Privacy policy

What we collect

When you create an account we store your name and email address. If you sign in with Google we also receive your profile picture. That is all we ask Google for — specifically the openid, email and profile scopes. We never request access to your Gmail, and we never see or store your Google password.

If you build a job-seeker profile we store what you enter: your headline, summary, location, phone number, skills, work history, education and any CV you upload. All of that is optional except your name and email.

We record the IP address and browser user-agent of your active sessions so you can see and revoke them, and we record request metadata when something trips an abuse check.

Who can see your CV

Your CV is never publicly reachable. It can be opened by exactly two parties: you, and a member of a company you have sent a live application to which attached that CV. If you withdraw an application, that company loses access immediately.

Administrators of this platform cannot open your CV. Moderating a job board does not require reading applicants' documents, and the file route refuses admin requests for that reason.

What employers see when you apply

A copy of your profile is taken at the moment you apply and sent with the application. That snapshot is frozen: editing your profile afterwards does not change what the employer sees, and equally they cannot see changes you make later.

Bot and abuse detection

We use Cloudflare Turnstile on sign-up, job applications and the contact form. It is invisible in normal use and sets no tracking cookies. We also use hidden form fields that a person cannot see, per-IP and per-account rate limits, and analysis of request headers.

These checks observe and score traffic. They do not build a profile of you, are not used for advertising, and never create an account or register anything on your behalf with any third party.

Messaging apps

Job pages offer share buttons for WhatsApp, Telegram and Discord. These are ordinary links that open the app if you have it. We do not hold an account for you on any of those services, we cannot see whether you have one, and we never state that you do.

Cookies

We set one essential cookie to keep you signed in. It is httpOnly, so JavaScript cannot read it. We do not use advertising or analytics cookies. Your colour-theme preference is kept in your browser's local storage and never sent to us.

Retention and deletion

You can delete a CV at any time from your profile. Deleting it removes the file; the record that you applied remains, because employers need a record of applications they received.

To close your account entirely, contact us and we will remove your personal data. Some records are retained where we are required to keep them, or where deleting them would misrepresent another party's history — an application an employer already assessed, for example.

Your rights

If you are in the UK or EU you have the right to access, correct, export or erase your personal data, and to object to processing. Contact us and we will respond within one month.

Contact

Questions about this policy, or a request about your data, can go to the address on our contact page.

This policy describes what the software does. It has not been reviewed by a lawyer and is not legal advice — have it reviewed before operating commercially in your jurisdiction.