Privacy

Last updated: 17 October 2026

The short version

We keep the minimum needed to send you relevant jobs: your email address, the roles and areas you pick, and the jobs you save or mark. We never sell it, and you can delete all of it yourself at any time. We also count visits using an outside service, which you can switch off at any time; it is never linked to your account.
If you choose to upload a CV, we also keep its text and the skills read from it, so we can score jobs for you. An AI service reads it on our behalf; it is never shown to an employer.

If you browse as a guest

No account, and nothing about you is stored on our servers. Jobs you save with the heart are kept in your own browser, so clearing your browser data removes them and we never see them. If you ask for a daily email without an account, we store that address, the search it belongs to, the date you last opened one of our links, and which links in those emails you followed — so we can tell whether the emails are worth sending. Every one of those emails carries a one-click unsubscribe link.

If you have an account

We store your email address, your password as a salted hash (never the password itself), the roles and locations you choose, and the jobs on your board along with any status or note you add. We record the time you signed up and the IP address it came from, purely to stop bulk automated signups.
If you sign in with Google, we receive your name, your email address, Google's confirmation that the address is verified, and an identifier for your Google account — and there is no password to store. We do not receive your contacts, emails or files, and we tell Google nothing about your searches or your board.

Your CV and the AI features

These features are optional, and only for accounts. Nothing below applies unless you upload a CV.

What we keep: the text of each CV version you upload, the name you give it, and what was read from it — skills, experience level, languages and roles — after you have checked and corrected it. The uploaded file itself is deleted as soon as its text has been read. We also record when you agreed to the AI processing.

Who reads it: reading a CV is done by Claude, an AI model made by Anthropic, which we use as a service provider. Only the text of the CV is sent — nothing else from your account. Under Anthropic's commercial terms it is not used to train their models, and Anthropic keeps it only for a limited period, mainly to detect misuse. Anthropic's servers are outside Israel, including in the United States. Anthropic's privacy policy

Scores stay with us: matching your skills to jobs, and suggesting which CV version to send, is calculated on our own server, without sending anything anywhere. Your scores and suggestions are shown only to you; no employer sees them, and they are estimates, not decisions about you.

We never send your CV, or a tailored draft, to an employer or anyone else. Applying is always done by you, on the employer's or job board's site.

What to leave out: matching needs your skills and experience, not your ID number, photo, date of birth, family status, home address or health details. You can remove them from the CV before you upload it.

Your choices: you can correct what was read, delete any CV version at any time, or withdraw your agreement by deleting all of them — matching then stops and nothing about your CV is kept.

Tailored drafts: when you ask for a tailored CV or cover letter, the CV version you chose and the job posting are sent to the same AI model. The draft it writes is kept for 30 days so you can download it again, and then deleted.

If you save a draft to your CVs, we keep with that CV the job ad it was written for and the list of what we changed, until you delete that CV.

Email we send you

One digest each morning when there are new matches, plus the occasional message you asked for, such as a password reset. You can switch the daily email off in your preferences at any time, and every message carries a one-click unsubscribe that needs no login — so you can stop it even if the address was entered by mistake. A daily email you asked for WITHOUT an account still needs you to confirm the address first.
If a message to you comes back as undeliverable, we keep the returned notice so we stop writing to an address that does not exist. It is deleted together with your account or alert.
The links to jobs and to your board in our daily email pass through our own address first. When you follow one, we record which job, which day's email and the time, linked to your account or daily email, so we can tell which emails and jobs are useful to you. This is separate from the visit counting described below, and the switch there does not stop it. We keep it for up to a year, and deleting your account deletes it too.
Once a week the email asks you to share us. If you press one of its share buttons, we record which network and the day, linked to your account or daily email, so we can tell whether the request is worth repeating. Deleting your account deletes it too, and for a daily email without an account the record holds no address.
If you use tailored drafts with a password account, we send one email to confirm your address before your first draft. Accounts that sign in with Google never get it, because Google has already confirmed the address.

Where the jobs come from

We read public Israeli job boards and company career pages and match them against your preferences on our own server. Those sites are never told anything about you — no profile, no search, no address.

Counting visits

We use an outside service to count visits, so we can see which parts of the site people actually use. It runs on every page unless you switch it off below. If you block scripts, your visit is never reported to anyone.

The service is Google Analytics. It records the pages you open, roughly where in the world you are, and what kind of device you use. We have turned off the advertising features, and your address is shortened before it is stored. It is never connected to your account or to anything you searched for.

Google Analytics keeps its own cookie in your browser so it can tell one visit from the next.

We also count visits ourselves, with no outside service: which kinds of pages were opened, for how long, and what was clicked on this site. To tell a first visit from a return visit, your browser keeps a random number (not a cookie). It is never connected to your account, we keep it for at most 400 days, and switching counting off below deletes it.

Our web server also keeps a standard access log, which we turn into visit counts each night: the page you arrived on, which site sent you, your device type, browser and operating system, and the country and network your IP address belongs to. The IP address itself is not kept in those counts; it is replaced by a scrambled code that cannot be turned back into it. IP Geolocation by DB-IP

Your choice is remembered in your own browser, not in a cookie we send to our servers. Clearing your browser data resets it, and visits are counted again.

Deleting everything

There is a delete button in your account settings. It removes your account, your preferences, your whole board, your CVs and any drafts immediately — not a flag, an actual deletion — and it is also linked at the bottom of every email we send you.

Your rights

You can ask to see the information we hold about you, to correct it, or to have it deleted, through the contact page. We answer within 30 days, as Israeli privacy law requires.

Questions

Write to us through the contact page — no account needed. Signed-in users can also message us from the Contact Us screen. Contact