Privacy policy

Here we tell you what data of yours we keep, what for, who we share it with and how you can see it or delete it.

1. Who is responsible

The party responsible for your data is Monk Labs SpA, RUT (Chilean tax ID) 78.404.978-7, with its address at Las Bellotas 199, oficina 62, Providencia, Santiago, Chile, which runs JobRats. To use your rights or ask anything about privacy, write to us from Support or at soporte@jobrats.com.

2. What data we handle

• Account: your email and, if you give them, your name and city.
• Your birthday (optional): if you add it in My account, we keep the day, month and year only to say hi that day, send you a gift and count ages by range, without names. We never use it to search for jobs or to apply, and it never reaches the extension or LinkedIn. You can delete it anytime in My account, and it is deleted with your account.
• Your search: the job titles, keywords, levels, places, work mode and salary you're looking for.
• Your CVs: if you choose to («Your CVs» or «Save to apply»), we keep your CVs (one per language, PDF or DOCX up to 2 MB) so your rat can attach them when it applies for you. They are stored encrypted in Cloudflare (United States), only you see and change them, and only your JobRats extension uses them when applying. Nobody at JobRats opens them. We keep them as long as you have your account: if you tap «Remove» or delete your account, they are deleted right away. You can download them anytime from My account → Export. If you only use «Fill in with my CV» without saving it, the CV is read on the spot and discarded, as always. What your rats suggest from your CV (roles, keywords, level, languages, city and years of experience) stays in your account until you confirm it, for up to 30 days. The file and its text aren't saved unless you choose to save it.
• Your board: the jobs the rat brings or that you add yourself, their notes and the status of your applications.
• Chrome extension: the jobs the rat sees on LinkedIn and other job sites (with their description), the result of each application and the answers you save for applying (for example, phone, years of experience, expected salary and availability), plus the ones you answer on LinkedIn so the rat can reuse them. For each job you apply to, it keeps who posted it and the hiring team LinkedIn shows (name, job title and public profile), so you know who to keep an eye on. Only you see them. The extension checks whether you're signed in to LinkedIn, only to warn you if you aren't: it doesn't read or store your session or your password.
• Filling in forms on other sites. When you ask for it on an application form on another site (with the JobRats icon or Alt+J), the extension fills it in with your JobRats details: name, email, phone, city and country, expected salary, the answers you saved and your CV. It only does this in that tab. If the form comes from another site inside the page, it asks you for permission for that site first, and you can remove it anytime. You review it and send it: the extension doesn't press «Send». We never fill in your gender, ethnicity, disability or other sensitive data. We keep a record that a form was filled in (the page and how many fields were filled) to count your daily limit, and the answers you wrote yourself, to use them next time. What you send is in the hands of that company and its application system, under their own privacy rules. If the form asks you to accept its privacy policy or to let them keep your details, the extension ticks that box for you, and you see it before you send. It never ticks boxes for advertising, messages, background checks or sensitive data.
• Help chat: your conversations with the Support Rat, to answer you and improve the answers.
• Feedback: what you tell us in surveys, in «I got a job!», when you cancel or in Support.
• Payments: your plan, the dates and amounts of your charges and the coupons you used. We don't store card details: Mercado Pago processes the payment.
• Invitations: who invited you or who you invited, and the rewards. The people you invite only see your first name.
• Welcome coupon: if you leave us your email without creating an account, we keep the email, whether you agreed to get news, and the coupon.
• Technical data: the session cookie, the extension version, security logs (for example, sign-ins and plan changes) and how you found JobRats (see Cookies).
• Measurement (only if you accept it in the cookie notice): which pages of the public site you visit and which campaign brought you. See section 7.

3. What we use it for, and on what basis

• To give you the service you signed up for: find jobs that match you, apply to the ones you choose and keep track of your applications.
• To charge your subscription and follow tax law.
• To send you service notices (signing in, charges, plan changes). Those always arrive.
• To send you summaries and new jobs, only if you leave them on. You turn them off in «My account» or from the link in each email.
• To keep the service safe and prevent abuse (for example, someone repeating the free trial or a coupon).
• To learn which parts of the site and which ads work, only if you accept measurement in the cookie notice. The basis is your consent, which you can withdraw anytime.

We don't sell your data or use it for advertising.

4. Who we share it with, and where

Only with providers that help us run JobRats and that handle the data on our behalf:

• Cloudflare (app hosting and DNS, United States, with servers in many countries; it also stores, encrypted, the CVs you choose to save, and checks that you're a person when you sign in). Vercel stays on for a few days as a backup (United States).
• Neon (database, in São Paulo, Brazil).
• Resend (sending emails, United States).
• ImprovMX (receiving the emails you send us, United States).
• Anthropic (artificial intelligence, United States): for the help chat, to read your CV if you ask, and to suggest answers on forms. It doesn't use your data to train its models.
• Mercado Pago (payments, Chile).
• Google (Google Analytics and Google Tag Manager, United States): only if you accept measurement. It receives data about your visit to the public site, never your name, email, national ID, phone, CV or answers.

Some of these providers are outside Chile. When you use JobRats, your data travels to those countries only to give you the service, with security measures and under each provider's contracts. We also hand over data if an authority requires it by law.

5. How long we keep it

• For as long as you have your account, even if your plan ends: without a plan the app is paused, but your data stays saved and you can download or delete it from My account.
• Your account isn't deleted for not using it: we only delete it if you ask.
• If you delete your account, we delete your data right then, except the payment records that tax law requires.
• Your saved CVs: as long as you have your account. If you tap «Remove» or delete your account, they are deleted right away.
• We only keep an encrypted fingerprint of your email (not the email itself: it can't be turned back into it), the date of your first account, the date of your trial and the coupons you used, so the free trial and coupons can't be repeated. That fingerprint is deleted after 2 years.
• The welcome coupon email is deleted if you ask us, or along with your account.
• What Google Analytics keeps about your visit: 14 months. If you withdraw your consent, it stops receiving new data.

6. Your rights

Under Chilean data protection law (Law 19.628 and Law 21.719), you can ask for access, correction, deletion, objection, portability and blocking of your data. You download your data and delete your account from «My account». For everything else, write to us from Support. We reply within 15 business days. If you're not satisfied, you can file a complaint with the data protection authority.

7. Cookies and measurement

Necessary (always on). JobRats doesn't work without them:

• Session: keeps you signed in safely.
• Invitation: if you arrive through a friend's link, it remembers their code for 30 days to give you your discount.
• Origin: the first time you visit, it remembers for 60 days how you got here: the campaign or network in the link, the site you came from (only its domain) and the first page. If you create an account, we save this with it and delete the cookie. It's ours; we don't share it or use it to show you ads.
• Your browser: remembers your choice in this notice, your language, your time zone and your views in the app.

Measurement (only if you tap «Accept»). We use Google Analytics, loaded through Google Tag Manager, to learn how many people visit the site, which pages they see and which campaigns bring them. Google stores 2 cookies (_ga and _ga_FG9YCSDLT9) that last 13 months.

What we never send: your name, email, national ID, phone, your CV, your answers to forms or the jobs you apply to.

Where it's used: only on the public site (home, guides and Plans). When you sign in, only the Cloudflare check explained below loads. When you accept the terms, inside the app, in My account and in the admin panel we load nothing from third parties.

When you sign in. When you request your sign-in link, we use Cloudflare Turnstile to check that you're a person and not a robot. For this, Cloudflare receives your IP address and technical data about your browser and device. This check doesn't receive your email. It's a security measure to protect accounts: it doesn't depend on the cookie notice, it isn't measurement and we don't use it for advertising.

Until you choose, nothing from Google loads. If you tap «Only necessary», nothing loads either. You can change your choice anytime from «Cookies» at the bottom of every page. If you withdraw consent, we delete Google's cookies from this browser and stop measuring; what happened before doesn't change. We ask again every 6 months.

We don't use advertising cookies. If we ever do, we'll say so here and ask you in the notice before loading them.

8. Security

Your data travels encrypted, the database keeps each person's information separate, and only our servers can access it. If a breach affects you, we tell you and the authority, as the law requires.

9. Minors

JobRats is for people 18 and older. If we learn that an account belongs to a minor, we delete it.

10. Changes

If we change this policy, we tell you what changed. If the change affects which account data we process or your rights, we ask you to accept the new version before you keep using JobRats.