JobFast (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application and services (the “Service”).
1. Information We Collect
To provide and improve our Service, we collect the following types of personal data:
- Account Information: Your name, email address, and password.
- User Content: CVs, work history, skills, education, career goals, and any other documents or information you upload.
- Usage Data: Information about how you interact with our Service, such as features used, clicks, and session logs. This helps us understand what is working and what is not.
- Cookie and Device Data: We use cookies and similar technologies to operate the service, as detailed in our Cookie Policy section below.
2. How We Use Your Data
Your data is used for the following purposes:
- To Provide the Service: We process your User Content to power our core features, including CV analysis and AI-generated outputs.
- To Secure Your Account: We use your account information to authenticate you and protect your account from unauthorized access.
- To Improve the Service: We analyze anonymized usage data to identify trends, fix bugs, and enhance features.
- To Provide Support: We may access your information to diagnose and resolve technical issues you report.
- AI-Generated Outputs: Your CV and career data is processed by our AI systems (powered by Google Gemini) to generate personalised feedback, optimised content, and coaching responses. You are responsible for reviewing and verifying any AI-generated content before submitting it to employers.
3. Data Sharing and Third-Party Services
JobFast does not sell your personal data. We only share data with trusted third-party service providers under strict data protection agreements. These services are essential for us to operate and include:
- Hosting, Storage & Authentication: Google Firebase / Google Cloud (firebase.google.com)
- AI Processing: Google Gemini API (ai.google.dev)
- Analytics: Google Analytics (analytics.google.com)
- Payment Processing: Stripe (stripe.com)
- Fraud Prevention: Google reCAPTCHA (google.com/recaptcha) — used to protect our platform from automated abuse. From April 2026, Google processes this data as a data processor under a Cloud Data Processing Addendum. Legal basis: Legitimate interests.
- Email Marketing & Automation: Brevo / Sendinblue (brevo.com) — used to send newsletters and marketing emails to users who have opted in. Privacy Policy
- Transactional Email Delivery: Resend (resend.com) — used to deliver system emails such as support replies and account notifications. Privacy Policy
- Advertising & Measurement: Meta Pixel by Meta Platforms (facebook.com) — used to measure the performance of our advertising and show relevant ads to people who have accepted marketing cookies. Only active after consent. Privacy Policy
We may transfer and store data on servers located in other countries. Where required by law, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place for such transfers.
4. Data Security
We implement robust technical and organizational measures to protect your data. This includes:
- Encryption: Data is encrypted both in transit (using TLS) and at rest.
- Access Control: We enforce strict access controls to ensure only authorized personnel can access user data for legitimate purposes, like support and maintenance.
- Monitoring: We continuously monitor our systems for vulnerabilities and threats.
In the event of a security breach that affects your data, we will notify you in accordance with applicable laws.
5. Your Data Protection Rights
You have rights over your personal data. You can request to:
- Access: Receive a copy of the personal data we hold about you.
- Correct: Rectify any inaccurate or incomplete data.
- Delete: Erase your personal data from our systems.
- Export: Obtain a portable copy of your data.
- Object to Automated Decisions: Where we use automated processing to generate assessments or scores, you have the right to request that a human reviews any decision that significantly affects you.
You can download a copy of your data at any time from Settings → Your data, and delete your account from Settings → Danger Zone. To exercise any other right, please contact us at support@jobfast.co.uk. We may need to verify your identity before fulfilling a request. We will respond to all data rights requests within one month as required by UK GDPR.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your personal data has been handled unlawfully.
6. GDPR, CCPA, and Global Compliance Statement
JobFast follows major global privacy standards, including GDPR, UK GDPR, CCPA, and other international data protection rules. This statement explains your rights and the controls JobFast provides.
Your Rights
Depending on your country or region, you may have the following rights:
- Access your personal data.
- Correct inaccurate or outdated data.
- Delete your data.
- Request a copy of your data in a portable format.
- Object to processing in certain cases.
- Restrict processing of your data.
- Withdraw consent where it is the basis for processing.
You can exercise these rights by emailing support@jobfast.co.uk. JobFast may need to confirm your identity before completing a request.
GDPR and UK GDPR
Under GDPR and UK GDPR, JobFast acts as a data controller for the personal data of individual users. When business clients use JobFast to process applicant data, JobFast acts as a processor.
JobFast processes personal data only when needed for service operation, feature delivery, account management, security, legal compliance, AI-powered content generation, and performance improvement. Access is limited to authorized staff and service providers. We use encryption and may transfer data internationally with required safeguards.
As a UK-based data controller, JobFast is registered with the Information Commissioner's Office (ICO). Registration number: ZC137250
Legal Basis for Processing
JobFast processes data based on the performance of a contract, legitimate interest in providing the service, compliance with legal obligations, and consent for optional features. You may withdraw consent for optional features at any time.
Data Retention and Children's Data
Account data is retained for the duration of your account plus 12 months following deletion. CV and application data is retained for the duration of your account and deleted within 30 days of account closure. Payment records are retained for 7 years in accordance with HMRC requirements. If you do not use your account for 6 months, we will email you a warning and then permanently delete your account and its data if you do not log in within 30 days. Accounts with an active subscription or Pro access are not deleted for inactivity. JobFast is not intended for users under 16, and any data found from users under this age is deleted.
7. Cookie Policy
We use cookies and similar technologies to operate and secure our Service. Cookies are small text files stored on your device.
- Essential Cookies: These are required for core functionality, such as logging in, session management, and security. The Service cannot function without them.
- Performance Cookies: These help us understand how you use the Service, allowing us to track usage, measure load times, and fix errors.
- Optional Cookies: These may be used for personalizing your experience.
Performance and optional cookies are only placed on your device after you have given your explicit consent via our cookie consent banner.
Marketing Cookies — Meta Pixel
We use the Meta Pixel, a tool provided by Meta Platforms, Inc. (Facebook and Instagram), for advertising and measurement. When active, it collects information such as your IP address, browser and device details, the pages you view on JobFast, and actions such as page views. Meta may match this with a Facebook or Instagram account to help us measure the effectiveness of our advertising and show you relevant ads.
The Meta Pixel is a marketing cookie. It only activates after you accept analytics and marketing cookies via our consent banner — if you decline, it is never loaded and no data is sent to Meta. You can also control ad personalisation in your Meta account settings, and learn more in Meta's Privacy Policy.
You can manage your cookie preferences through your browser settings. However, blocking essential cookies may prevent you from using some or all features of the Service.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes. For significant changes to how we process your personal data, we will notify you by email and require your explicit acknowledgement before the changes take effect.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@jobfast.co.uk.