Privacy Policy

JobStub is available now as a desktop web application. We process account, business, customer, invoice, document, delivery, subscription, browser, and analytics information to provide and secure the website and signed-in web service. The iPhone and Android app is on the way, with optional invitation-only mobile testing first. We do not sell personal information or use customer invoice content for advertising.

About JobStub

JobStub is a software product operated from Canada and currently offered to business users in Canada and the United States. Questions, complaints, and requests concerning personal information can be sent to hello@jobstub.app.

Where this policy applies

This policy covers the public JobStub website, the signed-in browser application, customer invoice pages, web subscription checkout and billing, support communications, and optional mobile-app interest forms. The desktop product does not require a native mobile app. If an invitation-only mobile build has additional data practices, those practices must be disclosed to testers before collection.

What the desktop web service collects

• Account and profile data. Email, authentication records, business name, contact details, logo, tax settings, and payment instructions you configure.
• Business records. Customers, addresses, invoice and estimate drafts, line items, prices, photos, notes, terms, delivery state, customer payment reports, and reports derived from those records.
• Billing records. Plan, provider, subscription identifiers, status, renewal or expiration dates, launch-offer eligibility and redemption, and checkout state. Stripe receives and stores web payment details; JobStub does not receive full card numbers.
• Browser and security data. IP address, browser and device information, request metadata, authentication state, rate-limit counters, and security logs used to operate and protect the web service.
• Usage and communications. Page paths, device class, allowlisted campaign fields, product-flow events, delivery records, and the contents of messages you send to support.

How we use web data

• Providing authentication, the desktop workspace, customer invoice pages, email delivery, reports, exports, web billing, support, and account deletion.
• Sending verification, password-reset, invoice, receipt, billing, security, and support emails.
• Preventing abuse, enforcing quotas and access, reconciling subscriptions, and enforcing one introductory launch offer per account.
• Understanding website and product flows, including registration, invoice creation and sending, checkout, and template conversion.

Cookies and web analytics

JobStub uses necessary browser cookies for sign-in, email verification, password reset, security, and session continuity. The website also uses Google Analytics and Vercel Analytics. Custom product events are restricted to properties such as CTA location, billing interval, page path, device class, and allowlisted campaign fields. JobStub does not intentionally send customer names, customer email addresses, invoice contents, authentication tokens, or raw errors as custom analytics properties. Analytics providers may also process browser, device, network, and identifier data according to their own services and privacy notices.

Service providers and disclosures

Current technical providers include Vercel for web hosting and analytics, Google Analytics for website measurement, PostgreSQL and Supabase infrastructure for application or acquisition data, Stripe for web subscriptions, Resend for email delivery, AWS S3 for managed uploads, and Google when you choose Google sign-in. OpenAI may be used only for an optional AI or voice workflow when that feature is available. Providers process information for the services they supply to JobStub. Some providers may process information in Canada, the United States, or other locations where they operate, and information may be subject to the laws of those locations. Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate abuse, or protect the service and its users.

Upcoming mobile app and optional beta information

Joining a mobile-beta interest list is optional and is not required to use the desktop web application. The interest form may collect email, trade, device platform, optional company name, consent, and abuse-prevention counters stored as hashed identifiers. If you later receive a test invitation, JobStub must explain any additional native-app permissions or data collection before you participate.

How long we keep it

Active account records are retained while the account is used. Read-only records remain available after paid access ends so you can view and export existing work. Account deletion initiates removal of account-owned application data and managed files, subject to limited legal, billing, promotion-abuse prevention, security, delivery-ledger, backup, and disaster-recovery retention. Optional beta interest is retained until consent is withdrawn, the program ends, or deletion is requested. We delete or de-identify personal information when it is no longer reasonably needed for these purposes, subject to those limited exceptions.

Your choices

Marketing and optional beta emails include an unsubscribe method. Transactional messages needed to operate an account or deliver an invoice are handled separately. For access, correction, export, consent withdrawal, or deletion, use the web account controls where available or email hello@jobstub.app. We may need to verify your identity before completing a request. Depending on where you live, applicable law may provide additional privacy rights or allow certain exceptions. If we cannot complete a request, we will explain why when required by law.

Security

JobStub uses technical and organizational measures intended to protect account and customer information, including restricted authentication cookies, access controls, request validation, and managed service providers. No internet service can guarantee absolute security. Contact us promptly if you believe an account or private invoice link has been accessed without authorization.

Children

JobStub is a business service and is not directed to children. We do not knowingly solicit personal information from children.

Changes

If this policy changes, the new version goes up here with a new date at the top. If a change materially affects account data, billing, analytics, customer invoice delivery, or optional beta communications, we’ll provide an appropriate notice.