Privacy policy

Account details: your email address, and a hashed password (we never store the password itself). If you sign in with Google we also store your Google account identifier and whether Google has verified your email.

Your CV and the profile built from it: name, contact details, work history, education, skills, licences and languages. This is the most sensitive data on the platform and it is treated as such.

Your search settings: job titles, keywords, countries and regions, salary expectations.

Activity generated by using the product: jobs discovered for you, match scores, generated résumés and letters, and the stage of each application.

Your CV exists so the agents can search and write from it. Without it the product cannot function — it is the single source every generated document is constrained to.

Search settings drive which job sources are queried and which countries are covered.

Application records exist so you can see what you sent, where, and what happened.

We do not sell your data, and we do not share it with advertisers or data brokers.

We do not send your CV to employers. When you apply, you attach the documents yourself on the employer's own site.

We do not post, message or submit anything on your behalf.

AI providers: job descriptions and your CV content are sent to the AI model provider that powers parsing, scoring and writing. This is what makes the product work; it is processing on our instruction, not sale of your data.

Job sources: we query public job-board APIs (such as Adzuna and JSearch) with your search terms — job titles and locations. Your CV is never sent to a job board.

Google, if you choose to sign in with Google: we receive your email address, name and account identifier from them.

Email delivery, when configured, for password resets and security notices.

On our own server infrastructure, in a PostgreSQL database that is not reachable from the public internet. Traffic to the site and application is encrypted with HTTPS.

Passwords are stored as bcrypt hashes. Two-factor recovery codes are hashed too. Password-reset links are stored only as a hash, are single-use, and expire.

For as long as your account exists. Delete your account and the associated profile, CV, generated documents and application history are removed.

Ask us to delete your data and we will — see the contact address below.

You can edit or replace your CV and profile at any time.

You can turn two-factor authentication on from the Security page, and we recommend you do.

You can request a copy of your data, or its deletion, by email.

The service is not intended for anyone under 16, and we do not knowingly collect their data.

If this policy changes materially we will say so on this page and update the date at the top.