Security at JobsStudio
Your job search holds personal information: your work history, your contacts and where you're applying. We treat it that way.
Your data is isolated to your account
Every table that holds your information is protected by row-level security in the database. Requests are checked against your signed-in account, so one account can never read or change another's data, even through the API.
Encryption
All traffic to JobsStudio uses HTTPS (TLS). Data is encrypted at rest by our database and hosting providers.
Sign-in
- Sign in with Google, or with an email address and password.
- Passwords are never stored in plain text; they're hashed by our authentication provider.
- Password reset links are single-use and expire.
- Redirects after sign-in only go to JobsStudio pages, which blocks a common phishing trick.
Infrastructure
JobsStudio runs on established providers: Supabase for the database and sign-in (hosted on Amazon Web Services) and Vercel for the website. See the privacy policy for the full list.
What we don't do
- We don't sell personal information or show ads.
- We don't apply to jobs or contact employers on your behalf.
- We don't send your resume to an AI service unless you use a feature that says it will.
Report a vulnerability
If you think you've found a security issue, please tell us through the contact form with “Security” in the first line. We'll respond quickly and credit you if you'd like. Please don't access other people's data or disrupt the service while testing.