Privacy & security model
FOX3 stores your working files locally. This page describes the app and the external services it uses. It remains a reference for existing testers after the end of beta.
What stays on your device
All of your data lives in a single folder on your computer (Windows:
%LOCALAPPDATA%\JobScout, or a location you choose during setup):
- Your interviewed profile (
profile.json) - The scored-listings database and run history (
jobs.db) - Generated digest reports (HTML)
- Your settings and preference history
Your API key is stored in the operating system's secure credential store (Windows Credential Manager / macOS Keychain) — used to authenticate requests sent to Anthropic over HTTPS. The app is designed to exclude secrets from logs and diagnostic exports.
Network activity
The app contacts the following services. Web pages and installers may also load resources from their providers' infrastructure.
| Destination | What is sent | When |
|---|---|---|
| Austrian job boards default AMS, StepStone.at, willhaben, karriere.at |
Your search keywords and region (as URL queries). Not your profile. | Each scheduled run, to fetch listings. |
Anthropic API (api.anthropic.com) |
Your profile and the job listings, to interview you and score/research roles. | During the interview and each run. |
| Job listing and employer websites | Page requests to read listing and company information for employer research. | During employer research, when budget permits. |
| Discord webhook optional | Your digest, only if you configured Discord delivery. | After a run, if enabled. |
| Your email provider (SMTP) optional | Your digest, only if you configured email delivery. | After a run, if enabled. |
| FOX3 version manifest (this site) | An unauthenticated request without an app identifier, profile payload, or version-in-URL. The hosting provider still receives ordinary connection metadata, including your IP address. | On start and before each run. |
FOX3 does not automatically upload your local profile or reports to an operator-run application backend. This website and its gated download use Cloudflare; the access check uses your invited email address and a one-time PIN. Installation downloads Python, packages, and Chromium from their providers. Optional delivery services receive the content you choose to send.
Optional sources you can turn on (off by default)
These additional adapters are disabled by default:
- Indeed (at.indeed.com) — an extra job board, off by default.
- LinkedIn — experimental, requires an explicit double confirmation (see below).
- Company career pages — the dedicated adapter is still a stub. Employer research can already visit company websites separately.
The local support bundle (fox3 diagnose) writes a scrubbed zip to your disk for
you to share if you ask for help — it is never uploaded automatically, and it strips secrets and
webhook URLs.
The AI key & your data with Anthropic
FOX3 talks to Claude (Anthropic's /v1/messages API, model Claude Sonnet 4.6)
using your own key (BYOK) or an existing sponsored beta key if it remains active.
Either way:
- FOX3 sends the conversation or profile/listing text needed for each AI feature. API calls do not create a FOX3-hosted account or stored conversation.
- Anthropic states that API data is not used for training unless your agreement provides otherwise. See Anthropic's API data policy.
- Anthropic's standard API retention is up to 30 days, with exceptions for agreements, certain services, policy enforcement, and legal requirements. See its retention policy.
- Sponsored beta keys were provisioned per tester. Continued availability after beta depends on whether the key remains active; BYOK uses your own account and its settings.
With a sponsored key, the operator administers and funds the workspace. The app sends AI requests directly to Anthropic, subject to the provider's data policies and the workspace's settings.
The LinkedIn adapter experimental, off by default
An optional LinkedIn source exists but is disabled unless you explicitly turn it on with a double confirmation. Scraping LinkedIn may violate its terms; enabling it is your choice and your risk. Leave it off and FOX3 uses only the public Austrian boards above.
Updates are signed
FOX3 checks for updates by fetching a small signed file from this site. The file is cryptographically signed (Ed25519) and your app verifies the signature against a key built into it — so a tampered or forged "update" is rejected. FOX3 never auto-installs; it only tells you a newer version exists. To take it, you download a fresh installer from the download page and run it yourself (re-running your current installer does not upgrade you). Your data survives every update.
Draft for the closed beta. A formal Terms of Service and Privacy Policy accompany the public release; this page is the plain-language version of the same commitments. Privacy questions: [email protected].