Privacy

In short

Openbound helps you find jobs and understand employers' sponsorship history. To do that it keeps a small profile you give it. We do not sell personal data, we do not share it for advertising, and we never show your work-authorization answers to employers.

What we collect

Your account

Your email address and an account identifier. If you sign in with Google, Google gives us your email address, your name and a link to your profile picture — never your password. If you use an email sign-in link, we store your email address rather than a password. When you continue through sign-in, we record the Terms of Service version, the time acceptance is recorded, and the Privacy Policy version acknowledged in your account metadata.

Your search profile

What you tell us during setup and in your profile: target roles, preferred locations, a minimum salary, how flexible you are about role changes, your current U.S. work-authorization status (F-1, OPT, STEM OPT, H-1B, “Other” or “Not sure”), and whether you need visa sponsorship now or in the future. We do not ask for, or keep, any further detail about your immigration situation.

Your resume, if you upload one

The file, stored privately with your account. When you upload it we check that its text can be read and show you how many characters we found; we do not keep the text, and Openbound does not use your resume to rank jobs. You can delete it at any time from your profile.

What you save and do

Jobs you save, and a record of actions in the product linked to your account: signing up, finishing setup, viewing the job list or a job, saving or unsaving, clicking Apply, changing filters (which job classifications you filtered on — never the words you searched for), and sharing. At sign-up we record how you first arrived: the type of page, its path, the referring website and any campaign (UTM) tags in the link.

Reports you send

If you use Report a problem, what you type into it, including an email address if you choose to give one. We do not record your IP address or account with a report.

Analytics, cookies and browser storage

We use Vercel Web Analytics to count page views and a few actions (for example which kind of page you landed on, whether you shared a page or used the sponsorship checker). Vercel describes it as working without cookies and without identifying individual visitors. Page addresses sent to it keep only the path and campaign tags, never the words you searched for.

We use PostHog for product analytics: to learn which pages and features help people find jobs and where they get stuck. It records the pages you view (their paths, without search words), and these actions: searching (whether you used a keyword and which filters, never the words), applying a filter, opening a job or company page, submitting a company lookup (never its text), selecting a company result, viewing sponsorship evidence and a company’s jobs list, clicking through to company jobs, saving a job, clicking Apply, starting and completing sign-up, finishing setup, using the sponsorship checker (whether you checked a company or a job link and whether it found a match, never what you entered), saving, changing or deleting a saved search (its alert frequency, never its words or name), arriving from a job alert link, and clicking Report a problem. Events about a job carry that job's own classifications (for example its visa sponsorship label and whether it lists a salary), and every event carries the site or campaign you arrived from. If you are signed in, events are linked to your account's internal identifier, not your email address. PostHog never receives your work-authorization answers, your resume, your email address, what you type into forms, or the text of job postings.

PostHog also records sessions — how pages were scrolled and clicked — so we can see where the site is confusing. Recordings mask everything typed into any field, hide job-posting text and your initials, and are not made at all on the sign-in, setup, profile, report and admin pages. If your browser sends Do Not Track or Global Privacy Control, PostHog is not loaded for you.

Cookies and storage: sign-in cookies that keep you logged in; one first-party cookie, ob_attrib, kept for 30 days, which remembers the page, referring site and campaign tags you first arrived with so a later sign-up can be attributed; PostHog's first-party cookie and local storage entry, which hold a random identifier for your browser; and, for ten minutes after you sign up, ob_signup_done, which lets that sign-up be counted once. Openbound's own staff and test browsers carry an ob_internal marker so their visits are left out of the numbers, and the team's own accounts and networks are left out when the numbers are read. We use no advertising cookies or ad networks. Your browser also keeps some data locally so pages load quickly or work offline, such as your most recent job list and which jobs you saved.

Technical logs

Our hosting, database and analytics providers process technical information such as IP addresses, device and browser information, and request logs to operate, measure and secure the service.

Saved searches and job alerts

When you save a search we store its filters (keyword, places, sponsorship and other filters) and the name you give it; a search saved from your personalized feed also keeps the target roles it was matching. Nothing else from your profile is stored with it, and it is never shared with anyone.

Job alerts are off unless you turn them on for a search. When they are on, Openbound emails you, at most daily (or weekly if you choose), the newly discovered jobs that match it: each job's title, employer, location, pay if listed, and its visa and green card sponsorship readings with the employer's filing record. Alerts never include your profile answers or the text of job postings. We record whether each alert was sent and whether a link in it was opened on the site, to avoid repeating jobs and to know if alerts are useful; we do not track whether you open the email.

Every alert has a link to stop alerts for that search and a link to stop all job alert emails, neither of which needs you to sign in. You can also pause, change or delete each search in Saved, and turn job alert email off in your profile.

Your work-authorization answers

They are used for two things: to tell you when a posting's stated requirements (such as U.S. citizenship or a security clearance) would rule you out, and to flag postings that say they cannot sponsor when you have told us you need sponsorship. They are stored in your profile, you can change them in your profile, and they are deleted with your account.

They are never sold, never shown to employers, never placed in page addresses, never sent to analytics, and never used for advertising.

How we use information

We use account information to sign you in and secure your account; your preferences to personalize job results; saved jobs and searches to maintain your lists and deliver alerts you request; usage and technical information to understand performance, improve Openbound and prevent abuse; and reports or messages to respond to you and correct problems. If you contact us by email, we process your address, message and any information you choose to include to handle your request.

Who processes it

• Supabase — database, sign-in and file storage (including resumes).
• Vercel — hosting and Web Analytics.
• PostHog — product analytics and session recordings, as described above.
• Google — only if you choose to sign in with Google.
• Resend — delivers job alert emails, only if you turn alerts on for a saved search. It receives your email address and the alert's contents.

These providers process data on our behalf to run Openbound and may do so in the United States or other countries where they operate. Openbound sends you email to deliver sign-in links, through its sign-in provider, and job alerts you have turned on. It sends no marketing email.

What we do not do

We do not sell personal data or share it for cross-context advertising. We do not give employers access to your profile, resume or saved jobs, and Openbound does not submit applications for you — you apply on the employer's own site.

The job and sponsorship information Openbound shows is about employers: postings from employers' careers sites and job platforms, and U.S. Department of Labor and USCIS disclosure data summarised by employer, role and location. Openbound does not store the names of individual workers from those filings.

How long we keep it

Your account, sign-in acceptance metadata, profile, resume file, saved jobs and saved searches are kept until you delete them or ask us to delete your account. Records of what you do in the product are kept for 90 days; after that only daily totals remain, with nothing that links them to you. PostHog keeps session recordings for 30 days and analytics events for up to a year. Reports and communications are kept while we handle them and afterwards as a record of what was requested and decided. Technical logs are kept by our providers for their standard periods.

Seeing, correcting and deleting your data

You can change your profile and delete your resume yourself in your profile. To get a copy of your data, correct something you cannot edit, or delete your account and everything linked to it, write to hello@theopenbound.com. We will confirm the request comes from the account's email address before acting on it.

Security

Data is sent over HTTPS. Account data is stored with access rules that let each signed-in person read only their own records; resumes are kept in private storage; reports and administrative data are readable only by Openbound's administrators through the server. No system is perfectly secure.

Age

Openbound is for people aged 18 or over, and is not directed to anyone younger. If you believe someone under 18 has given us personal data, contact us and we will delete it.

Changes and contact

We will update the date above when this policy changes and provide notice through the service or by email for material changes. Questions or requests: hello@theopenbound.com.