CozyJobs Privacy Policy

Effective Date: February 13, 2026
Last Updated: March 9, 2026

CozyJobs is a product of Om List LLC ("Om List," "CozyJobs," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use:

• the CozyJobs platform at cozyjobs.ai,
• the CozyApply Chrome extension (when available),
• and all associated services, dashboards, and tools.

We are committed to being transparent about our data practices. This policy is written in plain language so you can understand what we do with your information.

1. Who We Are

2. Scope of This Policy

This policy applies to personal information we process when you:

• Register for an account and create a profile;
• Subscribe to a paid plan and complete checkout;
• Upload a resume or enter profile information;
• Use job search, filtering, matching, or saved-job features;
• Use AI-powered features (resume parsing, cover letter generation, job matching);
• Use Auto-Apply or CozyApply features (when available);
• Submit support requests, feedback, or bug reports;
• Visit our website and interact with our platform.

This policy does not apply to third-party websites, employer portals, applicant tracking systems, or job boards that you access through links on our Service. Those providers have their own privacy policies, and we encourage you to review them.

3. Information We Collect

3.1 Information You Provide Directly

Account and Profile Information:

• Name
• Email address
• Phone number (if provided)
• Social media links and portfolio URLs (if provided)
• Profile photo (if provided via Google OAuth)
• Job preferences (desired title, location, salary range, remote/on-site preference, industry)
• Skills, experience, and education

Resume and Application Content:

• Resume/CV file and text content
• Cover letters (including AI-generated versions you create through our tools)
• Work history, education, certifications, and qualifications
• Any other information contained in your resume or application materials

Communications:

• Support requests and messages
• Feedback, bug reports, and feature suggestions
• Survey responses

3.2 Information Collected Automatically

Usage Data:

• Pages and features accessed, Job Listings viewed, saved, and applied to
• Search queries and filter selections
• Application timestamps and status events
• Feature interaction patterns
• Application Credit usage and plan telemetry

CozyApply Extension Data: When you use the CozyApply browser extension and actively initiate features (such as clicking "Fill Application" or "Mark Applied"), we collect the URL and page title of the job listing you are applying to. This information is used to populate and improve the CozyJobs job database, helping other job seekers discover opportunities. This data is collected only when you actively use CozyApply features — we do not passively monitor or log your browsing activity.

Device and Network Data:

• IP address
• Browser type and version
• Device type and operating system
• Referring URL
• Approximate location inferred from IP address

Cookies and Similar Technologies:

• Authentication and session cookies
• Preference cookies
• Analytics cookies (see Section 7)

3.3 Information from Third-Party Services

Google OAuth: When you sign in with Google (via Supabase Auth), we receive your name, email address, and profile photo from Google. We do not receive your Google password.

Stripe (Payment Processor): When you subscribe, Stripe processes your payment information. We receive limited transaction data from Stripe (subscription status, plan tier, billing cycle, invoice metadata). We do not store your full credit card number, CVV, or bank account details — Stripe handles that directly.

3.4 Sensitive Information

Your resume and profile may contain information you choose to include that could be considered sensitive, such as disability status, veteran status, demographic information, or other personal details. We recommend only including information that is relevant to your job search. We process this information only as necessary to provide the Service and do not use it for any other purpose.

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 AI and Automated Processing

CozyJobs uses large language models (LLMs) and AI tools to assist with:

• Resume parsing: Extracting structured data (skills, experience, education, contact information) from uploaded resumes
• Job listing parsing: Extracting and categorizing details from third-party job postings
• Cover letter generation: Creating tailored cover letters based on your profile and target job descriptions
• Job matching: Recommending relevant Job Listings based on your profile and preferences

Important disclosures about our AI processing:

• AI outputs are assistive tools — you are responsible for reviewing and verifying all AI-generated content before use or submission.
• We use AI infrastructure providers to process your data (see Section 5). These providers act on our behalf and are contractually restricted from using your data for their own purposes.
• We do not use your personal resume data or application content to train public AI models in a way that identifies you. We may use aggregated, de-identified data to improve our own AI features.
• AI-generated content may contain inaccuracies, hallucinations, or errors. We do not guarantee accuracy.

4.2 Automated Decision-Making Technology (ADMT)

In compliance with the California Consumer Privacy Act (as amended by the CPRA and updated regulations effective January 1, 2026), we disclose that CozyJobs uses automated processing in the following ways:

• Job matching and recommendations: We use automated systems to match your profile with relevant Job Listings. These recommendations are informational — you decide which jobs to view, save, or apply to.
• Resume parsing: We use automated AI tools to extract information from your resume. You can review and edit parsed data in your profile.
• Content generation: AI generates draft cover letters and application text. You review and approve all content before any submission.

These automated processes assist your job search but do not make significant decisions about you without your involvement. You retain full control over which jobs to pursue and what content to submit. If you have concerns about our automated processing, contact us at privacy@omlist.io.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

5.1 Service Providers and Processors

We use trusted third-party service providers who process data on our behalf:

We require our service providers to protect your data and use it only for the purposes we specify.

5.2 Application Routing (When Auto-Apply Is Available)

When you direct us to submit applications on your behalf, we transmit necessary profile and application data to the target Third-Party Platform. This is done at your explicit direction and is necessary to provide the application feature.

5.3 Legal Compliance and Protection

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, court order, or legal process;
• Protect the rights, safety, or property of Om List, our users, or the public;
• Detect, prevent, or address fraud, security, or technical issues;
• Enforce our Terms of Service.

5.4 Business Transfers

In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such transfer and any choices you may have regarding your information.

5.5 With Your Direction or Consent

We may share information where you explicitly request or authorize it.

6. Data Retention

We retain your personal information only as long as reasonably necessary for the purposes described in this policy:

When data is no longer required, we delete, de-identify, or anonymize it. You may request deletion of your data at any time (see Section 8).

7. Cookies and Tracking Technologies

7.1 What We Use

We use cookies and similar technologies for the following purposes:

7.2 What We Don't Use

We do not use:

• Third-party advertising cookies or trackers
• Cross-site tracking pixels for ad targeting
• Fingerprinting technologies

7.3 Your Cookie Choices

You can control cookies through your browser settings. Most browsers allow you to:

• Block all cookies
• Block only third-party cookies
• Delete cookies when you close your browser
• Be notified when a cookie is set

Disabling essential cookies may prevent you from using certain features of the Service (such as staying logged in).

7.4 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information, as required by California law.

8. Your Privacy Rights

8.1 Rights for All Users

Regardless of where you live, you can:

• Access your personal information by viewing your profile and account settings;
• Update or correct your information through your account settings;
• Delete your account and associated data by contacting support@omlist.io;
• Download your data by requesting an export from support@omlist.io;
• Withdraw consent for optional processing activities.

8.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

1. Right to Know / Access: You can request the categories and specific pieces of personal information we have collected, used, disclosed, or sold/shared about you, including information going back to January 1, 2022 (or earlier, if we maintain it).

2. Right to Delete: You can request that we delete your personal information, subject to certain legal exceptions (e.g., we may need to retain billing records for tax compliance).

3. Right to Correct: You can request correction of inaccurate personal information.

4. Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. Om List does not sell personal information for monetary consideration. If any of our analytics or advertising practices are later deemed "sharing" under California law, we will provide the required opt-out mechanism.

5. Right to Limit Use of Sensitive Personal Information: Where applicable, you can request that we limit our use of sensitive personal information to what is necessary for the Service.

6. Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will not receive a different level of service or pricing for exercising your rights.

8.3 How to Exercise Your Rights

Submit requests via:

• Email: privacy@omlist.io
• Mail: Om List LLC, 2443 Fillmore Street, #288, San Francisco, CA 94115

Verification: We may need to verify your identity before fulfilling your request. We will typically verify by confirming information associated with your account (such as your email address). If we cannot verify your identity, we may deny the request and explain why.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. The agent must provide written authorization signed by you, and we may still ask you to verify your identity directly.

Response Timeline: We will respond to verifiable requests within 45 days. If we need additional time, we will notify you and may take up to 90 days total.

9. Do Not Sell or Share My Personal Information

Om List does not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioral advertising purposes.

If you are a California resident and wish to exercise your right to opt out, or if you have questions about how we handle your data, contact us at privacy@omlist.io.

We honor Global Privacy Control (GPC) signals as opt-out requests.

10. Children's Privacy

CozyJobs is intended for users who are at least 18 years old (or the age of majority in their jurisdiction). We do not knowingly collect personal information from anyone under 16 years of age. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information as soon as possible. If you believe we have inadvertently collected information from a child, please contact us at privacy@omlist.io.

11. Data Security

We implement administrative, technical, and organizational safeguards designed to protect your personal information, including:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL.
• Encryption at rest: Sensitive data is encrypted at rest in our databases.
• Access controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
• Authentication: We use industry-standard authentication mechanisms (Google OAuth via Supabase Auth) and do not store plaintext passwords.
• Vendor security: We evaluate the security practices of our third-party service providers and require appropriate safeguards.
• Monitoring: We monitor for unauthorized access, security incidents, and suspicious activity.

No system is perfectly secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials secure and notifying us promptly if you suspect unauthorized access.

12. International Users

CozyJobs is operated from the United States. If you access the Service from outside the United States, you understand and agree that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using the Service, you consent to the transfer of your information to the United States as described in this policy. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

13. Third-Party Services

Our Service may link to or interact with third-party websites, employer portals, job boards, and applicant tracking systems. These third parties have their own privacy policies and practices, which we do not control and are not responsible for.

We encourage you to review the privacy policies of any third-party service before providing your personal information.

Key third-party services integrated with CozyJobs:

• Google (privacy policy) — OAuth sign-in
• Stripe (privacy policy) — Payment processing
• Supabase (privacy policy) — Infrastructure and authentication

14. CCPA Category Disclosure

In the preceding 12 months, we have collected and may have disclosed for business purposes the following categories of personal information (as defined by the CCPA):

Sources: Directly from users, automatically via the Service, from third-party authentication providers (Google OAuth).

Business purposes: Providing and improving the Service, processing payments, AI-assisted job matching and content generation, security, legal compliance.

We do not sell or share personal information for cross-context behavioral advertising.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

• Material changes: We will provide notice via email and/or a prominent notice on the Service at least 30 days before material changes take effect.
• Minor changes: Non-material changes (such as formatting or clarifications) may be made without prior notice.
• The "Last Updated" date at the top of this page indicates when the most recent changes were made.

Your continued use of the Service after the effective date of an updated policy constitutes your acceptance of the changes.

16. Contact Us

For privacy questions, data requests, or concerns:

Om List LLC
2443 Fillmore Street, #288
San Francisco, CA 94115

Privacy inquiries: privacy@omlist.io
General support: support@omlist.io
Legal inquiries: legal@omlist.io
Website: https://cozyjobs.ai
Parent company: https://www.omlist.io

We aim to respond to privacy inquiries within 10 business days and to formal CCPA requests within 45 days (extendable to 90 days with notice).