Skip to content
Jobsmith

Privacy policy

Last updated 10 October 2026. The Jobsmith team (“we”) runs Jobsmith and is the controller of the personal data described here. Resumes are personal, so this page tries to be plain and specific.

The short version

  • We use your data only to run Jobsmith for you.
  • We never sell it, never show it to other users, and never use it to train AI models.
  • Your resume text is sent to an AI provider to do the work you ask for, and nowhere else.
  • You can download everything we hold, and delete your account (and every stored file) whenever you like, in Settings.

What we collect

  • Account: your email address, and your name and profile picture if you sign in with Google.
  • What you give us: your resume file and the structured version we create from it, your profile and preferences (target roles, countries, salary range, work authorisation), your answers to our questions, job descriptions and links you add, your tailored resumes, application tracker entries and notes, interview-prep answers and the feedback on them.
  • Credits and payments: your credit balance and history, and for purchases the amount, pack and Paystack reference. We never see or store card details.
  • Technical data: a sign-in session cookie, rate-limit counters, and server logs that record events and error types only. Logs never contain your resume or other free text.
  • Usage metadata: for each AI request, which feature ran, the model used, how many tokens and how long it took, linked to a pseudonymous ID rather than your name or email. No resume text or prompts.

Why we use it, and our legal basis

  • To provide Jobsmith, including reading and tailoring your resume, tracking applications, preparing you for interviews and sending the emails you ask for (contract).
  • To take payments and keep records of them (contract and legal obligation).
  • To keep the service secure, prevent abuse and limit costs, and to measure how well AI features run (legitimate interests).
  • Reminder emails only if you turn them on (consent). You can turn them off any time.

Who else handles your data

We use these providers to run the service. They process data on our behalf and only for that purpose.

  • AI providers (currently OpenAI, and possibly Anthropic or Google): receive the text needed for each AI request (for example your resume and a job description). We ask them not to retain it or train on it where their settings allow, and we don’t send your name or contact details unless they are part of the text you’re asking us to process.
  • Vercel: hosts the app (London region).
  • Neon: database, in the UK (London). Your structured resume and account data live here.
  • Cloudflare R2: stores the resume files you upload and the PDF and DOCX files we generate.
  • Resend: sends sign-in and reminder emails.
  • Paystack: processes payments.
  • Langfuse (EU): receives the usage metadata above for monitoring cost and reliability. It does not receive resume text or prompts.
  • Job boards (Arbeitnow, Remotive, Remote OK, Himalayas): when you search for jobs, only the keywords you type are sent to them, never your resume or profile.
  • Google: if you choose “Sign in with Google”.

We may disclose data if the law requires it. We don’t sell personal data or share it for advertising.

Where it is processed

Our app and database are hosted in the UK, and files are stored on Cloudflare’s network. AI providers and some other services may process data in other countries, including the United States, and the service is operated from Nigeria. Where data leaves the UK or EEA we rely on the providers’ standard contractual clauses or equivalent safeguards.

How long we keep it

Until you delete it. Deleting your account removes your database records and every file we stored for you, including payment records linked to your account. Backups clear within a short period afterwards. Sign-in sessions expire automatically, and rate-limit counters expire on their own.

Cookies and local storage

We use only what the service needs: a sign-in cookie, your light/dark choice, unsent drafts in your browser (cleared when you sign out), and, if you install the app, a copy of some pages so you can read them offline (also cleared when you sign out). No advertising or tracking cookies, so there is no cookie banner to dismiss.

Your rights

You can access, correct, delete and take a copy of your data, object to or restrict some processing, and withdraw consent. Most of this you can do yourself: Settings → Your data lets you download everything we hold as a file and delete your account. For anything else, or to complain, email us. If you’re in the UK or EU you can also complain to your data protection authority, and in Nigeria to the Nigeria Data Protection Commission.

Security

Everything is encrypted in transit. Files are private and shared only through short-lived links. People’s data is kept separate by account. Your own AI keys (admin accounts only) are encrypted at rest. No system is perfectly secure; if a breach affects you we’ll tell you as the law requires.

Children

Jobsmith is not for anyone under 16 and we don’t knowingly collect their data.

Changes

If we change this policy in a way that matters we’ll tell you in the app or by email. See also our Terms of use.

Contact

Privacy questions or requests: [email protected].