Privacy Policy

This policy covers tekjobs.timurtek.com and the accounts and job-posting service on it, operated by Timurtek LLC, Everett, Washington, USA (hello@timurtek.com). It also says, because people ask, what the TekJobs software does with your data: nothing that leaves your computer.

The Software, on your computer

TekJobs, the software in the repository, runs locally. Your profile, resume, criteria, job notes, mail state and settings live in a folder on your machine. The software does not send them to us or to anyone. It makes requests to public job boards to read postings (with a user agent that names the project and, if you set one, your contact address); it runs the coding CLI you installed and signed in to, under that vendor's terms, for the letters and resumes it drafts; and if you turn on the mail check, that CLI reads your mailbox through the Gmail connector you attached to it, with only read tools allowed. The app's page loads its typefaces from Google Fonts, so Google sees your browser ask for them. We have no account, no telemetry and no server behind the software. What the Software sends to a job board, an LLM vendor or an employer is sent by you, from your machine.

The Site: what we collect

Account. When you sign in, Google Firebase Authentication gives us your email address, a display name if your sign-in method provides one, and a stable user id. We do not receive your password (Firebase holds credentials) and we do not receive your Google account data beyond name and email.

Purchases. When you buy a posting, Stripe processes the payment and tells us the checkout session id, payment status, the email you gave Stripe, and the amount. We store those, with the posting they bought, as the record of your purchase. We never see or store your card number.

Postings. The posting text you submit, the employer it names, and the dates it ran.

Server logs. Our host, Vercel, keeps standard request logs (IP address, user agent, path, time) for a short period for security and debugging.

Analytics. The Site uses Google Analytics 4 to count visits and see which pages are read: page views, the referring site, approximate location from the IP address (Google does not store the address itself), browser and device type. It runs only on the public site at tekjobs.timurtek.com, not in preview builds and never in the TekJobs software on your computer. We do not send it your account email, your postings, or anything you type. Google processes this data under its privacy policy; its browser add-on opts you out everywhere, and a browser that blocks the googletagmanager.com script has the same effect here.

The Site also uses PostHog to count how people find their way to the open-source project: page views, which docs are read, and clicks on the copy button of the install command and on the links to GitHub, its releases, npm and GitHub Discussions. Each event carries the page's address without its query string, the referring site without its path, and a random id kept in your browser's session storage, which is gone when you close the tab. PostHog sets no cookies here, keeps no profile of you, records no session and reads nothing you type; we do not send it your account email, your postings, or anything you type. If your browser sends Do Not Track or Global Privacy Control, nothing is sent to PostHog at all. Like Google Analytics it runs only on the public site, never in preview builds. PostHog processes this data under its privacy policy. We do not run advertising trackers.

The TekJobs software sends nothing. Neither analytics service, nor any other, is in the software you install: the app, the command line and the MCP server have no analytics, no telemetry and no crash reporting, and a test in the repository fails if one is added. The links to GitHub Discussions in the app open in your browser only when you click them.

What we do not collect. The Site collects no consumer health data in the sense of Washington's My Health My Data Act, no precise location, and nothing about job seekers: it has no view of who reads or applies to a posting. The Site is operated from and directed at the United States.

Cookies. One cookie of ours, tj_session, keeps you signed in for up to fourteen days. It is strictly necessary for the account to work and holds no tracking. Google Analytics sets its own cookies (_ga and _ga_*) to tell a returning browser from a new one; they hold a random id, not your name or email. The theme you pick is remembered in your browser's local storage and never sent to us.

Why, and on what basis

To provide the account and the posting you bought (performance of a contract); to keep records of payments and to respond to legal requests (legal obligation); to keep the Site secure and to understand whether it works (our legitimate interest, weighed against yours). We do not sell personal data, we do not share it for advertising, and we do not build profiles of job seekers: the Site has no view of who applies to anything.

Who processes it

• Google Firebase (Authentication and Firestore): accounts and purchase records, in the United States.
• Stripe: payments, under Stripe's privacy policy.
• Vercel: hosting and request logs, in the United States.
• Google Analytics: visit counts and page views on the Site, in the United States.
• PostHog: page views and the clicks listed above on the Site, in the United States.
• GitHub: the repository, its issues and its Discussions, if you interact with them.

Each processes data under its own terms and security programme. Data is stored in the United States; if you are elsewhere, using the Site means it is transferred there.

How long

Account data for as long as the account exists. Purchase records for seven years, as tax and accounting rules require. Postings for their term plus ninety days, then deleted or anonymised unless a dispute requires keeping them. Server logs for the retention period of our host, measured in days.

Your rights

You can ask what we hold about you, ask us to correct it, ask us to delete your account and the data that is not required for the records above, or object to a use you think is not justified. Write to hello@timurtek.com; we answer within thirty days. If you are in the EU, UK, or a US state with a privacy law, you have these rights under that law too, and the right to complain to your supervisory authority.

Children

The Site and the Service are for adults. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we will delete it.

Changes

The date at the top says when this policy last changed. A material change is announced on the Site before it takes effect.