Privacy Policy
Last updated: 10 March 2026
Contact: support@jobfast.co.uk
JobFast ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application and services (the "Service").
1. Information We Collect
To provide and improve our Service, we collect the following types of personal data:
- Account Information: Your name, email address, and password.
- User Content: CVs, work history, skills, education, career goals, and any other documents or information you upload.
- Usage Data: Information about how you interact with our Service, such as features used, clicks, and session logs. This helps us understand what is working and what is not.
- Cookie and Device Data: We use cookies and similar technologies to operate the service, as detailed in our Cookie Policy section below.
2. How We Use Your Data
Your data is used for the following purposes:
- To Provide the Service: We process your User Content to power our core features, including CV analysis and AI-generated outputs.
- To Secure Your Account: We use your account information to authenticate you and protect your account from unauthorized access.
- To Improve the Service: We analyze anonymized usage data to identify trends, fix bugs, and enhance features.
- To Provide Support: We may access your information to diagnose and resolve technical issues you report.
- AI-Generated Outputs: Your CV and career data is processed by our AI systems (powered by Google Gemini) to generate personalised feedback, optimised content, and coaching responses. You are responsible for reviewing and verifying any AI-generated content before submitting it to employers.
3. Data Sharing and Third-Party Services
JobFast does not sell your personal data. We only share data with trusted third-party service providers under strict data protection agreements. These services are essential for us to operate and include:
- Hosting, Storage & Authentication: Google Firebase / Google Cloud (firebase.google.com)
- AI Processing: Google Gemini API (ai.google.dev)
- Analytics: Google Analytics (analytics.google.com)
- Payment Processing: Stripe (stripe.com)
- Fraud Prevention: Google reCAPTCHA (google.com/recaptcha) — used to protect our platform from automated abuse. From April 2026, Google processes this data as a data processor under a Cloud Data Processing Addendum. Legal basis: Legitimate interests.
We may transfer and store data on servers located in other countries. Where required by law, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place for such transfers.
4. Data Security
We implement robust technical and organizational measures to protect your data. This includes:
- Encryption: Data is encrypted both in transit (using TLS) and at rest.
- Access Control: We enforce strict access controls to ensure only authorized personnel can access user data for legitimate purposes, like support and maintenance.
- Monitoring: We continuously monitor our systems for vulnerabilities and threats.
In the event of a security breach that affects your data, we will notify you in accordance with applicable laws.
5. Your Data Protection Rights
You have rights over your personal data. You can request to:
- Access: Receive a copy of the personal data we hold about you.
- Correct: Rectify any inaccurate or incomplete data.
- Delete: Erase your personal data from our systems.
- Export: Obtain a portable copy of your data.
- Object to Automated Decisions: Where we use automated processing to generate assessments or scores, you have the right to request that a human reviews any decision that significantly affects you.
To exercise these rights, please contact us at support@jobfast.co.uk. We may need to verify your identity before fulfilling a request.
6. GDPR, CCPA, and Global Compliance Statement
JobFast follows major global privacy standards, including GDPR, UK GDPR, CCPA, and other international data protection rules. This statement explains your rights and the controls JobFast provides.
Your Rights
Depending on your country or region, you may have the following rights:
- Access your personal data.
- Correct inaccurate or outdated data.
- Delete your data.
- Request a copy of your data in a portable format.
- Object to processing in certain cases.
- Restrict processing of your data.
- Withdraw consent where it is the basis for processing.
You can exercise these rights by emailing support@jobfast.co.uk. JobFast may need to confirm your identity before completing a request.
GDPR and UK GDPR
Under GDPR and UK GDPR, JobFast acts as a data controller for the personal data of individual users. When business clients use JobFast to process applicant data, JobFast acts as a processor.
JobFast processes personal data only when needed for service operation, feature delivery, account management, security, legal compliance, AI-powered content generation, and performance improvement. Access is limited to authorized staff and service providers. We use encryption and may transfer data internationally with required safeguards.
As a UK-based data controller, JobFast is registered with the Information Commissioner's Office (ICO). Registration number: [ADD ICO NUMBER HERE]
Legal Basis for Processing
JobFast processes data based on the performance of a contract, legitimate interest in providing the service, compliance with legal obligations, and consent for optional features. You may withdraw consent for optional features at any time.
Data Retention and Children’s Data
Account data is retained for the duration of your account plus 12 months following deletion. CV and application data is retained for the duration of your account and deleted within 30 days of account closure. Payment records are retained for 7 years in accordance with HMRC requirements. JobFast is not intended for users under 16, and any data found from users under this age is deleted.
7. Cookie Policy
We use cookies and similar technologies to operate and secure our Service. Cookies are small text files stored on your device.
- Essential Cookies: These are required for core functionality, such as logging in, session management, and security. The Service cannot function without them.
- Performance Cookies: These help us understand how you use the Service, allowing us to track usage, measure load times, and fix errors.
- Optional Cookies: These may be used for personalizing your experience.
Performance and optional cookies are only placed on your device after you have given your explicit consent via our cookie consent banner.
You can manage your cookie preferences through your browser settings. However, blocking essential cookies may prevent you from using some or all features of the Service.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes. For significant changes to how we process your personal data, we will notify you by email and require your explicit acknowledgement before the changes take effect.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@jobfast.co.uk.