Privacy Policy

1. Who we are

JustAJob (“we”, “us”, “our”) provides the Service and is the “data controller” responsible for the personal data described in this policy. You can contact us about privacy by email at support@justajob.net.

2. The personal data we collect

We collect only what we need to run the Service:

• Account & identity. Your email address and, optionally, your name.
• Sign-in & sessions. Single-use, time-limited “magic link” tokens sent to your email, and a session identifier that keeps you signed in.
• Job activity. Roles you save or track (job title, company, location, status and timestamps) and any job alerts / saved searches you create (keywords, location, region and frequency).
• CVs you store. The CV text you upload, paste or save (free accounts may keep one; premium accounts more). This can include whatever personal details you choose to put in a CV.
• AI tool inputs. When you use the AI CV tools, the CV text and any job advert or question you submit, plus simple usage counters used for fair-use limits.
• Payments. If you subscribe to premium, your subscription status and the identifiers needed to manage it. Card and payment details are handled directly by our payment processor (Stripe) — we never see or store your full card number.
• Technical & security data. Your IP address (used for rate-limiting, security and abuse prevention), basic request information, and an approximate region inferred from your network / content-delivery headers.
• Cookies & local storage. A small number of strictly-necessary and functional cookies, and on-device preferences — see our Cookie Policy.

3. How we use your data, and our lawful bases

Under the UK GDPR we must have a “lawful basis” for each use of your data:

• To create your account and sign you in — performance of our contract with you.
• To run the job board, tracker and alerts — performance of our contract and our legitimate interest in providing a useful service.
• To provide the AI CV tools on the content you submit — performance of our contract (and, where your CV happens to include sensitive information, your explicit consent — see section 4).
• To take payment and manage subscriptions — performance of our contract, and our legal obligation to keep accounting and tax records.
• To send service messages (sign-in links, job alerts you have set up, and subscription notices such as renewals ending) — performance of our contract and our legitimate interests.
• To keep the Service secure (rate-limiting, preventing fraud and abuse) — our legitimate interests.
• To comply with the law — compliance with a legal obligation.

4. Sensitive information in CVs

A CV can contain “special category” data (for example details that reveal health, ethnicity, religion or similar). Please avoid including sensitive information you don’t need to. Where you do include it and ask us to process it (for example by running an AI tool on that CV), we rely on your explicit consent. You can withdraw that consent at any time by deleting the CV or your account.

5. AI features and your data

Our premium CV tools (health check, match score, cover letters and application answers) send the relevant CV and job-advert text to a third-party AI provider (OpenAI and/or Anthropic) to generate the result. We send only the text a feature needs and cap its length. These providers’ APIs exclude submitted content from training their models by default. We do not use your data to train our own models, and AI output is guidance to help you — not professional, legal or career advice, and it may be inaccurate, so please review it before use.

6. Who we share data with

We do not sell your personal data and we do not share it for third-party advertising. We use carefully selected service providers (“processors”) who act on our instructions:

• Hosting & database — Neon (managed database) and Cloudflare (application hosting, content delivery and security).
• Email — Resend, to deliver sign-in links and notifications.
• Payments — Stripe, which processes subscriptions and card data as its own controller under its privacy policy.
• AI features — OpenAI and/or Anthropic, as described in section 5.
• Job listings — to return results we query job-feed providers (such as Adzuna, Reed, Jooble, JSearch and Careerjet) and, for some employer career sites, access services that help retrieve public listings. We send these the search parameters (such as keywords and location) — not your account identity.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, users or the public.

7. International transfers

Some of our providers are based outside the UK (for example in the United States or the EU). Where your data is transferred internationally, we rely on appropriate safeguards — such as UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum — so your data stays protected.

8. How long we keep it

• Account & activity data is kept while your account is active and is deleted when you delete your account, save for short-lived copies in routine backups.
• Payment and transaction records are kept for around six years to meet UK tax and accounting obligations.
• Security and rate-limiting data is short-lived.
• Cached job listings are not specific to you and are refreshed and pruned on a rolling basis.

9. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• data portability (receive your data in a portable format);
• withdraw consent where we rely on it; and
• not be subject to decisions with legal effects based solely on automated processing.

You can exercise two of these directly from your account at any time: use Export my data to download everything we hold about you, and Delete account to erase your account and associated data. Our AI tools are assistive and do not make automated decisions about you. To make any other request, contact support@justajob.net. If you are unhappy with how we handle your data you can complain to the ICO at ico.org.uk, though we’d appreciate the chance to put things right first.

10. How we protect your data

We use measures including encrypted connections (HTTPS), httpOnly and secure session cookies, single-use sign-in links that expire, database-backed sessions, rate-limiting and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to review our safeguards.

11. Children

The Service is intended for people aged 16 and over and is not directed at children. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

12. Other websites

When you apply for a role you are taken to a third-party website (an employer or job board) with its own privacy practices. We are not responsible for those sites; please review their policies.

13. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, may notify you in the Service or by email.

14. Contact us

For any privacy question or request, email support@justajob.net.