Privacy policy

Jobofinder is run by Open Source AI Ltd. This page explains what we hold about you, why, and what you can do about it. To reach us about anything here, write to [email protected].

What we collect and why

What	Why we need it
Email address and password (the password is stored only as a one-way hash)	To give you an account and to send you alerts and service messages
Profile details you enter: name, contact details, work history details, answers to common application questions, including answers you type on an employer's form when the portal asks you (you can switch this off under Profile; answers about gender, ethnicity, health, disability and similar are never kept)	To fill in application forms for you. When you press "Write it for me" on a question, the question, your key words and your CV text are sent to our built-in AI to write that answer; nothing is put in the form until you press "Put in the form"
Your CV file and its text	To attach to applications and, on the Pro plan, to tailor it to each job
Your searches and watches	To know which vacancies to look for
A record of each application: the job, the steps taken, the outcome, any tailored CV that was sent together with the CV text it was written from and the text of the job posting, and any interview preparation sheet you asked for	So you can see what was done in your name, what was changed in your CV for that job, and prepare for an interview
Subscription status from Stripe (plan, renewal date, a customer reference)	To give you the plan you paid for. We never receive your card number
Device alert subscription, if you switch alerts on	To send captcha and vacancy alerts to that device
Sign-ins for employers' sites, if you choose to save them: the user name and password you type in, or your signed-in session on that site after you sign in yourself and choose "stay signed in"	To sign in on that one site and apply for you while you are away. They are stored encrypted, are never shown again, and you can remove them at any time
Your WhatsApp number, if you switch WhatsApp alerts on, and the replies you send to our WhatsApp number	To send you alerts, such as a captcha waiting for you or a job waiting for your yes or no, and to act on your reply: YES or NO to a job, or the captcha characters, code or answer you type for a form, which we put into that form. Replying STOP switches these messages off
Technical logs such as IP address and time of requests	To keep the service secure and to fix problems

We do not buy data about you, we do not sell your data, and we do not show advertising.

Who receives your information

• Employers you apply to. When an application is submitted, the details in the form and your CV go to that employer and to the application system the employer uses. That is the purpose of the service. Their own privacy policies apply from that point.
• Service providers working for us, under contract and only to deliver the service: server hosting, email delivery, payment processing (Stripe), device alert delivery (the push service of your browser or phone maker), WhatsApp message delivery (Twilio and WhatsApp, which receive your number and the text of the alert), AI processing providers for CV tailoring, a web search service (the Brave Search API, which receives the employer's name, the job title and the town of a vacancy so that we can find the employer's own page for it, and nothing about you), and the check that tells people from robots on our sign-up, sign-in and password-reset forms (Cloudflare Turnstile, which runs in your browser on those pages and receives technical details of your browser and your internet address; it is not used for advertising).
• Authorities, where the law requires it.

CV tailoring and AI

On the Pro plan, if CV tailoring is switched on, the text of your CV, your cover letter and the text of the job posting are processed by our AI system to produce a version adapted to that job. This processing runs on infrastructure operated for us by cloud and AI service providers. The content is used only to produce your tailored documents. If you ask for an interview preparation sheet for an application, the CV that was sent and the job posting are processed in the same way to write it. The list of what was changed in your CV is worked out on our own servers by comparing the two texts. We do not use your CV to train AI models. You can switch tailoring off in your profile at any time, and you can read every tailored CV in your account.

The browser extension

If you install our browser extension and connect it to your account, it downloads your profile and CV from us when you press its button, and fills them into the form on the page you are looking at. It reads the job title, employer name and job description from that page only when you ask it to tailor your CV or to save the application to your list. If you open its helper beside the page, it reads the questions on that form that have no answer yet, in your browser. A question leaves your browser only when you ask for something to be done with it: when you press "Write it for me", the question and your key words are sent to us so that the answer can be written; when you leave "Remember this answer" ticked, the question and your answer are added to the saved answers in your profile. Answers to questions about gender, ethnicity, health and similar are never kept. It does not read your browsing history, does not run on pages where you have not pressed its button, and never submits a form. You can disconnect every browser from your Account page at any time.

How long we keep it

A saved sign-in is kept until you remove it under Account, or delete your account. We keep your other information for as long as you have an account. When you delete your account, your profile, CV, searches, watches, application records and alerts are deleted from our live systems straight away, and from backups within 30 days. Payment records are kept by Stripe, and by us where tax law requires, for the period the law sets.

Security

Profile details and any sign-ins you save for employers' sites are encrypted in our database, your Jobofinder password and sign-in tokens are stored as hashes, and all traffic uses HTTPS. Access to the servers is restricted to the people who operate the service. No system is perfectly secure; if we learn of a breach affecting you, we will tell you and the relevant authority as the law requires.

Your choices and rights

• See and correct: your profile is always editable in your account.
• Download: Account → "Download my data" gives you a copy of what we hold.
• Delete: Account → "Delete my account" removes it all and stops any subscription.
• Stop processing: pause or delete a search or watch, or switch off CV tailoring.
• Depending on where you live, you may also have the right to object, to restrict processing, or to complain to your data protection authority. Write to us and we will help.

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies. On the sign-up, sign-in and password-reset pages, the check against robots is loaded from Cloudflare; what Cloudflare collects there is covered by its own privacy policy.

International transfers

Our providers may process data in countries other than yours. Where they do, we rely on the safeguards the law provides, such as standard contractual clauses.

Children

Jobofinder is for adults looking for work. It is not intended for anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.