Legal
Privacy policy
Combucha is a job board for AI-engineering roles with a conversational concierge. This page says what we collect, who processes it for us, how long we keep it, and how you take it with you or delete it.
What we collect
- Browsing the board needs no account. We log requests to run and protect the site, and we count anonymous chat turns per IP address to enforce limits.
- What you type in the board’s search box is sent to an AI model to turn it into filters. We keep the filters we read from it, including any words we could not apply, for 30 days, with email addresses and phone numbers removed, and our tracing service gets a copy with the same details removed.
- Your account: your email address, your time zone, and the settings you choose.
- Your preference card: the roles, places, pay floor and exclusions you or the concierge record, with a history of every change and who made it.
- Your activity: saved roles, application stages, alerts, thumbs up or down, and your conversation with the concierge, including email replies.
- Imports you start: a GitHub username, a personal site or a resume. We keep a short summary, not the file.
We do not use LinkedIn data of any kind, and we never apply for jobs or message employers for you.
Who processes it
These providers process data on our behalf, only for the purpose stated.
| Processor | Purpose | Data |
|---|---|---|
| Anthropic and OpenAI | Language model providers that run the concierge and the matching agents. | Your chat messages, your preference card, a short profile summary and posting text, as each request needs. Not your email address. |
| Lemma | Monitors the concierge and the other agents for failures. | Records of agent runs, with email addresses, phone numbers, codes and tokens masked first. You appear only under a pseudonymous id. |
| Postmark | Sends sign-in links, alerts and digests, and receives your replies to them. | Your email address and the content of those emails. |
| Vercel | Hosts the website. | Requests to the site, including IP addresses, as part of serving it. |
| Fly.io | Hosts the background worker that checks job boards and sends alerts. | The same data the worker processes for those jobs. |
| Neon | Hosts the Postgres database. | Everything Combucha stores, listed below. |
| Cloudflare | R2 stores data exports and uploaded resumes; Turnstile checks that a sign-in or anonymous chat comes from a person. | Export files and resume files for the periods below; browser signals Turnstile needs for its check. |
| Stripe (from v1) | Takes payment from employers who feature a listing. Job seekers never pay. | Billing details, entered on Stripe’s own page. Card numbers never reach Combucha. |
What Lemma sees
Lemma receives records of how the agents behaved so failures can be caught and fixed. Before any record leaves Combucha, email addresses, phone numbers, street addresses, deletion codes, sign-in and reply tokens, and URLs that carry tokens are replaced with placeholders. You are identified there only by a pseudonymous id derived from your account, never by your email.
How long we keep it
| Data | Kept |
|---|---|
| Account, preference card and its history, shortlist, alerts, feedback | Until you delete your account |
| Messages and the agent's tool calls | 180 days; a running summary keeps context after that |
| Uploaded resume file | 24 hours; only a short profile summary is kept |
| Data exports | 7 days, behind a link that expires |
| Posts collected from public sources | 90 days |
| Agent run records at Lemma | Lemma's retention period; deleted when you delete your account |
Cookies
Combucha sets only cookies it needs to work. There are no analytics or advertising cookies.
- A sign-in session cookie, for 30 days from sign-in.
- An anonymous chat session cookie, so the concierge remembers the conversation for up to a day.
- A theme cookie, only if you pick light or dark, so the site remembers it.
Your choices
- Export: ask the concierge or use settings to get one file with everything tied to your account, emailed as a link that expires after 7 days.
- Delete: delete your account from settings or by asking the concierge. A code sent to your email confirms it; your data is then removed, including the agent records at Lemma.
- Correct: edit your preference card at any time; every edit is recorded in its history.
- Talk to a person: ask the concierge to hand you over to a human.
Changes and contact
We will post changes here with the date they take effect. The operator’s legal name and contact address will be added before launch. See also the terms of use.