Privacy Policy

Last updated: August 2026

Disclaimer: This privacy policy is a template and should be reviewed by a qualified legal professional before being relied upon. It is provided for informational purposes only and does not constitute legal advice.

1. Who we are

Job Search Toolkit ("we", "us", "our") is an AI-powered CV and interview preparation tool. This privacy policy explains how we collect, use, store, and protect your personal data when you use our service and our marketing site at jobsearchtoolkit.uk.

We are based in the United Kingdom and process data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

Account information

When you create an account, we collect your email address and basic profile information through our authentication provider, Clerk. This is necessary to provide you with a personal account and to contact you about the service.

CV and career content

When you use the brain dump feature, we collect and store the content you provide, including:

  • Work experience descriptions and achievements
  • Target role information and job search queries
  • CV bullets and STAR interview stories generated during conversations
  • Uploaded CV documents (if you use the CV parser feature)

Usage data

We use Cloudflare Web Analytics on our marketing site to understand how visitors find us — it is cookieless, privacy-friendly, and does not collect personally identifiable information. It is not yet active in production; when enabled, this section will apply without further change to its scope.

Our backend also records operational events — API errors, rate-limit hits, and AI call latency — to Cloudflare Workers Analytics Engine. These events do not contain your career content. The only pseudonymous identifier recorded is a one-way hash of the requesting IP address, used solely to detect abusive request patterns; it is never linked to your account, email, or career data. This data is retained for three months (see "Data storage and security" below).

Job search data

When you search for roles, we query the Adzuna job search API on your behalf. The search terms you enter (job title, location) are sent to Adzuna to return relevant job listings.

3. How we use your data

We use your data for the following purposes:

  • To provide the service: Your career content is used to generate CV bullets, interview stories, and gap analysis tailored to your target roles.
  • AI processing: Your brain dump content is sent to Anthropic's Claude API for natural language processing. This is how we extract structured CV bullets and STAR stories from your conversation. Anthropic does not use API inputs to train their models.
  • To improve the product: We may use aggregated, anonymised usage patterns to improve the service. We do not use your personal career content for this purpose.
  • To communicate with you: We may send you important service updates. We will not send marketing emails without your consent.

4. Data storage and security

Your data is stored using Cloudflare's infrastructure:

  • Database: Cloudflare D1 (SQLite-based, serverless database)
  • Hosting: Cloudflare Pages (global edge network)
  • Region: Data is processed at Cloudflare edge locations, with primary storage in EU/UK regions

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on all data.

Operational analytics events (see "Usage data" above) are stored in Cloudflare Workers Analytics Engine with a three-month retention period, after which they are automatically deleted.

5. Third-party services

We use the following third-party services to provide Job Search Toolkit:

  • Clerk — Authentication and account management. Clerk processes your email and login credentials. Clerk's privacy policy
  • Anthropic (Claude API) — AI processing of your brain dump content to extract CV bullets and interview stories. Anthropic's privacy policy
  • Adzuna — Job search API for market analysis and role listings. Search terms are sent to Adzuna. Adzuna's privacy policy
  • Cloudflare — Hosting, database, operational analytics (Workers Analytics Engine — see "Usage data" above), and privacy-friendly web analytics. Cloudflare's privacy policy

6. Data retention and deletion

We retain your data for as long as you have an active account. You can permanently delete your account and all associated career content at any time from within the app, under Account → Delete your account. Deletion is immediate: it removes your target roles, brain dump sessions, story bank items, gap analyses, job applications, tailored CVs, interview prep, and profile from our database in a single operation, and you will be asked to type "DELETE" to confirm before it proceeds.

If you are unable to access the app, you can also request deletion by emailing privacy@jobsearchtoolkit.uk as a fallback.

7. Cookies

Job Search Toolkit uses minimal cookies:

  • Authentication session cookie: Set by Clerk to maintain your login session. This is a strictly necessary cookie and does not require consent.
  • No tracking cookies: We do not use advertising or tracking cookies.
  • No analytics cookies: Cloudflare Web Analytics is cookieless and does not set any cookies.

8. Your rights

Under the UK GDPR, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can request deletion of your data (see section 6).
  • Right to data portability: You can request your data in a machine-readable format.
  • Right to object: You can object to processing of your data in certain circumstances.
  • Right to restrict processing: You can request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@jobsearchtoolkit.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been breached.

9. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice on the service. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

privacy@jobsearchtoolkit.uk