Your job hunt is nobody's product.
Updated 16 September 2026
A job search is one of the most sensitive datasets a person can generate: where you've applied, what you earn, what you asked for, who rejected you, how it's going. Most "free" career tools monetise exactly that. We don't, and we never will. Here is how it works, in plain English, so you can check every part of it.
The covenant
We never sell your data, and we never share it for anyone else's purposes. Not to recruiters. Not to advertisers. Not to employers. Not to "carefully selected partners". Not in an acquisition data room as a sweetener. It applies to everyone, permanently, and there is no setting to find and switch off.
What that leaves is the handful of suppliers who run parts of Jobtracker for us, and only ever on our instructions: the company that sends our email, the one that takes card payments, the sign-in you chose, and the one that writes an AI draft at the moment you ask for it. Each is named below, with what it receives and why. They are processors doing our job, not other people buying yours.
What we store, and why
- Your account basics: name, email, and your money settings (KiwiSaver rate, student loan yes or no) so take-home pay is right.
- What you put in: jobs, contacts, notes, dates, salaries, documents' details. This is your working data. It exists so the product works, and for no other reason.
- Files you upload, if you choose to. A CV, a certificate or a reference letter, stored on our server in Auckland and encrypted, each file with a key of its own. A file is only ever sent back to you. It is never sent to an AI tool, and never to anyone else.
- Almost nothing else. Analytics are privacy-first and cookieless: we count pages, not people. No advertising trackers, no social pixels, no fingerprinting, nothing following you around the internet afterwards.
- How you found us, if you make an account. Three coarse facts kept for the length of one visit and written to the account once: a source label such as "calculate", the first page you landed on, and the site you came from if it was not us. It tells us which guides and tools are worth maintaining. It is not a cookie, it is never read again after the account exists, it disappears when you close the tab, and it identifies nobody.
The one shared layer, and your switch
There's one thing we build from user data, and we'd rather explain it than bury it: anonymised, aggregated salary statistics. What roles like yours really pay, by title and region, built from advertised, asked, offered and accepted numbers across many users, so that every Kiwi can walk into a negotiation knowing the real number.
- It's aggregate only: no names, no employers you can be traced through, no individual rows, and small samples are suppressed so nobody can be reverse-identified.
- Anonymised salary statistics are on by default; one toggle in Settings turns them off. Off means off, and everything else works identically.
- It's for you, not about you: the entire point is handing the information advantage back to the person on the wrong side of the table.
Email: what we send, and what we don't
Two kinds, and we keep them apart on purpose.
- About your account: sign-in links, a note when you create the account, anything needed to keep it working. These go out because you did something that asked for them, and there is no way to be signed up and not get them.
- Everything else: only if you tick the box. It is not ticked for you, on any form, ever. It means a handful of emails a year about new tools and guides, every one with an unsubscribe link that works on the first click.
Your address is never given, sold or rented to anyone else, and we do not send email on behalf of third parties. If you never tick the box, you will never hear from us about anything except your own account.
Who helps us run it
No product this size is run alone, and naming the handful of companies involved is more useful than a sentence saying we use "industry-standard providers". Here is the entire list, what each one sees, and where it is.
- SiteHost, Auckland, New Zealand. The server and the database. Your jobs, notes, contacts, dates, salary figures and any files you upload live here and are not copied anywhere else.
- Brevo, France. Delivers our email. It sees your email address and the contents of the messages we send you, and holds the Founding 100 waitlist if you join it and confirm. It is never sent anything from your board.
- Anthropic, United States. Writes the AI drafts, and only at the moment you ask for one: the cover letter writer, the negotiation coach, and four drafts in the app when you are signed in (a follow-up, a thank-you note, why you want the role, and a referee request). It receives only what that one draft needs. For the app's drafts that is the job title, the employer's name, how long ago you applied, the first name of the person the draft is to, the first line of what you noted they asked at the interview, and what you wrote under "Why I want this one". For the two tools it is the text you typed into them. Never your board, your other applications or your salary history. If you never ask for one of these drafts, nothing of yours is ever sent there.
- Google, United States. Only if you choose "Sign in with Google", and only to confirm you are you. Use a password or a sign-in link instead and Google is not involved at all.
- Stripe, for card payments: a paid plan, an AI top-up or a koha. Card numbers go straight to Stripe and never touch our server, so we could not leak one if we tried. We keep the plan, its dates and what was paid, which the tax rules require us to keep for seven years.
Analytics is not on that list because it is not a third party: it runs on our own server in Auckland, counts pages rather than people, and sets no cookies.
Each of these is a supplier acting on our instructions, not a partner we share data with. None of them may use your information for their own purposes, and the covenant at the top of this page binds every one of them.
Your data is portable, and deletable
- Export everything any time: jobs as CSV, the lot as a JSON backup. Your history is yours to take with you.
- Erase everything with one button that actually works, and doesn't route you through a retention offer or a seven-screen guilt trip.
- Delete a file and it is removed from the server straight away, and erasing your account removes every file with it. Our nightly backups copy the database, which holds a file's name and size but never its contents, and each backup is deleted after 90 days.
Your rights: seeing it, and fixing it
Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct anything that is wrong. Both are free, and neither needs a reason.
- A copy, instantly. The export button on your account gives you the whole file straight away, so you do not have to ask us at all. If you would rather ask, write to the Privacy Officer below and we will answer within 20 working days, which is what the Act allows.
- A correction. Almost everything here is yours to edit in the app. If something we hold about you is wrong and you cannot change it yourself, tell us and we will correct it, or attach a statement of the correction you asked for if we disagree.
- A complaint. If you are not happy with how we handle it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909. We would rather hear it first, but that route is always open to you.
Who's accountable
Jobtracker is operated by Crucible Investments Limited, a New Zealand company (company number 9401778, NZBN 9429053412676), and is built and run in New Zealand by the maker of Calculate.co.nz, under the same fifteen-year standard: primary sources, routine accuracy checks, and "if you find a problem, tell us and it gets fixed promptly". Here's who's behind it.
Crucible Investments Limited, operator of Jobtracker.co.nz
Email: hello@jobtracker.co.nz, marked for the Privacy Officer
Write to us for access, correction, or anything about how your information is handled. A request will always reach a human who can act on it.