Privacy Policy

Jorvea — AI Career Intelligence Platform. Operated by EA Limitless LLC.

1. Introduction

This Privacy Policy explains how EA Limitless LLC ("EA Limitless," "we," "us," or "our"), operator of the Jorvea platform ("Jorvea," the "Service"), collects, uses, shares, and protects personal information when you use jorvea.co and related services.

Jorvea is an AI-powered career intelligence platform that helps users discover job opportunities, tailor application materials, prepare for interviews, and manage long-term career growth.

By using Jorvea, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

Data controller: EA Limitless LLC, a Maryland limited liability company.
Contact: contact@ealimitless.com

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, password, and phone number.
• Profile and intake information: career goals, job-search stage, target industries, work-style preferences, timeline, seniority, salary expectations, and other answers provided through onboarding and profiling wizards.
• Career documents: resumes, CVs, cover letters, and related files you upload.
• Career data generated through use: opportunities you save, applications you track, outreach messages, interview-session data, and branding content.
• Communications: messages you send to support and feedback you provide.
• Application-form content: answers you provide for job-application forms (work authorization, sponsorship, references, links, custom screening questions) that Jorvea uses to auto-fill applications you direct it to submit.
• Voluntary EEO / self-identification answers: optional demographic answers you choose to save (race, ethnicity, gender, veteran status, disability). Collected solely to auto-fill voluntary self-identification sections of applications you direct Jorvea to submit. If left blank, Jorvea selects "Decline to self-identify" for you.
• Job-board account credentials: the usernames and passwords you enter into the credentials vault so Jorvea can log in and submit applications on your behalf. Encrypted at rest with AES-256-GCM and decrypted only server-side during an application run.
• Inbound email content on the managed applicant address: emails sent to your @apply.jorvea.co address (recruiter replies, application confirmations, verification codes) are received and processed to draft responses and update your tracker.
• Job-application page content: when you use the Jorvea browser extension, the content of the specific application form you are on is processed so Jorvea can complete it.
• Recruiter and hiring-team contact info: names, titles, and public contact details surfaced from the job pages you apply to and from vetted contact-enrichment providers.
• Payment information: billing details processed by our payment processor (see Section 4). We do not store full payment card numbers on our systems.

2.2 Information collected automatically

• Usage data: pages viewed, features used, actions taken, and session activity.
• Device and technical data: IP address, browser type, operating system, device identifiers, and approximate location derived from IP address.
• Cookies and similar technologies: see Section 8.
• Error and performance data: diagnostic information captured when errors occur, used to maintain and improve the Service.

2.3 Information from third parties

• Authentication providers: if you sign in with Google, we receive basic profile information (name, email) from Google.
• Job and opportunity sources: publicly available job-listing data ingested from job boards, aggregator APIs, and company career sites to power discovery. This is information about job opportunities, not personal information about you.
• Connected integrations: if you connect a calendar or email account, we access only the data needed to provide the requested feature (see Section 4).

2.4 Sensitive information

Resumes and career documents may contain information some jurisdictions treat as sensitive (for example, certain background details). We process this information only to provide the Service's career features and as described in this Policy. Please do not upload information you do not wish us to process.

3. How We Use Your Information

We use personal information to:

• Create and manage your account and authenticate you.
• Provide core features — opportunity discovery, resume parsing and tailoring, interview preparation, outreach drafting, branding content, and career guidance.
• Process AI-powered analysis of your career materials (see Section 5).
• Process payments, manage subscriptions, and administer free trials.
• Send transactional communications — account notifications, verification and password emails, billing notices, and, if you opt in, SMS notifications (see Section 9).
• Send service updates and, where permitted, relevant product communications you may opt out of.
• Monitor, debug, secure, and improve the Service, including error monitoring and product analytics.
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms.
• Comply with legal obligations and enforce our agreements.

Legal bases for processing (EU/UK users)

• Performance of a contract — to provide the Service you have signed up for.
• Consent — for SMS notifications, certain cookies, and optional communications. You may withdraw consent at any time.
• Legitimate interests — to secure, debug, and improve the Service, and to prevent fraud and abuse, balanced against your rights.
• Legal obligation — to comply with applicable law.

4. How We Share Information

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

We share information only as follows:

• Service providers (processors) who perform functions on our behalf, under contract and bound to protect the information: cloud hosting and database, payment processing, AI processing (an AI gateway routes requests to large language model providers to power Jorvea's AI features; we do not use customer-provided API keys), email and SMS delivery, and error monitoring and analytics (configured to minimize personal data exposure — see Section 5).
• Prospective employers and their applicant-tracking systems (ATS) — at your direction, when Jorvea submits an application on your behalf. The information shared is the application content you provided (resume, cover letter, answers, EEO self-identification if you chose to save one) plus any fields the specific application form requires.
• AI model providers (as processors) — job/role text and your profile content used to generate applications, outreach, replies, interview prep, and coaching are sent to our AI providers under contracts that do not permit training on your data.
• Connected integrations you authorize — for example, if you connect Google Calendar we create calendar events on your behalf. These connections use your authorization and only the minimum scope required.
• Legal and safety — when required by law, legal process, or to protect the rights, safety, and security of users, the public, EA Limitless, or to enforce our Terms.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

A current list of categories of service providers is available on request at contact@ealimitless.com.

5. AI Processing

Jorvea uses artificial intelligence to deliver core features.

• What is processed: the career materials and inputs you provide — resumes, profile and intake answers, job descriptions, and related content — are processed by AI models to generate summaries, match scores, tailored documents, interview preparation, outreach drafts, and guidance.
• How it is processed: AI requests are routed through a managed AI gateway to third-party large language model providers. We do not require or use your own API keys.
• Automation modes. Jorvea offers three modes. In Manual and Assisted, applications, outreach, and replies are drafted by AI and queued for your explicit approval — nothing external is sent without you. In Auto mode, which you must explicitly enable and confirm, Jorvea submits applications and sends outreach and replies automatically within the rules you set (match-score threshold, daily caps, blocked companies), with a one-tap pause/kill-switch. You remain responsible for content submitted in your name in every mode.
• Automated processing (EU/UK). AI-generated match scores and recommendations are decision-support tools. In Manual and Assisted modes there is human review before any external effect. In Auto mode you have expressly configured Jorvea to submit applications and send outreach within rules you set; you can switch off Auto mode or use the kill-switch at any time. You may request human review of any output — see Section 11.

5.3 Error monitoring and analytics

We use error-monitoring and product-analytics tools to keep the Service reliable and to understand how features are used. We configure these tools to redact personal information — resume content, message content, email addresses, and phone numbers are scrubbed from diagnostic payloads before transmission. Analytics events are tied to an account identifier and used in aggregate to improve the Service.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service.

• Account and profile data — retained while your account exists.
• Career documents and generated content — retained while your account exists, so features remain available to you.
• Billing records — retained as required for tax, accounting, and legal compliance.
• Diagnostic and analytics data — retained for a limited period for security and improvement purposes.

When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention and dispute resolution.

7. Data Security

We implement technical and organizational measures designed to protect personal information, including:

• Encryption of data in transit.
• Row-level security and owner-scoped access controls on stored data.
• Private storage for uploaded documents, restricted to the owning user.
• Server-side handling of secrets and credentials — these are not exposed to client applications.
• Access controls and authenticated, gated routes.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If we become aware of a personal data breach affecting you, we will notify you and applicable regulators as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in and maintain your session.
• Remember preferences.
• Understand usage and improve the Service (analytics).

You can control cookies through your browser settings. Where required by law, we request consent before placing non-essential cookies. We honor recognized opt-out signals such as Global Privacy Control where applicable. Disabling some cookies may affect Service functionality.

9. SMS / Text Message Notifications

This section describes how we handle phone numbers and SMS messaging. See also the separate SMS Terms page.

• What we send: if you opt in, Jorvea sends transactional SMS notifications — interview reminders and high-fit job-match alerts.
• How we obtain consent: SMS consent is collected through a specific, unchecked-by-default checkbox at signup. We record the date, time, and exact wording of the consent you gave. Providing a phone number alone does not enroll you in SMS — consent is separate and explicit. SMS consent is not a condition of using Jorvea.
• Message frequency: varies based on your activity and job-match results; it is not a fixed cadence.
• Cost: message and data rates may apply, charged by your mobile carrier.
• Opt-out: reply STOP to any message at any time to unsubscribe. You may also turn off SMS in your notification preferences.
• Help: reply HELP to any message, or contact contact@ealimitless.com.
• How phone numbers are used: your phone number is used to deliver the notifications described above and for account-related purposes. We do not sell your phone number, and we do not share it with third parties for their own marketing. Phone numbers are shared only with our SMS-delivery provider for the sole purpose of sending the messages you requested.
• Mobile information sharing: no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors in support services, such as our messaging provider, solely to deliver the SMS service. All other categories of use exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

10. Your Choices

• Access and update account and profile information in account settings.
• Download or delete uploaded career documents.
• Opt out of SMS (reply STOP or change notification preferences) and of non-essential email communications.
• Delete your account at any time. Contact contact@ealimitless.com or use in-app account controls.
• Manage integrations — disconnect Google Calendar or other connected services at any time, which revokes Jorvea's access.

11. Your Privacy Rights

11.1 California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Delete personal information we have collected, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
• Limit the use of sensitive personal information. We use sensitive personal information only as necessary to provide the Service and for purposes permitted without a right to limit.
• Non-discrimination — we will not discriminate against you for exercising your rights.

Categories of personal information collected in the past 12 months: identifiers (name, email, phone, IP address); customer records (account and billing details); commercial information (subscription and transaction history); internet activity (usage data); geolocation (approximate, from IP); professional or employment information (resume and career data); and inferences drawn to provide career features.

Sensitive personal information we may process, only where you provide it and only to deliver the features you request: account credentials for job boards (stored encrypted), and — if you choose to save them — voluntary EEO / self-identification answers (race, ethnicity, gender, veteran status, disability) used solely to auto-fill voluntary self-identification sections of applications you direct us to submit. You have the right to limit our use of sensitive personal information; contact us to exercise it.

To exercise these rights, contact contact@ealimitless.com. We will verify your request and respond within the timeframes required by law. You may use an authorized agent.

11.2 EU, UK, and EEA residents (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten"), subject to legal exceptions.
• Restriction of processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests, and to direct marketing.
• Withdraw consent at any time, where processing is based on consent (this does not affect prior processing).
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. Jorvea's AI scores and recommendations do not make hiring decisions. In Manual and Assisted modes, you review and approve before anything is sent externally. In Auto mode, you have expressly authorized Jorvea to submit applications and send outreach within the rules you set; you can switch off Auto mode or use the kill-switch at any time, and you may request human review of any automated output.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact contact@ealimitless.com. We respond within one month, extendable as permitted by law.

11.3 International data transfers

EA Limitless LLC is based in the United States, and personal data may be processed in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

12. Children's Privacy

Jorvea is not directed to children and is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18 (or under 16 in the EEA/UK). If we learn we have collected such information, we will delete it.

13. Third-Party Links and Services

The Service may link to third-party websites and job listings. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you by email or through the Service. Your continued use of Jorvea after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or your personal information:

EA Limitless LLC
Email: contact@ealimitless.com