Privacy Policy
Last updated 8 November 2026
JobLens ("we", "us") helps people improve their CVs, find jobs and prepare for interviews. This policy explains what personal data we collect, why, how long we keep it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data described here. Contact us at support@joblens.ai.
1. What we collect
- Account data: your name, email address and password (stored as a one-way hash), and whether your email is verified.
- Content you provide: CVs you upload or paste, job descriptions, notes, tracked and saved jobs, interview dates, and documents the service generates for you (optimized CVs, cover letters, supporting statements, interview questions).
- Subscription and payment data: your plan, billing period and Stripe customer and subscription identifiers. Card details are collected and stored by Stripe, never by us.
- Usage data: which features you use and when, API request logs (endpoint, status, timing, IP address), device and browser type, and approximate location derived from IP address.
- Communications: emails you send us, support conversations and your email preferences.
2. Why we use it (lawful bases)
- To provide the service you signed up for — scoring and optimizing CVs, generating documents, job search and tracking (performance of a contract).
- To process payments and manage subscriptions (contract; legal obligation for financial records).
- To send service emails such as sign-in links, receipts and security notices (contract).
- To send reminders, tips and summaries about your job search (legitimate interests; you can opt out at any time from Settings → Notifications or the link in every email).
- To keep the service secure, prevent abuse and moderate content (legitimate interests; legal obligation).
- To understand how the service is used and improve it, using aggregated or pseudonymised data where possible (legitimate interests).
3. How AI processing works
When you compare or optimize a CV, generate a cover letter or supporting statement, or prepare for an interview, the text you provide is sent to our AI provider (OpenAI) to produce the result. We use API services whose terms prohibit the provider from using your content to train its models. We do not use your CV content to train models either. Generated content is stored in your account history so you can return to it, and is deleted when you delete the item or your account.
4. Who we share data with
We use a small number of service providers who process data on our behalf under contracts that require them to protect it:
- OpenAI (AI text processing, United States, with appropriate safeguards for international transfers).
- Stripe (payments and subscriptions).
- Brevo (email delivery).
- Railway and Vercel (hosting and infrastructure, including databases).
- Reed.co.uk (job search results; your search terms are sent, your identity is not).
- Gist (in-app messaging and support chat).
- We never sell your personal data and never share your CV with employers or recruiters. We may disclose data if required by law or to protect our rights or users' safety.
5. How long we keep it
- Account and content data: for as long as your account is active. If you delete your account, your data is removed within 30 days, except where we must keep records (for example payment records for six years under UK tax law).
- Request and security logs: up to 12 months.
- Email event records (what we sent and when): up to 24 months.
- Inactive accounts: we may contact you before deleting an account that has been unused for more than two years.
6. Your rights
Under UK GDPR you can ask to access, correct, delete or export your personal data, restrict or object to processing, and withdraw consent where we rely on it. You can do most of this yourself: edit your details in Settings → Profile, change email preferences in Settings → Notifications, and delete your account from Settings → Privacy. For anything else email support@joblens.ai and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
7. Security
Data is encrypted in transit (TLS) and at rest. Passwords are hashed. Access to production systems is restricted to authorised personnel and logged. No system is perfectly secure; if we become aware of a breach that affects you we will notify you and the ICO as the law requires.
8. Children
JobLens is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe a child has created an account, contact us and we will remove it.
9. Changes
We will post any changes here and update the date above. If a change materially affects how we use your data we will tell you by email or in the app first.