Privacy policy

Who we are

NthJobs is run by [legal name of the business]. We are the controller of the personal data described here and are registered with the Information Commissioner's Office, registration number [ICO registration number].

Questions about your data, or a request to use any of your rights: privacy@nthjobs.com.

What we collect

• Account details: your name, email address, sign-in methods (passkeys, an optional password) and preferences.
• What you give us: CVs (the files and their text), achievements, contact details for your CV, career goals and deal-breakers, job adverts you capture, applications, notes, interview rounds, debriefs, feedback, writing samples and spoken practice answers.
• Emails you forward to your NthJobs inbound address, such as interview invitations and rejections.
• What we generate for you: tailored CVs, cover letters, interview packs, match scores and reasoning, insight briefs and search vectors.
• Usage and billing records: which AI features you used, their cost, and your subscription. Card details are held by Stripe, never by us.

Your notes and debriefs can name other people, such as recruiters and interviewers, and your records can show your right to work. Some things you write, such as reasons for leaving a job, might reveal health or other sensitive information. Only add what you are comfortable storing.

How we use it, and why we are allowed to

• To run the service you signed up for (contract): storing your record, matching you with roles, drafting and checking CVs and cover letters, interview practice, and the MCP connection to your own AI tools.
• To bill you (contract, and our legal duty to keep financial records).
• To send service and onboarding emails (legitimate interests). You can switch off tips and reminders in your notification settings.
• To keep the service secure and working (legitimate interests): sign-in checks, abuse prevention and error logs.
• Details about other people in your records (legitimate interests: helping you manage your job search). We use them only inside your account.
• Sensitive information you choose to add (your explicit consent). You can remove it at any time.

Your record is never shared with employers, recruiters or other users unless you share a profile or debrief link yourself. We do not sell your data and do not use it to train AI models.

How we protect it

• CVs, contact details, achievements, applications, notes, documents, debriefs, feedback and forwarded emails are encrypted in our database, so a copy of the database or a backup is unreadable without our key.
• Uploaded files are kept in private storage in the EU and are only downloadable through your signed-in account.
• Search vectors (numbers worked out from your text so we can match jobs) are not encrypted. They stay in our database and are never exported or shared.
• Staff do not look at your content. If support needs to, we ask for your written permission first and record that we did.

Settings, Your data shows what we hold, how each kind is protected, and which services see it.

Who processes it for us

• Laravel Cloud hosts the app and database. Cloudflare R2 stores uploaded files, in the EU.
• OpenRouter passes your text to the AI model that does the work: Anthropic (Claude) for drafting, matching and interview practice, OpenAI for search vectors and turning spoken answers into text, and Microsoft for read-aloud voice when it is switched on. We ask providers not to keep or train on what we send.
• TypeSafe runs some matching and parsing steps.
• Pangram, Winston AI and Sapling check generated cover letters for AI phrasing, only when that feature is switched on.
• Postmark sends our emails and receives the emails you forward. Stripe takes payments.

Some of these companies process data in the United States. We rely on [the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework, per provider] to protect it.

If you connect NthJobs to your own AI tools (Claude, Cursor and others) through MCP, what they read is handled under that tool's own privacy terms.

How long we keep it

• Your record: for as long as you have an account.
• Forwarded emails and the text of captured job adverts: 90 days, then deleted. What we worked out from them (the application, its stage) stays.
• Spoken practice recordings: deleted once they are turned into text.
• Uploaded CVs you never saved: 7 days.
• Failed background tasks, which can contain parts of your content: 14 days.
• Data exports: 7 days, then the file is deleted.
• Billing records: [6 years], as the law requires.
• Backups: [backup retention period]. When you delete your account, your data is removed straight away from the live service and disappears from backups as they expire.

Your rights

You can ask to see, correct, delete or take a copy of your data, object to or restrict how we use it, and withdraw consent you have given. Most of this you can do yourself:

• Download everything: Account settings, Download your data. You get a zip of Markdown and JSON.
• Delete your account: Account settings, Delete my account. This removes your data and cancels any subscription immediately.
• Correct something: edit it where it appears, or email us.

We reply to requests within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Cookies

We only set cookies the site needs to work: one that keeps you signed in during a visit, one that protects forms from forgery, and one that keeps you signed in between visits until you sign out. We use no analytics or advertising cookies.

Changes

If we change how we use your data, we will update this page and email you about anything significant before it takes effect.