Answering your GDPR question: we use cookie-less analytics with https://usefathom.com/ and we do not pass user data to the backend endpoints, which you can verify by viewing the network calls. When you upload the ZIP or CSV the extraction/parsing happens entirely client-side, and then we use auto-generated IDs to map connection data from the JSearch API response to the client-side stored connection data.
That's good, you might want to write that somewhere - even just to assuage people's worries in general.
Yep, done at https://jobsbyreferral.com/privacy.