Privacy Policy

JAN (Job Applicant Navigator) — Lopatka Consulting Services LLC
Last Updated: February 14, 2026

1. Introduction

JAN (Job Applicant Navigator) is a resume screening tool operated by Lopatka Consulting Services LLC ("we," "us," or "our"). This Privacy Policy describes how we collect, use, store, and protect information when you use our platform (the "Service").

We are committed to protecting the privacy of both our users (employers, recruiters, and hiring managers) and the candidates whose resumes are processed through our platform.

2. Information We Collect

2.1 User Account Information

When you create an account, we collect:

Name
Email address

2.2 Candidate Resume Data

When you upload resumes for screening, the Service temporarily processes the contents of those resumes, which may include candidate names, professional experience, education, skills, qualifications, and contact information.

2.3 Screening Configuration

We collect the job titles, screening criteria, exclusion criteria, and preference settings you define for each screening job.

2.4 Usage Data

We collect usage information including the number of resumes screened, screening timestamps, and feature usage patterns.

2.5 Terms Acceptance Records

When you accept our Terms of Service and Privacy Policy, we record the date and time of acceptance, the version accepted, and your account identifier for compliance purposes.

3. How We Use Information

3.1 Resume Screening

Candidate resumes are processed using our proprietary blind screening methodology. Before AI-powered evaluation, personally identifiable information — including candidate names, email addresses, phone numbers, mailing addresses, and school names — is removed from the resume text so that the AI model evaluates candidates based solely on qualifications, experience, and job-relevant criteria. Candidate identity is reattached to results only after scoring is complete.

3.2 Third-Party AI Processing

Anonymized resume text (with personally identifiable information removed) is sent to Anthropic's Claude API for AI-powered evaluation. Anthropic's data retention policy for API customers automatically deletes inputs and outputs within 30 days. API data is not used for model training. For details, see Anthropic's Privacy Center at privacy.claude.com.

3.3 EEOC Compliance Enforcement

All screening criteria submitted by users are validated against Equal Employment Opportunity Commission (EEOC) protected characteristics before processing begins. Criteria that target protected classes are automatically blocked, and these events are logged for audit purposes.

3.4 What We Do Not Do

We do not sell candidate data to third parties.
We do not use candidate data for advertising or marketing purposes.
We do not use candidate data to train AI models.
We do not make hiring decisions. JAN provides screening scores and analysis to assist human decision-makers.

4. Data Retention and Deletion

4.1 Standard Screening

Standard JAN screening results exist only within your active browser session. Once you close or navigate away from the results page, all screening results and parsed resume content are permanently gone and cannot be recovered. No candidate data from standard screenings is stored in our database. During an active session, you may download, email, or print results for your own records before leaving the page.

4.2 Enterprise Screening

Enterprise screening results, uploaded resume files, and secure access tokens are retained for 14 days from the date of submission. After 14 days, all associated candidate data is automatically and permanently deleted. Secure result links expire after 14 days and cannot be reactivated.

4.3 Account Data

User account information (name and email) is retained as long as your account is active. You may request deletion of your account and associated data by contacting us at info@lopatkacs.com.

4.4 Audit Logs

Records of blocked discriminatory criteria submissions and terms acceptance logs are retained for compliance and audit purposes.

4.5 Server Logs

Our hosting provider (Render) maintains standard server logs that may include IP addresses, request timestamps, and request paths. These logs are managed by Render in accordance with their privacy policy and are used for operational and debugging purposes.

5. Cookies and Tracking Technologies

JAN uses cookies and similar technologies strictly for essential platform functionality:

Authentication Cookies — Set by our authentication provider (Clerk) to maintain your logged-in session. These are strictly necessary for the Service to function.
Session Cookies — Used to maintain your session state while using the Service.

We do not use advertising cookies, analytics tracking cookies, or any third-party tracking pixels. We do not track your activity across other websites.

6. Data Security

We implement the following measures to protect data processed through our platform:

Authentication — All access requires authenticated sessions via Clerk.
Access Controls — Users can only access their own screening jobs and results.
Secure Links — Enterprise results shared via email use time-limited, unique tokens that require both a valid token and authenticated session to access.
Encryption in Transit — All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
Blind Screening — Personally identifiable information, including names and school names, is removed from resumes before AI evaluation to prevent demographic bias.
Input Sanitization — User inputs and resume contents are sanitized to prevent injection attacks. Resume content identified as containing prompt injection attempts is stripped and flagged.
Automated Data Deletion — Enterprise data is automatically purged after the 14-day retention period.

7. Service Providers

We use the following service providers to operate JAN:

Provider	Purpose	Data Involved
Anthropic	AI-powered resume evaluation	Anonymized resume text (PII removed)
Clerk	User authentication	User name and email
SendGrid	Email delivery (Enterprise)	User email address, results links
Render	Application hosting and database	All Service data in transit and at rest

We require that our service providers protect data in accordance with their respective privacy policies and applicable law. We do not permit service providers to use candidate data for their own purposes.

8. Automated Employment Decision Tool (AEDT) Disclosure

JAN is an automated employment decision tool as defined under applicable laws, including New York City Local Law 144 (the "AEDT Law"). JAN uses artificial intelligence to score, rank, and classify candidates based on user-defined screening criteria.

JAN is a screening assistance tool. It does not make employment decisions independently.

Employers and recruiters using JAN are responsible for:

Ensuring compliance with all applicable AEDT laws in their jurisdiction, including bias audit requirements and candidate notification obligations.
Conducting or commissioning an independent bias audit before using JAN for hiring decisions in jurisdictions where required, such as New York City under Local Law 144.
Making final hiring decisions with appropriate human review and oversight.
Providing required notices to candidates about the use of automated screening tools, as required by applicable law.

We are committed to supporting our customers' compliance efforts. We can provide screening data for independent bias audit purposes upon request. Please contact us at info@lopatkacs.com to discuss bias audit data requests.

9. Your Rights

9.1 All Users

Depending on your jurisdiction, you may have the right to:

Access — Request information about what data we hold about you.
Correction — Request correction of inaccurate data.
Deletion — Request deletion of your data.
Data Portability — Request your data in a portable format.

To exercise any of these rights, contact us at info@lopatkacs.com. We will respond within 30 days.

9.2 California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at info@lopatkacs.com.

9.3 Candidate Rights

If you are a candidate whose resume was processed through JAN, please contact the employer or recruiter who submitted your resume. As a data processor acting on behalf of our users (the data controllers), we will work with them to fulfill your request.

10. Children's Privacy

JAN is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

11. International Data Transfers

JAN is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last Updated" date at the top indicates when it was most recently revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

Lopatka Consulting Services LLC
Email: info@lopatkacs.com
Location: New York, NY