This Privacy Policy explains how Security Minded Solutions, LLC (“SecurityMinded Solutions”, “we”, “us”) collects, uses, stores and shares personal information in connection with JDFit (the “Service”), including the website at www.jdfit.io and its waitlist. JDFit is a product of SecurityMinded Solutions.
JDFit has not launched yet. Today, the only personal information we collect is what you enter in the waitlist form, plus the technical data described below. We do not collect resumes, job descriptions or evaluations today. Section 8 explains what will change when the Service launches, so you can decide now whether you want to be on the list.
Policy version: 2026-09-22.
1. What we collect today
When you join the waitlist, we collect:
- your email address (required);
- your field of work (required);
- whether you are looking for a job right now (optional);
- your confirmation that you are 16 or older and agree to this policy.
We store these with the time you signed up, the time you last submitted the form, the time you gave consent, the version of this policy you agreed to, any campaign tags in the link you arrived from (utm_source, utm_medium, utm_campaign), the host name of the site that referred you (for example news.example.com, never the full address), and the reCAPTCHA score for the submission.
We do not store your IP address with your sign-up. If you submit the form again with the same email, we only update the “last submitted” time. We never overwrite what you gave us the first time.
Server and security logs. Like any website, our load balancer and its security layer (Google Cloud Armor) log each request, including the IP address, browser user agent and requested page. These logs are used to keep the site running and to stop abuse, and are kept for 30 days. Application logs identify a sign-up by a short one-way hash, never by email address.
2. reCAPTCHA and cookies
To keep automated sign-ups out, the waitlist form uses Google reCAPTCHA Enterprise. It loads only when the form section scrolls into view, not on the rest of the page. reCAPTCHA collects device and interaction signals (such as browser details and how the page is used) and may set cookies on the form page. Google uses this to produce a risk score that we store with your sign-up. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.
We set no cookies of our own, and this site runs no analytics, advertising or tracking scripts. We count visits from our own server logs, in aggregate.
3. How we use it
- to email you about JDFit, including when it is ready for you to use;
- to invite you to early access, if you are selected;
- to understand, in aggregate, which fields of work and which links bring people to the waitlist;
- to protect the form and the site from spam, fraud and abuse.
When someone joins, our team gets a short internal notification with the field of work, whether they are looking for a job, and a short hash. It never contains the email address.
4. Legal basis
We process waitlist information on the basis of your consent, which you give by checking the consent box. You can withdraw it at any time by emailing privacy@securityminded.io; we will then delete your sign-up as described in section 7.
5. Who processes it for us
We share personal information only with the service providers we need to run JDFit:
- Google LLC (Google Cloud): hosting, the database that stores sign-ups (Firestore), logging, and reCAPTCHA Enterprise.
- Cloudflare, Inc.: DNS only. Cloudflare answers lookups for the jdfit.io domain name; it does not proxy or see traffic to the site.
- Slack Technologies, LLC: internal sign-up notifications, without your email address.
Before the Service launches, we will add the provider that runs the analysis to this list.
We may disclose personal information if the law requires it, for example in response to a valid court order.
6. We do not sell your data
We do not sell personal information, and we do not share it for advertising. We do not use it to build advertising audiences.
7. Deleting your data and your other rights
To be removed from the waitlist, or to ask what we hold about you, email privacy@securityminded.io from the address you signed up with. We complete deletion within 30 days, including backups: our database backups and point-in-time recovery are kept for 7 days or less, so a deleted sign-up leaves no copy behind.
Depending on where you live, you may also have the right to access, correct or port your data, to object to or restrict processing, and to withdraw consent. Email privacy@securityminded.io and we will respond within 30 days. You also have the right to complain to your local data protection authority.
8. When JDFit launches: how we use evaluations
JDFit is being built to compare a resume you provide with a job description and produce an evaluation: which requirements you meet, which are partial, which are missing or unclear, and the resume lines behind each call. When the Service launches:
- What we will keep: the resumes you provide, the job descriptions you evaluate, and the evaluation results (together, “evaluation data”).
- How long: until you delete your account.
- Why: to run the Service, so you can come back to your evaluations, and to improve and test how JDFit scores and analyzes. That includes authorized members of the JDFit team reviewing evaluation data, under access controls, only to see how scoring and analysis can be made better, and re-running past evaluations to test changes.
- We do not use evaluation data to train AI models, and neither does the provider that runs the analysis for us.
- We will never sell evaluation data, and JDFit will never write or rewrite your resume.
- Deleting your account deletes all of it: your resumes, job descriptions and evaluations, including any copies we keep to improve the Service, within 30 days, including backups.
9. How long we keep it
- Waitlist sign-ups: deleted at the earlier of 12 months after JDFit launches or 18 months after you signed up, unless you create an account or ask us to delete them sooner.
- Evaluation data (after launch): until you delete your account, then deleted within 30 days, including backups.
- Load balancer and security logs (which include IP addresses): 30 days.
- Database backups: 7 days or less.
10. Age
You must be 16 or older to join the waitlist or use JDFit. We do not knowingly collect personal information from anyone under 16; if we learn we have, we delete it.
11. Security
Data is encrypted in transit (TLS 1.2 or later) and at rest. Access to the waitlist database is limited to the service that writes it and the people who operate JDFit. Sign-ups are keyed by a one-way hash of the email address rather than the address itself.
12. Where data is stored
JDFit is operated from the United States and data is stored in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.
13. Changes
We will update this policy before JDFit launches, and whenever our practices change. Each version has a version date, and your sign-up records which version you agreed to. If a change materially affects information we already hold, we will email you before it takes effect.
14. Contact
Privacy questions, deletion requests and anything else about your data: privacy@securityminded.io.