Draft pending legal review
01What we collect
Account details (name, email, password stored only as a one-way hash), the career information, documents, jobs, applications, tasks and contacts you add, and technical records needed to run the service securely (sign-in sessions, security and audit events, usage counts).
02Why we use it
To provide your workspace, keep it secure, enforce plan limits and answer support requests. We don’t sell your data or use your career content for advertising or unrelated purposes.
03AI providers
If you allow AI assistance, the job description, the document you chose and your confirmed, non-sensitive facts are sent to the AI provider(s) you allow in Settings to produce that one draft. You can turn this off at any time.
04Payments
Payments are handled by Stripe. We never see or store your full card details.
05Who can see your data
Only you. Support staff can see account metadata (status, plan, usage counts) but not your CVs, notes or messages unless you share specific details with them.
06Retention and deletion
Your data is kept while your account is open. Exports are deleted after 24 hours. When you delete your account, your records and files are removed within minutes; encrypted backups containing them expire within 35 days. A minimal, anonymous record that an account was deleted is kept for security auditing.
07Your rights
You can access, correct, export and delete your data from Settings, and contact us about any other UK GDPR right, including objecting to processing and complaining to the ICO.