.

JobSpecCheck is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Certification schemes and codes of conduct
• Strong encryption and security measures

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our platform

Your continued use of our services after policy changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us: