Privacy Policy

Last updated: 9 June 2026

1. What we collect

2. How we use it

3. Legal basis (EEA/UK)

We process your data based on (a) your consent (marketing emails, optional fields), (b) contract performance (delivering the Service you requested), and (c) our legitimate interests (security, product improvement).

4. Sharing

We share data only with processors needed to run the Service: our cloud host, database/auth provider, AI gateway (for CV generation), payment processor (Stripe, for Pro), and email delivery provider. We do not sell your data.

5. Retention

We retain lead emails until you ask us to delete them or unsubscribe and request deletion. CV text submitted to the free tool is processed in-memory and not persisted beyond what is needed to return your result; we retain only the email and the job URL submitted.

6. Your rights

You can request access, correction, deletion, export, or restriction of your personal data, and you can withdraw marketing consent at any time, by emailing privacy@jobflow.app. EEA/UK residents may also lodge a complaint with their local data protection authority.

7. Cookies

We use only the cookies strictly necessary to keep you signed in and to remember your session. No third-party advertising cookies.

8. Security

Data is transmitted over TLS and stored with a reputable cloud provider with row-level access controls. No system is perfectly secure — please use a strong, unique password.

9. Changes

We'll update this page if our practices change and notify you of material changes by email or in the app.

10. Contact

Privacy questions: privacy@jobflow.app