Privacy policy
Last updated 2026-10-13. Data controller: Joshua Harty, trading as Jobs Unfiltered, United Kingdom. Contact: privacy@jobsunfiltered.com.
Short version: we hold the minimum, encrypt what matters, delete on a schedule, publish only aggregates, and you can take or destroy all of it whenever you like.
What we collect and why
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Email, name, password hash, timestamps of joining, verifying and logging in, terms acceptance | Run your account; stop fraud and bots | Contract; legitimate interests |
| Candidate profile: headline, location, skills, summary, experience, salary hopes, links, one PDF CV | Let you apply and let companies you apply to assess you | Contract |
| Applications: job, your note, a copy of your CV at the time, status history | Run the application; show both sides where it is; compute honest statistics | Contract; legitimate interests (transparency) |
| Messages between you and a company | Private communication about an application or intro | Contract |
| "Discoverable" anonymous card (headline, skills, location, salary hopes; no name, no CV) | Let companies request an intro | Consent (off by default, withdraw any time in Settings) |
| Process ratings (score, three yes/no answers, optional private comment) | Aggregate respect score per company (shown only once 3+ ratings exist); comments are read only by Jobs Unfiltered | Consent |
| CV scan results (whether hidden text or injection phrases were found, and the text found) | Protect employers from manipulated CVs; keep hiring fair | Legitimate interests |
| Written offers (pay, start date, contract, hours, notes) and your answer | So both sides have the terms in writing | Contract |
| Onboarding checklist (tasks, dates, first-day details). Never contracts, ID or bank details | Help you and your new employer get from yes to day one | Contract |
| 30- and 90-day check-ins (three yes/no answers, a score, an optional private comment) | Public “as advertised” score per company, shown only once 3+ exist; comments read only by Jobs Unfiltered | Consent |
| Company profile and membership; Stripe customer and subscription IDs | Billing and verification | Contract; legal obligation (tax records) |
| Server logs: IP address, user agent, URL, timestamp, security events | Security, rate limiting, debugging | Legitimate interests; kept 30 days |
We don't use tracking pixels, advertising identifiers, third-party analytics or social plugins. The only cookies are the session and CSRF cookies needed to log in, so there's no cookie banner.
Who sees what
- Your profile and CV: only a company you applied to, or whose intro you accepted. Nobody else, including other candidates.
- Your anonymous card, if you turn discoverability on: employer accounts, without your name, CV, summary or links.
- Messages: the two parties only. Staff can see that a message exists, not its contents.
- If you accept a written offer and tick “share my email”, that employer receives your email address for onboarding. Untick it and they don't.
- Employers can sync applications into their own HR systems through our API. The data is the same as what they see on Jobs Unfiltered (never your email unless you shared it). Once in their systems they are responsible for it under UK GDPR, and our terms only let them use it to recruit and onboard for the role.
- Public: company track records (reply rate, reply time, ghost rate, roles filled, respect score) and platform-wide totals. These are aggregates and never identify a person.
- We never sell or share personal data with advertisers, data brokers or recruiters.
Processors we use
- Railway (hosting, database, file storage).
- Stripe (payments; receives your name, email and card details directly; we never see the card).
- An email provider for verification and account emails (address and message content).
Each is bound by a data processing agreement. Data may be processed outside the UK by these providers under UK-approved safeguards (adequacy regulations or standard contractual clauses).
How it's protected
- CVs are encrypted at rest (AES via Fernet) with a key held only in the server environment, never in the database or code.
- Uploaded PDFs are rebuilt on arrival: scripts, actions, forms, links and embedded files are removed. Hidden text is detected and shown to the employer.
- Files are served only through authenticated, permission-checked requests, in a sandbox that stops a PDF running anything.
- HTTPS only with HSTS, strict Content-Security-Policy, Argon2 password hashing, rate-limited logins.
- Admin tooling cannot display CVs, application notes or message contents.
How long we keep it
- CV copies attached to finished applications: deleted 90 days after the decision. The status history stays.
- Messages: deleted a year after the application finished or the intro was declined.
- Inactive candidates: after 18 months without logging in, CV and summary are removed and discoverability is switched off.
- Deleted accounts: profile, CV, messages and name are removed immediately. Applications stay as anonymous rows for up to 2 years so job counts stay honest, then go.
- Billing records: 6 years (HMRC requirement), held by Stripe.
- Check-in comments: deleted after a year (the anonymous yes/no counts remain).
- Webhook delivery records (which may include your name and application status): 30 days.
- Server logs: 30 days.
Your rights
- Access and portability: download everything as JSON, any time.
- Erasure: delete your account in Settings. Immediate and irreversible.
- Rectification: edit your profile or company any time.
- Object, restrict, withdraw consent: turn discoverability off in Settings, or email us.
- Complain: to us first at privacy@jobsunfiltered.com; you can also complain to the Information Commissioner's Office at ico.org.uk.
We answer requests within one month. We don't make automated decisions with legal effects about you: fit scores shown to employers are explained, based only on what you and the company wrote, and a human decides.
Children
Jobs Unfiltered is for people 16 and over. We don't knowingly hold data about anyone younger; tell us and we'll delete it.
Changes
We'll post changes here and email account holders about anything material, 30 days before it applies.