Privacy Policy

1. Who we are (Data Controller)

Jobsmith ("we", "us", "our") provides AI-assisted CV tailoring, cover letters, job matching, LinkedIn optimisation, interview preparation, NHS supporting-information tools and an affiliate programme (the "Service"). For the purposes of the UK GDPR and the Data Protection Act 2018, Jobsmith is the data controller for the personal data described here. Our registered contact for privacy matters is support@jobsmithai.com. [Godswill: insert registered company name, company number and registered address before launch.]

2. What we collect

• Account data: name, email, password (hashed), and authentication details.
• Profile & career data: CV files and text, work history, education, skills, target roles, job preferences and chosen sponsored/NHS roles.
• Generated content: tailored CVs, cover letters, LinkedIn and interview outputs, and NHS supporting statements.
• Billing data: subscription tier, plan, and payment status. Card details are handled solely by Stripe; we never see or store full card numbers.
• Affiliate data (if you join): country of residence, payout details you provide, referrals and commissions.
• Usage & technical data: IP address, device/browser, pages used, and feature usage, collected to run and secure the Service.
• Marketing consent: where you opt in to job-search tips and product updates.

3. How we use it & lawful bases (UK GDPR Art. 6)

• To provide the Service (create your account, tailor CVs, match jobs, generate documents) — lawful basis: performance of a contract.
• To process payments and manage subscriptions — contract and legal obligation (tax/accounting records).
• To secure, maintain and improve the Service and prevent fraud/abuse — legitimate interests.
• To send marketing emails — only with your consent, which you can withdraw at any time.
• To run the affiliate programme and pay commissions — contract and legitimate interests.

4. AI processing of your CV and content

To generate analyses, tailored CVs, cover letters and NHS supporting statements, the text you provide is processed by third-party AI models on our behalf under data-processing terms. We instruct these providers not to use your content to train their models. AI output is a draft for your review, may contain inaccuracies, and does not guarantee any employment or immigration outcome. You are responsible for checking accuracy before you submit anything to an employer.

5. Who we share it with (sub-processors)

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:

• Stripe — payments, subscriptions and affiliate payouts.
• Paystack — affiliate payouts to Nigeria (when enabled).
• Resend — transactional and (with consent) marketing email.
• Our AI/LLM provider(s) — generating CVs, letters and supporting statements.
• Job-data sources (e.g. Adzuna, Jooble and publicly available NHS/employer listings) — to surface job matches.
• Cloud hosting & database providers — to run and store the Service securely.

Some providers may process data outside the UK/EEA; where they do, we rely on appropriate safeguards such as UK-approved Standard Contractual Clauses / adequacy decisions.

6. Retention

Free CV-analysis uploads are deleted after 30 days. For registered accounts, we keep your data while your account is active and for a reasonable period afterwards, then delete or anonymise it, except where we must keep certain records (e.g. billing/tax) for the period required by law. You can request deletion at any time.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or object to processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise any right, email support@jobsmithai.com; we respond within one month. You can unsubscribe from marketing via the link in any marketing email. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies & similar technologies

We use strictly necessary cookies/local storage to keep you signed in and to run core features. Where we use analytics or non-essential cookies, we do so on the basis of your consent, which you can manage in your browser settings. We do not use cookies to sell your data.

9. Payments & currency

Subscriptions are priced in GBP (£) and processed by Stripe. Where you are outside the UK, Stripe may display and charge in your local currency, converted from our GBP price and settled to us in GBP. See our Terms & Conditions for billing, cancellation and refunds.

10. Children

The Service is intended for users aged 16 and over. We do not knowingly collect data from children under 16.

11. Changes & contact

We may update this policy from time to time; material changes will be notified in-app or by email. Questions or requests: support@jobsmithai.com.