Privacy Policy
Last updated: August 2026
The short version
- You upload your CV. It is stored on our servers — that is how the matching works.
- To score jobs, parts of your CV and the job advert are sent to our AI providers, OpenAI and Anthropic.
- We never send your CV to employers or recruiters. The scoring works for you, not on you. Nobody is screening you with it.
- Your match score is produced by a fixed calculation, not by an AI deciding your worth.
- Guest CVs are deleted after 24 hours. You can delete yours at any time.
- We don't sell your data, and there are no advertising or tracking pixels anywhere in the product or in our emails.
The rest of this page is the detail behind those points.
1. Who we are
[Company legal name] ("jobctl", "we", "us"), a company registered in [country of registration] under company number [registration number], of [registered address], is the data controller for the personal data described here.
Questions, requests, or complaints: [email protected]. We answer every request ourselves — there is no separate department to be routed through.
If you are in the UK or EEA and you are not satisfied with our response, you have the right to complain to your local supervisory authority.
2. What we collect
You give us
| Account | email address, password (stored only as a secure one-way hash — never in readable form), display name, phone number, profile photo, country |
| Sign in with Google | if you use it: your Google account identifier, email address and first name. We never receive your Google password |
| Two-factor authentication | your authenticator secret, encrypted at rest, and single-use recovery codes stored only as hashes |
| Your CV | the file itself, its filename, and the text we extract from it — including the skills, job titles, years of experience and the contact details |
| Searches | the roles, locations and filters you search for |
| Your job tracking | which jobs you mark as applied, interviewing, offer or rejected, and which you remove from your lists |
| Payments | plan, amount, currency and a payment reference. Card details never reach us — they are handled entirely by our payment provider |
| Contact form | your name, email and message |
We collect automatically
| Technical | IP address, browser user-agent, request timestamps |
| Usage | searches run, jobs viewed, resumes generated, credits spent |
| Delivery records | that an email was sent to you, when, and whether it succeeded. The address is masked in our logs (ja***@example.com) and the message body is never stored |
Sensitive information. We do not ask for it and we would rather not have it. A CV can incidentally reveal things GDPR treats as special category data — health, disability, religion, ethnicity, trade union membership, or political views. Please leave those out if you can. If they are present, we process them only as part of the CV text needed to deliver the service you asked for, and never to make judgements about you beyond matching you to jobs.
3. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create and run your account; authenticate you | To provide what you signed up for | Contract |
| Read your CV and score job listings against it | The core service | Contract |
| Generate a tailored resume | You asked for it and spent a credit | Contract |
| Show you a recruiter's contact details for a listing | Part of the service you asked for | Contract |
| Hold those recruiter details (they are somebody else's data, not yours) | So candidates can reach a real person instead of a portal | Legitimate interests |
| Send transactional email (verification, resets, receipts, security notices) | Necessary to operate the account | Contract |
| Take payment; keep records of it | To complete a purchase; tax and accounting records | Contract; Legal obligation |
| Rate limiting, bot protection, IP blocking, fraud prevention | To keep the service available and stop abuse | Legitimate interests |
| Aggregate usage statistics (how many searches, how many failures) | To run and improve the service | Legitimate interests |
| Collect unrecognised skill terms found in CVs to improve our vocabulary | To improve matching quality for everyone | Legitimate interests |
| Security notices about credential changes | To let you catch an account takeover | Legitimate interests; Contract |
Vocabulary improvements. Skill terms our vocabulary does not yet recognise (for example "Kubernetes") are recorded as isolated keywords so we can improve matching. They carry no account link, no identifier and no CV text.
We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.
4. AI and automated processing
This section matters, so it is deliberately explicit.
What the AI does. We use large language models from OpenAI and Anthropic for three narrow jobs:
- Reading your CV to work out what you have actually done — including skills you describe in your own words rather than as keywords.
- Judging whether a job advert is genuinely your profession and your level.
- Writing your tailored resume, using only material already in your CV.
What the AI does not do. It does not produce your match score. AI helps decide which of your skills count as a match; the arithmetic afterwards is the same for everyone.
What is sent. Relevant extracts of your CV and the text of the job advert. Not your email address, name, payment details or account identifiers.
Training. he API terms under which we use OpenAI and Anthropic bar them from training their models on what we send. We do not opt in to any data-sharing programme that would change that.
Which provider handles a given request is our decision, not yours.
Scores are for you, not about you. A match score is an informational figure shown to you, to help you decide where to spend your effort. We do not screen you, rank you against other candidates, or share your CV, your profile or your scores with any employer or recruiter. On that basis we do not consider our scoring to produce legal or similarly significant effects of the kind addressed by Article 22 GDPR.
5. Who we share it with
We use the following processors. Each is bound by a contract limiting what they may do with your data.
| Provider | What they handle |
|---|---|
| Cloud services | Application hosting and databases |
| Cloudflare (R2) | Storage of CV files and generated resume PDFs |
| Cloudflare (Turnstile) | Bot protection on sign-up, sign-in and guest search — receives your IP address |
| OpenAI | AI processing (see section 4) |
| Anthropic | AI processing (see section 4) |
| Third-party web search | Looking up publicly listed recruiter contact details for a job advert. We send the company and role, never anything about you |
| Only if you use "Continue with Google" | |
| Mailtrap | Sending transactional email — verification, resets, receipts, security notices |
| Stripe | Payment processing. Card details go to them directly and never reach us |
All of these are based in the United States. What that means for your data is covered in section 6.
We may also disclose personal data where we are legally required to, or to establish or defend legal claims.
Storage buckets are private. CV files and generated resumes are never publicly accessible; your browser reads them through short-lived signed links.
Recruiter details are other people's data, and we treat them that way. Where a job advert names a recruiter, or a public web search finds their work contact details, we store that contact information alongside the listing so you can follow up. We never guess — if we cannot find a real address from the advert or a genuine lookup, we show nothing rather than constructing one. If you are a recruiter and want your details removed from our records, email [email protected] and we will delete them.
6. International transfers
Some of our third-party processors are located outside the UK and EEA, primarily in the United States.
Where our US-based processors are certified under the EU–US Data Privacy Framework (and its UK Extension), we rely on that certification as the legal transfer safeguard. Where a processor is not certified under the framework, transfers are safeguarded using the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, alongside appropriate technical measures to protect your data.
7. How long we keep it
| Data | Kept for |
|---|---|
| Guest CVs (uploaded without an account) | 24 hours, then deleted automatically |
| Your CV and extracted text | Until you delete it, or 30 days after you close your account |
| Generated resumes | Until you delete the job they belong to, or 30 days after you close your account |
| Search history and job results | Until you delete the search, or 30 days after you close your account |
| Job application statuses you record | Until you clear them, or delete the job |
| Email delivery records | 90 days, then deleted automatically |
| Payment records | As long as tax and accounting law requires — typically [6 / 7] years |
| Records of administrative changes | 365 days, then deleted automatically |
| Recruiter contact details found for a job advert | Kept with the listing for as long as we hold it — see below |
What happens when you close your account. You can close it yourself from your profile page. Two things happen, at different times:
- Immediately. The account is deactivated, you are signed out everywhere, any linked Google account is disconnected, and we stop processing your information. We email you to confirm, and that email tells you the date your data will be erased.
- After 30 days. Your CV, generated resumes and search history are permanently deleted, and we email you once more to confirm it is done. That second email is the last one you will receive from us.
Why the 30-day wait, when you asked us to close it now? Because closing an account is destructive and irreversible, and not every closure is genuine — if someone else got into your account, immediate erasure would mean your data was gone before you found out. The confirmation email reaches you while there is still something to recover, and during that window we can restore the account if you ask. If you would rather we erased everything straight away, say so and we will.
After erasure we keep an anonymised, unusable account record — no name, no email, no CV. It exists because payment receipts are attached to it and tax law requires those to be kept.
Job listings and recruiter details. We keep the job adverts we have collected, and any recruiter contact details found with them, as part of our listings database. These are not tied to your account and are not deleted when you close it — they describe a job and a company, not you. If you are a recruiter and want your details removed, email [email protected] and we will delete them.
8. Your rights
We honour the rights below for everyone, wherever you live. Some laws grant them and some do not, but checking your location before deciding how well to treat you is not a distinction worth making — and most of it you can already do yourself in the app.
You have the right to:
- access the personal data we hold about you
- correct anything inaccurate
- erase your data, where we have no overriding obligation to keep it
- restrict or object to processing carried out under legitimate interests
- portability — receive your data in a machine-readable form
- withdraw consent, where processing is based on it
- not be subject to a decision made solely by automated means that has a legal or similarly significant effect. We do not make such decisions — see section 4 — but if you want a person to review how a score was reached, ask and we will arrange it
In the app you can: edit your profile, delete your CV, delete a whole search, delete individual jobs, and close your account. For anything else, write to [email protected] and we will respond within one month.
We never sell your personal data, and we do not share it for advertising.
Where to complain, by region
If you think we are handling your data unlawfully, you can raise it with us first — but you do not have to, and you can go straight to your regulator:
| If you are in | You can complain to |
|---|---|
| EEA | your national data protection authority |
| United Kingdom | the Information Commissioner's Office (ICO) |
| Switzerland | the Federal Data Protection and Information Commissioner (FDPIC) |
| Canada | the Office of the Privacy Commissioner of Canada |
| Australia | the Office of the Australian Information Commissioner (OAIC) |
| United States | your state Attorney General, where your state provides one |
Canada. We process your personal information with your consent, which may be express or implied depending on the circumstances and the sensitivity of the data. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
United States. Depending on your state you may have the right to access, correct, delete or obtain a copy of your personal information, and to withdraw consent. We do not sell personal information, and we do not process it for targeted advertising or profiling that produces legal effects, so no opt-out is required for those.
9. Cookies and local storage
We use no advertising cookies, no analytics trackers, and no tracking pixels — including in our emails, which contain no open- or click-tracking of any kind. Nothing we set follows you to other websites.
Every cookie we use is strictly necessary, and falls into one of three groups:
| Purpose | Lifetime |
|---|---|
| Signing you in and keeping you signed in | Up to 7 days, or until you sign out |
| Protecting your requests from cross-site attacks | Same as your session |
| Completing a two-factor or "Continue with Google" sign-in | Minutes — discarded as soon as the sign-in finishes |
Session cookies are set as httpOnly, meaning no script on the page can read them.
Because these are strictly necessary to operate the service, they do not require consent — but equally they cannot be switched off without signing in ceasing to work.
Your browser's local storage holds preferences such as theme and dismissed notices. It never holds credentials or tokens, and you can clear it at any time.
10. Security
- We can never see your password. It is stored exclusively as a strong, salted one-way hash.
- Two-factor secrets are encrypted at rest, and recovery codes are hashed and discarded once used.
- Signing out really signs you out. Sessions use httpOnly cookies with cross-site request protection, and signing out revokes them on our side immediately rather than merely clearing your browser.
- Your CV and resumes are in private storage, never publicly reachable, and your browser opens them through short-lived signed links.
- Our email logs mask your address, so a record that a message was sent does not restate who it went to.
No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant authority as the law requires.
11. Children
jobctl is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
We will post any material change here and update the date below. If a change significantly affects how we use your data, we will email you.
Effective date: August 2026
Last updated: August 2026