Privacy Policy

Last updated: February 2026

Disclaimer: This privacy policy is a template and should be reviewed by a qualified legal professional before being relied upon. It is provided for informational purposes only and does not constitute legal advice.

1. Who we are

Job Search Toolkit ("we", "us", "our") is an AI-powered CV and interview preparation tool. This privacy policy explains how we collect, use, store, and protect your personal data when you use our service at app.jobsearchtoolkit.uk and our marketing site at jobsearchtoolkit.uk.

We are based in the United Kingdom and process data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

Account information

When you create an account, we collect your email address and basic profile information through our authentication provider, Clerk. This is necessary to provide you with a personal account and to contact you about the service.

CV and career content

When you use the brain dump feature, we collect and store the content you provide, including:

  • Work experience descriptions and achievements
  • Target role information and job search queries
  • CV bullets and STAR interview stories generated during conversations
  • Uploaded CV documents (if you use the CV parser feature)

Usage data

We collect anonymous usage analytics through Cloudflare Web Analytics to understand how visitors use our marketing site. This data includes page views, referrer information, and device/browser type. Cloudflare Web Analytics is privacy-friendly — it does not use cookies, does not collect personally identifiable information, and is fully compliant with GDPR without requiring cookie consent.

Job search data

When you search for roles, we query the Adzuna job search API on your behalf. The search terms you enter (job title, location) are sent to Adzuna to return relevant job listings.

3. How we use your data

We use your data for the following purposes:

  • To provide the service: Your career content is used to generate CV bullets, interview stories, and gap analysis tailored to your target roles.
  • AI processing: Your brain dump content is sent to Anthropic's Claude API for natural language processing. This is how we extract structured CV bullets and STAR stories from your conversation. Anthropic does not use API inputs to train their models.
  • To improve the product: We may use aggregated, anonymised usage patterns to improve the service. We do not use your personal career content for this purpose.
  • To communicate with you: We may send you important service updates. We will not send marketing emails without your consent.

4. Data storage and security

Your data is stored using Cloudflare's infrastructure:

  • Database: Cloudflare D1 (SQLite-based, serverless database)
  • Hosting: Cloudflare Pages (global edge network)
  • Region: Data is processed at Cloudflare edge locations, with primary storage in EU/UK regions

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on all data.

5. Third-party services

We use the following third-party services to provide Job Search Toolkit:

6. Data retention and deletion

We retain your data for as long as you have an active account. If you wish to delete your account and all associated data, you can request this by contacting us at [email protected].

Upon receiving a deletion request, we will:

  • Delete your account and all associated career content within 30 days
  • Remove your data from our database and any backups
  • Confirm deletion by email

7. Cookies

Job Search Toolkit uses minimal cookies:

  • Authentication session cookie: Set by Clerk to maintain your login session. This is a strictly necessary cookie and does not require consent.
  • No tracking cookies: We do not use advertising or tracking cookies.
  • No analytics cookies: Cloudflare Web Analytics is cookieless and does not set any cookies.

8. Your rights

Under the UK GDPR, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can request deletion of your data (see section 6).
  • Right to data portability: You can request your data in a machine-readable format.
  • Right to object: You can object to processing of your data in certain circumstances.
  • Right to restrict processing: You can request that we limit how we use your data.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been breached.

9. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice on the service. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions about this privacy policy or how we handle your data, contact us at:

[email protected]