Privacy policy

Last updated: April 11, 2026

Overview

Refine is a job search tool. Your job search is personal, and we treat your data that way. This policy explains what we collect, why, and what we do with it. The short version: we collect what's needed to run the product, we don't sell your data, and we don't share your activity with employers.

Information we collect

Account information

When you create an account, we collect your name and email address. If you sign in with Google or LinkedIn, we receive your name, email, and profile photo from those services. We don't receive your passwords from third-party sign-in providers.

Job search data

Everything you add to Refine: job applications, interview notes, offer details, company tracking preferences, and any other content you create within the product. This data is yours and is only visible to you.

Signals and company tracking

When you track a company through Signals, we monitor that company's public career page for new openings. We store the company name, career page URL, and the openings we detect. This data comes from public career pages, not from your employer or any private source.

Browser extension

If you install the Refine browser extension, it detects when you're on a company career page and lets you add that company to your tracking list. The extension only activates on pages it recognizes as career pages. It does not monitor your general browsing, read your email, or access any other tabs or sites.

Usage data

We collect anonymous usage data to understand how people use the product: which features are used, page views, and general interaction patterns. This data is aggregated and cannot be used to identify individual users. We use PostHog for product analytics.

Technical data

We collect standard technical information: IP address, browser type, device type, and error logs. This helps us keep the service running and debug issues. Error monitoring is handled by Sentry, and performance monitoring by New Relic.

How we use your information

  • Provide the service — store and display your job applications, interviews, offers, and tracked companies
  • Send notifications — alert you when companies you track post new openings that match your interests
  • Improve the product — understand usage patterns to make Refine better (using aggregated, anonymized data)
  • Maintain security — detect abuse, prevent fraud, and keep the service secure
  • Communicate with you — send essential product updates and respond to support requests

What we will never do

  • Sell your personal data to third parties
  • Share your job search activity with current or prospective employers
  • Use your data to serve advertisements
  • Track your browsing outside of recognized career pages (via the extension)
  • Share individual user data with other Refine users
  • Send you marketing emails without your consent

Data storage and security

Your data is stored on servers in the United States. We use encryption in transit (TLS/HTTPS) for all connections. Our database is hosted on PlanetScale with encryption at rest. Application servers run on Fly.io with isolated containers. Cloudflare provides DDoS protection and CDN caching for static assets.

We follow security best practices: HMAC-signed internal API communication, Content Security Policy headers, rate limiting, and input validation. Access to production systems is restricted to authorized personnel.

Third-party services

We use the following services to operate Refine:

Service Purpose Data shared
PlanetScaleDatabaseAll application data (encrypted)
Fly.ioApplication hostingRequest logs
CloudflareCDN and securityIP addresses, request metadata
UpstashBackground job queueJob metadata only
SentryError monitoringError details, stack traces
New RelicPerformance monitoringRequest timing, route performance
PostHogProduct analyticsAnonymous usage events
Google / LinkedInOAuth sign-inName and email (received, not sent)

Cookies

We use essential cookies to keep you signed in and maintain your session. We use PostHog for anonymous product analytics. We do not use advertising cookies or cross-site tracking cookies.

Data retention

We keep your data for as long as your account is active. Guest accounts without sign-up may have their data cleared after 30 days of inactivity. When you delete your account, we delete all your personal data within 30 days. Some anonymized, aggregated data may be retained for product analytics.

Your rights

You have the right to:

  • Access — request a copy of all data we hold about you
  • Correct — update or fix any inaccurate information
  • Delete — request deletion of your account and all associated data
  • Export — receive your data in a portable format
  • Restrict — ask us to limit how we process your data

To exercise any of these rights, email [email protected] or reach out through our contact page.

Children's privacy

Refine is not intended for users under 16 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you through the app or by email. The "last updated" date at the top of this page indicates when the policy was last revised.

Contact

For privacy questions or requests, email [email protected] or visit our contact page.