Last updated 27 October 2026
Privacy policy
Jobsloth applies to jobs in your name, so it handles personal information. This explains what we keep, why, who else handles it, and how to control it.
Who is responsible
Jobsloth is operated by [legal name, company number and registered address], the controller of your personal information. Privacy contact: [privacy email address and the name or role of the person responsible]. Employers you apply to separately control what they receive.
What we use
- Account: your sign-in identity and email address.
- Your CV and profile: the CV you upload and the facts read from it (name, contact details, work history, education, skills), and the job you want, where, and your target salary.
- Application details: answers you save (for example right to work, notice period, phone number, address), the applications prepared and sent, the employer forms, screenshots and confirmation pages kept as proof.
- Employer accounts: where you allow it, the accounts Jobsloth creates on employers’ sites for you, with passwords stored encrypted.
- Messages: email sent to your applyto.email address and the replies you send.
- Payments: your plan, payment references and refunds. Stripe handles card details; we never see your full card number.
- Technical: security and error logs, which can include IP addresses. Before you sign up, the onboarding stores your answers in your browser only.
Right-to-work and sponsorship answers can reveal nationality or immigration status. We use them only to fill in the applications you ask for, never for profiling or advertising.
Why we use it
- To provide the service you signed up for: matching, preparing and sending applications, keeping proof, running your inbox and your plan (our contract with you).
- To keep the service secure and working (our legitimate interest).
- To meet legal duties, for example tax records for payments.
Who else handles it
- Employers receive the applications you ask Jobsloth to send.
- OpenAI reads your CV to fill your profile and drafts answers and match scores. We ask it not to keep your data for training.
- Steel runs the browsers that fill in employer forms.
- Resend delivers and receives email for your applyto.email address.
- Stripe takes payments.
- Hetzner hosts our database and servers (Germany/EU); Vercel hosts the website.
Some of these providers are outside the UK and EU. Where data goes abroad we rely on adequacy decisions or standard contractual clauses. [Owner to confirm the list of providers and transfer mechanisms]
How long we keep it
While your account is open, and for [e.g. 30 days] after you delete it (backups for up to [e.g. 90 days]). Payment records are kept as long as tax law requires. Applications already sent stay with the employers you sent them to.
Your rights
You can ask for a copy of your data, correct it, delete it, object to or restrict its use, or move it elsewhere. Email the privacy contact above. If you’re in the UK you can complain to the Information Commissioner’s Office (ico.org.uk); in the EU, to your local data protection authority; in California and other US states and in Canada (including Quebec), you have equivalent rights, and we don’t sell or share your personal information for advertising.
Cookies
We use only the cookies needed to keep you signed in and secure. We don’t use advertising cookies.
Changes
If we change how we use your information in a way that matters, we’ll tell you by email first.