Security

Last updated 2 October 2026

We design rightaiforthejob.com to minimize the amount of personal information we need to store. Account data, saved tool lists and feedback about whether a tool worked are kept separate from what you type into the tool finder and the files you attach to it, which are processed locally in your browser and never uploaded. Try & compare is the one place on the site that sends what you give it, and it sends it to the AI companies you tick rather than to us; the Privacy Policy sets out the difference. Feedback is a tool identifier and a yes or no; the question that prompted the recommendation stays in the page and is never stored beside the answer. The optional note is the one field we keep as typed, so the interface says so before you type and the Privacy Policy says what to leave out of it.

Data minimization

We collect and store only the information reasonably necessary to provide account functionality and related services. For an account that is an email address, an account identifier, the dates the account was created and last changed, the names of the lists you make, and the identifier of each tool you save. There is no field for a prompt, a note, a file, a task, or a page you visited, so there is nowhere for any of those to be stored even by mistake.

Local file processing

Features identified as using local processing handle task inputs and uploaded files inside your browser rather than uploading those materials to rightaiforthejob.com's servers. The matching box opens each attached file and measures it — pages, slides, sheets, rows, words, pixel dimensions, the presence of an error trace — and uses those counts to pick which tools to recommend. The file and its contents stay on your device; only you ever see them. None of it is sent to the account system.

Account security

We use reasonable administrative, technical, and organizational safeguards designed to protect account information against unauthorized access, alteration, disclosure, or destruction. In practice that means the following, each of which is implemented rather than aspirational.

Authentication is handled by a provider. Sign-in is performed by Supabase Auth, using your email address and a password, or your Google account. Passwords are handled and stored by Supabase Auth; this site’s own servers never see, handle, or store one, and a password reset is a link sent to your email address.

Connections are encrypted. The Site is served over HTTPS only, with HTTP Strict Transport Security, so browsers refuse to load it over an unencrypted connection.

Authorization is enforced in the database. Every table holding account data has row-level security enabled, with policies that restrict each row to the account that owns it. Those checks run in the database rather than in the page, so they apply to any request, however it is made.

The privileged key is not in the browser. The key that can bypass those policies is held only by a server-side function used for account deletion. It is never sent to a browser and is not present in any file this Site publishes.

The page is locked down. A Content-Security-Policy allows styles only from this domain and by hash, and scripts only from this domain, by hash, and from the Google hosts that serve the measurement tags — which are the only outside hosts named anywhere in the policy, and are named in the narrowest directives that work rather than across the board. There is no blanket permission for inline script, which is what stops injected code from running if it ever reached a page.

Third-party infrastructure

rightaiforthejob.com may rely on established infrastructure, authentication, hosting, and database providers. These providers process information according to their respective roles in providing the service. The Privacy Policy names them.

No absolute guarantee

No method of internet transmission or electronic storage can be guaranteed to be completely secure. While we work to protect information, we cannot guarantee absolute security.

Report a security issue

To report a potential security issue, contact support@rightaiforthejob.com. We do not run a paid bug bounty, and we will not threaten anyone who reports a genuine issue in good faith.