Privacy Policy

Match Moth helps you find jobs worth applying to. To do that we hold your account email, the resume and preferences you give us, and a record of what you do in the app. We use a small number of trusted services to run the product, and send information to them only to make the features work. We do not sell your data. You can delete your account from Profile. The rest of this page is the detail.

Match Moth is in beta and free. We will update the date above when this policy changes.

• Your account. The email address you use to join the waitlist or create an account, and a name if you give one.
• Your resume. Resume content you upload or enter, plus structured facts we parse from it, such as skills, seniority, and history.
• Your preferences. Job titles, locations, work modes, salary target, and industries you tell us you are looking for.
• Your activity. Listings you view, shortlist, apply to, or hide, and the fit scores we compute for you.
• Connections you choose to import. If you use the referral feature and import a LinkedIn connections file, we store the names, companies, and titles in it.
• Basic technical data. Standard server logs and the information your browser sends when you use the site.

• To match you to listings and explain why each one fits — the core of the product.
• To send daily digests, waitlist and invitation emails, and account emails.
• To operate, secure, and improve the service.

We use your information to provide Match Moth to you. We do not sell it or use your resume or profile to train our own models.

Daily digests are relationship emails about the job-search service you asked us to provide; you can turn them off at any time in Profile. Waitlist confirmations, invitations, sign-in links, password resets, and account notices are transactional emails. If we ever send a marketing email, it will identify itself as such and include an unsubscribe option.

We run Match Moth on a few trusted providers, including the services below, plus hosting, database, and email-delivery providers. They process your data only to provide their service to us:

• OpenAI — AI scoring, resume fact extraction, and resume tailoring send the relevant parts of your resume and the job listing to OpenAI’s API. We use the API, not a consumer ChatGPT account. OpenAI does not use API inputs or outputs to train its models by default. Its standard API controls may retain abuse-monitoring logs for up to 30 days; we do not opt in to share API data for model improvement.

We use PostHog for limited product-usage analytics, such as signup completion, resume upload, onboarding completion, and listing actions. We also count page visits, including visits by people who are not signed in: PostHog records the page address, the site that referred you, and general device and browser information, and sets a cookie so repeat visits in one session are counted once.

We also record sessions — mouse movement, clicks, scrolling, and the pages you navigate through — to see where the product is confusing or broken. Before a recording is sent, we mask your resume content, your email address, your salary target, and any LinkedIn-connection names you have imported, along with anything you type into a form field; none of that reaches PostHog in a recording.

We keep database backups for disaster recovery: weekly copies for 56 days, then one copy per month for up to one year. Deleted information is not surgically removed from an existing backup, so it may persist there until that backup ages out.

If you stop using Match Moth, your account and its data may be deleted after three years of inactivity. You can delete it yourself at any time before that.

We may also share your information where the law requires it — for example to comply with a legal obligation, court order, or lawful request, or to protect the rights, property, or safety of Match Moth or its users. If Match Moth is ever involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, and it stays subject to this policy until you are told otherwise.

If you import LinkedIn connections, you are giving us information about people who are not Match Moth users. We use it only to show you who you might know at a company you are considering. Please only import data you have the right to share. You can remove it by deleting your imported connections or your account.

• Access — you can see the preferences and resume data we hold in your account.
• Correction — you can edit your resume and preferences at any time.
• Deletion — you can delete your account in Profile after confirming your password. We remove your account, profile, resumes and files, scores, connections, tracked actions, and directly linked onboarding data. Operational usage records are anonymized when the account is removed, and we do not retain a separate fraud or security audit record of the deletion.
• Export — you can request a copy of your data while we finish a self-service export feature.

For an export or another request that is not available in the app, email us at support@matchmoth.com. Some data may persist briefly in backups after deletion, as described above.

Access to your data is restricted to your own account, and we take reasonable measures to protect it. No online service can promise perfect security, but we design so that one user can never see another user’s information.

When this policy changes, we publish the new version here and update the date at the top of the page. If a change materially affects how we handle your information, we will tell you directly rather than relying on you to notice.

Questions about this policy or your data? Email support@matchmoth.com.