Privacy Policy

Last Updated: July 22, 2026  ·  HarborAI LLC

At GetJobDrop, operated by HarborAI LLC ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By creating an account or using the Service, you agree to the practices described here.

1. Who We Are

GetJobDrop is a product of HarborAI LLC, a Maryland limited liability company.

2. Information We Collect

We collect the following categories of personal information:

• Account information: your email address and authentication credentials when you create an account.
• Career content you upload: resumes, work history, job descriptions, and related documents you submit to the Service.
• Generated materials: the tailored resumes, cover letters, and other documents the Service creates for you.
• Application tracking data: the jobs, statuses, and notes you record in the application tracker.
• Payment information: billing details for paid Pro subscriptions, collected and processed directly by Stripe. We never see or store your full card number.
• Technical data: IP address, browser type, and device information collected automatically by our infrastructure provider, Cloudflare, for security and performance purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and maintain your account.
• To generate tailored resumes, cover letters, and related materials from the content you provide.
• To operate the application tracking features.
• To process payments and manage subscriptions.
• To respond to inquiries and provide support.
• To maintain the security and integrity of the Service.
• To comply with legal obligations.

We will not use your email for unrelated marketing without your explicit consent.

4. Third-Party Service Providers

We use a small number of trusted third parties to operate the Service:

• Stripe: processes payments for Pro subscriptions. Stripe collects your payment card details directly; see Stripe's Privacy Policy.
• AI model providers: the content you upload and the instructions you give are processed by third-party AI providers (including OpenRouter and Anthropic) to generate your documents. These providers process data on our behalf to deliver the Service.
• Cloudflare: provides hosting, CDN delivery, DDoS protection, bot detection (Turnstile), and security services. Cloudflare may log technical request data (IP addresses, headers) as part of its security processing. See Cloudflare's Privacy Policy.
• Formspree: processes general contact and inquiry form submissions on our behalf. See Formspree's Privacy Policy.

These providers are contractually obligated to protect your data and use it only to provide services to us.

5. Data We Do Not Sell

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for commercial purposes. Period.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy:

• Account data, uploaded content, and generated materials: retained while your account is active, and deleted within 90 days after you request account deletion.
• Contact/inquiry submissions: retained for up to 2 years after the inquiry is resolved, or until you request deletion.
• Payment records: retained as required for tax and accounting purposes.
• Technical/security logs: retained according to Cloudflare's standard retention schedules (typically 30 to 90 days).

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request that we delete your account and personal data.
• Opt-out: Unsubscribe from emails at any time using the unsubscribe link in any email we send, or by emailing us directly.

To exercise any of these rights, email us at security@getjobdrop.com. We will respond within 30 days.

8. Cookies and Tracking

The Service uses cookies or similar technologies for core functionality (for example, keeping you signed in, and Cloudflare security cookies). We do not use advertising trackers or analytics that identify you personally. If this changes, we will update this policy.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

10. Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, or loss. However, no internet transmission is 100% secure. If we become aware of a data breach affecting your information, we will notify you as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will make reasonable efforts to notify active account holders by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

Questions or concerns about this Privacy Policy? Reach out: