Privacy notice

CrocoJobs (crocojobs.aliaydi.com) is an independent project run by one developer, not a company. For anything about your data, write to aliabdelkadersama@gmail.com.

CrocoJobs uses your Google account in two ways. This section gathers what it does with Google user data in one place; the sections below give the surrounding detail.

• Signing in. Google tells us your name, e-mail address and profile photo. We use them to create and recognise your CrocoJobs account, and for nothing else. We keep your e-mail address and account ID; Supabase, which runs sign-in, also keeps the name and photo.
• Sending applications from your Gmail (optional). Only if you press Connect Gmail. CrocoJobs then asks Google for a single permission, to send e-mail on your behalf (the gmail.send scope), plus your e-mail address so we can check that the account you connected is the one you signed in with; mail can only be sent from your own address. That permission cannot read, list, search or delete anything in your mailbox, and we never receive its contents.
• What we use it for. Only to send the application e-mails you write and approve, each one after you press Send on a review screen, at most a few a day. Not for advertising, not to train AI models, and no person at CrocoJobs reads your mailbox: we cannot see it.
• What we store. An encrypted token that lets us send on your behalf (encrypted with a key unique to your account and never shown to anyone), and for each application sent a record of the recipient, subject, message, the kind of files attached, the time and Gmail's message ID.
• Who receives it. The employer address you chose, through Gmail. We do not sell, rent or give Google user data to anyone. The services that run CrocoJobs (listed below) process it only to run the service, and the covering e-mail the AI drafts for you is also kept in the quality records described below, for 90 days.
• How to remove it. Disconnect Gmail in Account settings: the token is deleted here and Google is asked to revoke it. If Google cannot be reached at that moment the token is still deleted here, and you can revoke access yourself at myaccount.google.com/permissions. To delete the rest, see “Your choices” below.

CrocoJobs's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Browsing jobs and statistics needs no account. Each request to our server is logged with the kind of page (for example “a job”, not which job), the result, the time and a one-way hash of your IP address, which is what daily limits and abuse protection count against. That log is kept 30 days; after that only daily totals remain, with nothing that points back to anyone. Words you search for are sent to Cloudflare (or to Hugging Face when Cloudflare cannot answer) to find postings with a similar meaning.

Counting visits. Most requests a website receives come from programs, not people, so to know how many people use CrocoJobs and which pages they use, the site loads Google Analytics through Google Tag Manager. For each page you open, Google receives its address, the page you came from, your browser, device and screen size, your language, and roughly where you are, worked out from your IP address. The address of the jobs list includes the words you searched for and the filters you chose. Google Analytics sets cookies that tell your browser from another and one visit from the next; they do not say who you are, and we do not send Google your account, your documents or anything you write to Ask AI. We use these numbers only to see how CrocoJobs is used: there are no advertising tags and no advertising cookies. You can switch the counting off for your browser under Your choices.

Your browser stores a random ID that keeps your Ask AI conversations together, your theme, your last list filters, Google Analytics' cookies (unless you switched visit counting off, a choice it also stores) and, when you are signed in, your sign-in session. Nothing in it is used for advertising.

Your account. You sign in with Google through Supabase. We keep your e-mail address and account ID; Supabase also keeps the name and photo Google provides, and a record of your sign-in sessions for security.

Ask AI and smart search. Your questions and the answers are saved so you can return to a conversation, until you delete it. To answer, your question, the last few messages and the job data used are sent to an AI model: Groq first, Google Gemini's free tier when Groq is busy, and OpenRouter's free models when both are. Smart search, when it is switched on, sends your search words to the same models to turn them into filters. If you add your own AI key, your questions use your key instead; smart search always uses the models named above. Holding credits does not change where a question goes.

Jobs that fit you, in Ask AI. When you ask for jobs that fit you, the postings are ranked against your career profile (if you are signed in and have built one) and against what you told the assistant about yourself, which goes to Cloudflare (or Hugging Face) to compute the numbers used for matching. The AI model then receives the matching postings and how well each fits, never your profile itself. Reasons drawn from your profile, such as which of a posting's skills you have, are included only when the question is answered by your own AI key or by the AI models CrocoJobs pays for, never by the shared free ones.

Career profile and tailored CVs. We store the documents you upload, the text read from them, the profile built from them, and the CVs, cover letters and motivation letters generated for you. Reading your documents and writing these is done in one of two ways, and never on the shared free-tier models. With credits (bought, or a free trial), your documents, your profile and the posting are sent to AI models CrocoJobs pays for: Google Gemini's paid service, whose terms do not let Google use what is sent to improve its products. With an AI key you add yourself, your CV is sent to the provider you chose, under your own agreement with them. A free Gemini key falls under Google's free-tier terms, which allow Google to use and review what is sent; a Groq key or a paid Gemini key does not. With an OpenRouter key, OpenRouter passes your CV to the provider of the model you chose, and some free models' providers keep or train on what they receive. Your profile text, and any CV text you paste to find matching jobs, is also sent to Cloudflare (or Hugging Face) to compute the numbers used for matching. For pasted text we keep those numbers, never the text, in the server's memory for up to 30 minutes, so that filtering, sorting and loading more matches do not send it again.

Sending applications by e-mail. If you connect your Gmail, CrocoJobs asks Google for one permission only: to send e-mail as you. It cannot read, list, search or delete anything in your mailbox. We keep an encrypted token that lets us send on your behalf (encrypted with a key unique to your account, never shown to anyone), and for each application you send, a record of the recipient, subject, message, the kind of files attached, the time and Gmail's message ID, so we can warn you before you write to the same employer twice. The message itself sits in your own Gmail Sent folder. Nothing is sent until you press Send on a review screen, and at most a few applications a day. You can disconnect in Account settings at any time, which deletes the token here and revokes it at Google; you can also revoke access at myaccount.google.com/permissions. The covering e-mail is written the same way as your CV (your own AI key, or the paid models when you use credits), and is recorded with the other quality records below.

Interview training. A quiz or a voice interview is written for one job posting from that posting, what our job data says about its employer (sector, size, its other postings), your career profile and the fit analysis of the application kit you start it from. It runs on credits only, so all of it, the text of your answers included, is processed by the AI models CrocoJobs pays for and never by the shared free-tier models or your own key. We store the session: the questions, what you answered, and the grades or the report. It is yours alone to read, and it stays until you delete it. Training sessions are not part of the quality records below.

Your voice. In a voice interview the speaking and the listening are done by your own browser, not by CrocoJobs. The interviewer's questions are read aloud by a voice installed on your device or supplied by your browser. When you answer with the microphone, your browser turns your speech into text with its maker's speech service: Google's in Chrome, Apple's in Safari, Microsoft's in Edge. Your audio goes from your browser to that service under that company's terms; it never reaches CrocoJobs, and we neither receive nor store any recording. We receive only the resulting text, which you can read and correct before you send it, and a mark that the answer was spoken. You can type every answer instead: the microphone is then never opened.

Your own AI keys are encrypted with a key unique to your account, never shown back to you or anyone else, and used only for your own requests.

Credits and payments. If you buy credits, you write to us on WhatsApp and pay by e-Dinar or D17 transfer; CrocoJobs never sees your card or bank details. For each purchase we record the transfer's reference, the amount, the date, the credits added and who added them. The receipt you send stays in the WhatsApp chat and is not stored in CrocoJobs. Every later change to your balance is recorded too (the date, the amount, and what it paid for, such as an application kit), so that you and we can see where your credits went. You can read that history in Account settings. A free trial, where one is offered, is recorded the same way: that it was given, when, and what it paid for.

AI models make mistakes that no error message reveals: a wrong figure, an ignored question, a CV that drops a job. To find and fix them, each AI run is recorded in detail and stored with DagsHub:

• Ask AI: your question, the recent conversation, the job data consulted, the answer, which model answered, and your account ID if you are signed in (not your name or e-mail address).
• Career profile: the text of the document being read, your current profile and what the AI changed.
• Tailored CVs: your profile, the job posting and the CV, cover letter and covering e-mail generated.

These records contain whatever your documents contain, including your name and contact details. Only the person running CrocoJobs can open them. They are deleted automatically after 90 days, or sooner if you ask.

• To provide the features you use.
• To keep the service available and fair: rate limits, daily allowances, abuse protection.
• To improve CrocoJobs: find wrong or unhelpful answers, compare versions of our instructions and models, and fix bugs.

That is all. We don't sell your data, show you ads, build marketing profiles, or try to work out who anonymous visitors are.

CrocoJobs runs on these services. Several of them process data outside Tunisia, in the European Union and the United States.

• Supabase

  Database, file storage and sign-in (EU, Frankfurt).

  Everything CrocoJobs stores: your account, conversations, documents, profile and generated CVs.

• Render

  Runs the CrocoJobs server (EU, Frankfurt).

  Every request passes through it. It keeps short-lived server logs, which include the addresses requested — so your search words too.

• Cloudflare

  Serves the website and forwards requests to the server; and turns text into numbers used to find matching jobs.

  Your IP address and the pages you request, as any web host does. For matching: your search words, your career profile, any CV text you paste to find matching jobs, and what you tell Ask AI about yourself when it looks for jobs that fit you.

• Google

  Sign-in; Gemini, the AI model used for Ask AI and smart search when Groq is busy, and — on a separate paid account — for work you pay for with credits; and Gmail, only if you connect it to send applications.

  At sign-in, Google tells us your name, e-mail address and photo. Gemini's free tier receives your question, the recent conversation and the job data used to answer it: Google's terms let it use that content to improve its products, and people may review it. Your CV is never sent to that free tier from our account. If you use credits, Gemini's paid service receives your documents, your profile and the posting you target, to read them and write your CV and letters, the Ask AI questions you pay for, and the text of your answers in interview training; the paid service's terms do not let Google use that content to improve its products. If you connect Gmail, each application you choose to send (the recipient, subject, message and the PDFs you attach: your CV and letters) goes through Gmail exactly as an e-mail you sent yourself would.

• Google Analytics

  Counts visits and shows which pages are used. Loaded through Google Tag Manager.

  For each page you open: its address (on the jobs list that includes the words you searched for and the filters you chose), the page you came from, your browser, device and screen size, your language, roughly where you are (worked out from your IP address) and an identifier kept in a cookie that tells your browser from another. Not your account, your documents, your questions to Ask AI or their answers.

• Groq

  The first AI model for Ask AI and smart search.

  Your question, the recent conversation and the job data used to answer it. Groq says it does not keep this data by default.

• OpenRouter

  The last AI model for Ask AI and smart search, used only when Groq and Gemini are both busy.

  Your question, the recent conversation and the job data used to answer it. OpenRouter passes them to one of the free models it offers; the companies running those models may keep what they receive and use it to train their models. Your CV is never sent to it from our account.

• Hugging Face

  Turns text into numbers used to find matching jobs, when Cloudflare cannot.

  The same text Cloudflare receives for matching: your search words, your career profile, any CV text you paste to find matching jobs, and what you tell Ask AI about yourself when it looks for jobs that fit you.

• DagsHub

  Stores the quality records described above.

  The records of AI runs, for 90 days.

• WhatsApp (Meta)

  Only if you write to us to buy credits.

  Your phone number and the messages and receipt you send, as in any WhatsApp chat. None of it is copied into CrocoJobs except the transfer's reference and amount.

• Your own AI provider

  Only if you add a key of your own (Groq, Google Gemini or OpenRouter).

  Your documents, profile and the job you target, sent under your own agreement with that provider.

• Your account and career profile: until you ask us to delete your account.
• Documents, tailored CVs, interview quizzes and voice interviews, and Ask AI conversations: until you delete them.
• Your Gmail connection: until you disconnect it. The record of applications sent from a kit: until you delete that kit or your account.
• Quality records of AI runs: 90 days.
• Your credit balance and its history: until you ask us to delete your account. After that the entries stay without your account or e-mail address, because we have to account for money received: a payment's reference, amount and date.
• Request log (kind of page, result, hashed IP address): 30 days, then daily totals only.
• Visit counts in Google Analytics: Google keeps the detail of each visit for at most 14 months, then totals only. Its cookies stay in your browser for up to two years unless you delete them.
• Our hosting and sign-in providers keep their own logs for their own periods.

• Browse jobs, search and read the statistics without an account.
• Keep your visits out of Google Analytics. The switch is remembered in this browser only, so use it on each device you browse with; Google's cookies already in your browser stay until you delete them, but nothing more is sent.Don't count my visitsVisit counting is on in this browser.
• Delete your documents, tailored CVs and conversations yourself, at any time.
• Ask for a copy of your data, a correction, or the deletion of your account and everything linked to it, quality records included: write to aliabdelkadersama@gmail.com. We reply within 30 days.
• If a job posting on CrocoJobs shows your contact details and you want them removed, write to us too.

These records are part of how CrocoJobs is run and improved. By signing in, or by using Ask AI, the career profile or tailored CVs, you agree to this notice and to the terms of service. If you don't, you can still browse jobs and statistics without an account, and switch visit counting off for your browser (under “Your choices”). You can change your mind at any time by deleting your data or asking us to delete your account.

CrocoJobs is meant for people aged 18 or over.

If we change how your data is used, we will update this page and the date at the top. Questions: aliabdelkadersama@gmail.com. Back to the jobs.