JAN (Job Applicant Navigator) — Lopatka Consulting Services LLC
Last Updated: August 17, 2026
JAN (Job Applicant Navigator) is a resume screening tool operated by Lopatka Consulting Services LLC ("we," "us," or "our"). This Privacy Policy describes how we collect, use, store, and protect information when you use our platform (the "Service").
We are committed to protecting the privacy of both our users (employers, recruiters, and hiring managers) and the candidates whose resumes are processed through our platform.
When you create an account, we collect:
When you upload resumes for screening, the Service temporarily processes the contents of those resumes, which may include candidate names, professional experience, education, skills, qualifications, and contact information.
Where a candidate's email address appears in their resume, we extract and store that address as a separate field alongside the screening result. This value is used solely to allow you (or an authorized software agent acting on your behalf — see Section 3.4) to match a screened candidate to the corresponding record in your applicant tracking system. The candidate email address is never displayed in the JAN interface and never appears in any report we generate. It is deleted on the same schedule as the rest of the screening result (Section 4).
We collect the job titles, screening criteria, exclusion criteria, and preference settings you define for each screening job.
We collect usage information including the number of resumes screened, screening timestamps, and feature usage patterns.
When you accept our Terms of Service, Privacy Policy, and Subscription Agreement, we record the date and time of acceptance, the version accepted, your account identifier, and your IP address for compliance purposes.
If you voluntarily subscribe to our blog or newsletter through our public website, we collect the email address you provide. You do not need a JAN account to subscribe, and subscribing does not create one.
We use this address only to send you content we publish and occasional updates about JAN. We do not sell, rent, or share newsletter email addresses with third parties. Every email we send includes an unsubscribe link, and you may unsubscribe at any time. Unsubscribing removes you from all future marketing emails but does not affect any JAN account you may separately hold.
Newsletter subscriber addresses are stored with our email delivery provider (see Section 7) and are retained until you unsubscribe or request deletion.
On our public marketing website and on public pages of the JAN application (such as the pricing page), we use Google Analytics to understand how visitors find and use those pages. See Section 5 for details on what this collects and how to opt out. Google Analytics is never used on pages where you upload resumes, run screenings, or review candidate results.
Candidate resumes are processed using our proprietary blind screening methodology. Before AI-powered evaluation, personally identifiable information — including candidate names, email addresses, phone numbers, mailing addresses, and school names — is removed from the resume text so that the AI model evaluates candidates based solely on qualifications, experience, and job-relevant criteria. Candidate identity is reattached to results only after scoring is complete.
Anonymized resume text (with personally identifiable information removed) is sent to Anthropic's Claude API for AI-powered evaluation. Anthropic's data retention policy for API customers automatically deletes inputs and outputs within 30 days. API data is not used for model training. For details, see Anthropic's Privacy Center at privacy.claude.com.
All screening criteria submitted by users are validated against Equal Employment Opportunity Commission (EEOC) protected characteristics before processing begins. Criteria that target protected classes are automatically blocked, and these events are logged for audit purposes.
JAN Enterprise supports connections from third-party AI assistants and software agents (for example, an AI assistant you use in your own workplace) acting on your behalf. This access is optional, is available only on Enterprise accounts, and is never enabled by default. You initiate it, and you authorize it explicitly through our authentication provider's consent screen.
An authorized agent connected to your account can:
An agent cannot start a screening, upload resumes, change your subscription, or access any account other than the one that authorized it. All screening criteria submitted by an agent are validated against the same EEOC protections described in Section 3.3, at the time they are saved.
An agent accesses only data already belonging to your account. Because the agent is a third-party service you have chosen, the data it retrieves is then subject to that provider's own privacy practices, which are outside our control. You are responsible for the agents you authorize and for the confidentiality obligations that apply to screening results. You may revoke an agent's access at any time, and revocation takes effect immediately.
Every action an agent takes in your account is recorded in an audit log. See Section 4.4.
Standard screening results, uploaded resume files, and parsed resume content are retained for 24 hours from completion of screening. During this 24-hour window, the parsed resume text is kept so that you can re-screen the same batch against revised criteria without uploading the files again. After 24 hours, all candidate data from the screening is automatically and permanently deleted — including uploaded resume files, parsed resume text, candidate names, candidate email addresses, scores, and evidence. Screening results are only available in your active browser session and cannot be retrieved once you close or navigate away from the results page.
We retain a record of the screening itself after that point, containing no candidate data: the job title you assigned, the number of resumes processed, the criteria you defined, aggregate result counts, and processing timestamps. We keep this record so that your screening history, usage, and billing remain accurate and auditable. It contains no information about any individual candidate.
Enterprise screening results, uploaded resume files, and secure access tokens are retained for 14 days from the date of submission. After 14 days, all associated candidate data is automatically and permanently deleted. Secure result links expire after 14 days and cannot be reactivated.
Where you have created a shortlist from a set of screening results, the shortlist selection (which contains candidate names) is deleted once the associated results are no longer accessible and the 14-day retention period has passed.
User account information (name and email) is retained as long as your account is active. You may request deletion of your account and associated data by contacting us at support@lopatkacs.com.
We maintain the following audit records for compliance purposes. These records are retained for as long as necessary for security, accountability, and compliance purposes, and are not subject to the deletion schedules described in Sections 4.1 and 4.2. We periodically review them and delete records that are no longer needed. None of them contain candidate data.
Our hosting provider (Render) maintains standard server logs that may include IP addresses, request timestamps, and request paths. These logs are managed by Render in accordance with their privacy policy and are used for operational and debugging purposes.
We treat pages where you screen resumes differently from our public pages. Please read both parts below.
On the pages where you upload resumes, run screenings, and review candidate results, we use cookies strictly for essential platform functionality:
We do not use advertising cookies or analytics cookies on any page where you upload resumes, run screenings, or review candidate results. No candidate data is ever shared with any analytics provider.
Our public marketing website and public pages of the JAN application (such as the pricing page) use Google Analytics to measure how visitors find and use those pages — for example, which pages are viewed and which sources referred visitors. Google Analytics sets cookies and collects information including your IP address, browser and device type, pages viewed, and approximate geographic region. We use this only for marketing purposes and to understand site performance.
We do not use advertising cookies, remarketing pixels, or cross-site advertising trackers, and we do not sell any information collected through analytics.
You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on, or by blocking analytics cookies in your browser settings. Google's own handling of this data is governed by Google's Privacy Policy.
Contact forms on our marketing website are processed by a third-party form provider (see Section 7). Information you enter into those forms — such as your name, email address, company, and message — is transmitted to and stored by that provider in order to deliver your message to us.
We implement the following measures to protect data processed through our platform:
We use the following service providers to operate JAN:
| Provider | Purpose | Data Involved |
|---|---|---|
| Anthropic | AI-powered resume evaluation | Anonymized resume text (PII removed) |
| Clerk | User authentication | User name and email |
| Resend | Email delivery (Enterprise notifications and newsletter) | User email address, results links, newsletter subscriber addresses |
| Render | Application hosting and database | All Service data in transit and at rest |
| Amazon Web Services (AWS) | Secure staging storage for Enterprise resume batches delivered from an applicant tracking system | Resume files, deleted after processing |
| Stripe | Subscription payment processing | Billing name, email, and payment details (we never store card numbers) |
| Google Analytics | Analytics on our marketing website and public application pages only — never on screening pages | Website visitor data (see Section 5.2). No candidate data. |
| Google Search Console | Aggregate search performance for our public website (search queries, impressions, clicks, average position). An authorized SEO tool accesses this data through the same connection. | Aggregate search data only. No candidate data, no account data. |
| Formspree | Contact form delivery on our marketing website | Name, email, company, and message you submit through a contact form |
We require that our service providers protect data in accordance with their respective privacy policies and applicable law. We do not permit service providers to use candidate data for their own purposes.
JAN is an automated employment decision tool as defined under applicable laws, including New York City Local Law 144 (the "AEDT Law"). JAN uses artificial intelligence to score, rank, and classify candidates based on user-defined screening criteria.
JAN is a screening assistance tool. It does not make employment decisions independently.
Employers and recruiters using JAN are responsible for:
We are committed to supporting our customers' compliance efforts. We can provide screening data for independent bias audit purposes upon request. Please contact us at support@lopatkacs.com to discuss bias audit data requests.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, email us at support@lopatkacs.com from the email address associated with your JAN account, stating which right you wish to exercise (access, correction, deletion, or data portability) and what information your request concerns. Email is our designated request method as an exclusively online business.
To verify your request, we match the email address you write from against our account records, and we may ask you to confirm details such as your name, company, or recent account activity before acting. If we cannot verify your identity, we will tell you what additional information is needed. We respond to verified requests within 30 days.
If you subscribe to our newsletter, you may unsubscribe at any time using the link in any email we send, or by contacting us at support@lopatkacs.com. We will remove your address from all future marketing emails.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to: know what personal information we collect, use, and disclose; delete your personal information; correct inaccurate personal information; opt out of the sale or sharing of your personal information; limit the use and disclosure of sensitive personal information; and not be discriminated against for exercising any of these rights.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes other than providing the Service. To exercise your rights, use the request method described in Section 9.1. If you are a job candidate whose resume was processed through JAN, we act as a service provider to the employer or recruiter who submitted your resume — see Section 9.4.
If you are a candidate whose resume was processed through JAN, please contact the employer or recruiter who submitted your resume. As a data processor acting on behalf of our users (the data controllers), we will work with them to fulfill your request. If we receive a request directly from a candidate, we will either act on the responsible employer’s behalf in responding or inform the candidate that the request cannot be acted on because it was sent to us as a service provider, and direct them to the employer.
JAN is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
JAN is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last Updated" date at the top indicates when it was most recently revised. Continued use of the Service after changes constitutes acceptance of the updated policy.
Lopatka Consulting Services LLC
Email: support@lopatkacs.com
Location: New York, NY