Privacy Policy

JobFocus ("we", "us") provides a personal job-hunting platform that aggregates UK job listings, scores and tailors your CV against roles, and helps you prepare to apply. We are the data controller for the personal data described below.

Questions or requests about your data: privacy@jobfocus.co.uk, or use the contact form on our site.

We collect only what we need to run the service for you:

• Account details — your name and email address, handled by our authentication provider (Clerk) when you sign up or sign in.
• Your CV — the file(s) you upload and the text and structured data we extract from them (work history, education, skills, contact details in the CV).
• Your profile — preferred job titles, keywords, locations, salary preferences, and digest settings.
• Activity in the app — roles you save, dismiss or mark as applied, tailored CVs and cover letters generated, interview practice sessions and their transcripts, and your career-roadmap requests.
• Usage and quota counters — to apply fair-use limits on AI features.
• Messages — anything you send us via the contact form.
• Technical data — IP address, device/browser information, and essential cookies, plus diagnostic/error telemetry.

A CV can contain special-category data (for example health, ethnicity, religion or trade-union membership). Please avoid including such details where you can. Where they are present, we process them only to provide the service you have asked for — on the basis of your explicit consent and/or because you have manifestly made them public by including them in your CV — and they are sent to our AI providers solely to produce your results.

• To provide the core service — aggregate matching roles, score your CV, generate tailored CVs/cover letters, prepare interview Q&A and mock interviews, and build your career roadmap.
• To run AI processing — your CV text and the relevant job descriptions are sent to our AI providers to produce the scoring, tailoring and prep. We instruct the AI not to fabricate information.
• To send you the role digest at the frequency you choose (you can turn this off any time).
• To keep the service secure, debug problems, and enforce fair-use limits.

We do not sell your personal data, and we do not use your CV to train AI models.

• Contract — to provide the service you sign up for.
• Legitimate interests — to secure, maintain and improve the service (balanced against your rights).
• Consent — where it applies (e.g. optional communications); you can withdraw it any time.

We use automated processing (AI) to score your CV, match it to roles, and generate tailored CVs, cover letters and interview prep. These are decision-support suggestions, not solely-automated decisions that produce legal or similarly significant effects — you review and decide what to use, and you can reach a human about any result by contacting us. We instruct our AI providers not to fabricate information, and they do not train their models on your content.

We use trusted processors to run the service, each handling only what their function needs:

• Authentication — Clerk (account identity and sign-in).
• Database & file storage — MongoDB Atlas (your profile and app data) and Cloudflare R2 (your uploaded CV files).
• AI processing — Anthropic and/or Microsoft Azure OpenAI process your CV and job-description text to produce scoring, tailoring and interview prep.
• Job sources — we query third-party job APIs (e.g. Adzuna, Reed, TheirStack, NHS Jobs) to build your feed; we send them your search terms, not your CV.
• Email & analytics — our email provider (to send digests/contact replies) and Microsoft Application Insights (diagnostics).
• Hosting — our cloud host runs the application.

We may also disclose data where required by law. We never auto-submit applications on your behalf, and we do not scrape LinkedIn or Indeed.

Some processors are based outside the UK/EEA (for example in the US). Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or Standard Contractual Clauses.

We keep your account data for as long as your account is active. When you delete your account (or your data) we remove your profile, CVs, generated documents, interview sessions and related records straight away, and copies are purged from encrypted backups within 30 days. Limited security and diagnostic logs are kept for up to 90 days and then deleted. We retain only the minimum necessary for any legal or accounting obligation where the law requires it.

Under UK GDPR you can:

• Access the personal data we hold about you, and get a copy.
• Correct inaccurate data (you can edit most of it in the app).
• Delete your data — use "Delete my account & data" in your profile, or contact us.
• Port your data, and restrict or object to certain processing.
• Withdraw consent where processing relies on it.

To exercise these, use the in-app controls or email privacy@jobfocus.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.

We use industry-standard measures — encrypted transport (HTTPS), access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, but we work to keep your information safe.

JobFocus is intended for people aged 16 and over. We do not knowingly collect data from children below that age.

We may update this policy as the service evolves. We will revise the "last updated" date and, for material changes, notify you in the app or by email.