Privacy Policy
This Privacy Policy describes how we collect, use, and protect your personal information when you use our recruitment platform. By using our services, you agree to the collection and use of information in accordance with this policy.
We are committed to protecting your privacy and ensuring the security of your personal data. This policy explains what information we collect, why we collect it, and how we use it to provide you with the best possible recruitment experience.
Information We Collect
We collect various types of information to provide and improve our services:
Personal Information
- Full name and contact details
- Email address and phone number
- Professional experience and qualifications
- Educational background
- Location and work preferences
Technical Information
- IP address and device information
- Browser type and version
- Usage patterns and preferences
- Cookies and tracking data
- Platform interaction data
Resume Data: When you upload your resume, we use AI to extract and process information to improve job matching accuracy. You will always have the opportunity to review and confirm this information.
How We Use Your Information
We use your information for the following purposes:
Service Provision
To provide recruitment and job search services, including job recommendations, application processing, and account management.
AI Enhancement
To improve our AI assistant's ability to optimize job applications and provide personalized recommendations.
Communication
To send you relevant job alerts and platform updates, and to answer the questions you send us.
Platform Improvement
To analyze usage patterns, improve our services, and develop new features based on user needs.
Information Sharing and Disclosure
We may share your information in the following circumstances:
- With Employers: When you apply for jobs, your resume and application information is shared with relevant employers.
- Service Providers: With trusted third-party services that help us operate our platform (email services, analytics, etc.).
- Legal Requirements: When required by law, regulation, or legal process.
- Business Transfers: In connection with mergers, acquisitions, or asset sales (with user notification).
Data Security
We implement comprehensive security measures to protect your information:
Technical Safeguards
- End-to-end encryption for data transmission
- Secure server infrastructure
- Regular security audits and testing
- Multi-factor authentication options
Operational Safeguards
- Access controls and employee training
- Regular data backups
- Incident response procedures
- Privacy impact assessments
Gmail: sending applications uses Google's OAuth authorisation. We never see or store your Google password. What we hold is a refresh token, encrypted at rest, carrying only the permission to send mail as you.
Your Privacy Rights
You have the following rights regarding your personal information:
Access & Control
- Access your personal data
- Update or correct information
- Download your data
- Delete your account
Privacy Controls
- Opt out of marketing emails
- Restrict data processing
- Object to automated decisions
- File privacy complaints
To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within 30 days.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for basic platform functionality, account authentication, and security.
Analytics Cookies
Help us understand how users interact with our platform to improve services.
Preference Cookies
Remember your settings and preferences for a personalized experience.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.
Data Retention
We retain your information for as long as necessary to provide our services:
- Active Accounts: Information is retained while your account is active and for a reasonable period thereafter.
- Deleted Accounts: Most data is deleted within 90 days, with some information retained for legal or business purposes.
- Legal Requirements: Some data may be retained longer to comply with legal obligations.
Children's Privacy
Our platform is designed for users aged 16 and older. We do not knowingly collect personal information from children under 16.
If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information. If you believe we have collected information from a child under 16, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws.
When we transfer your data internationally, we implement appropriate safeguards such as standard contractual clauses and adequacy decisions to protect your information.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
How We Notify You
- Email notification for significant changes
- Platform announcement for minor updates
- Updated "Last modified" date on this page
Continued use of our platform after updates constitutes acceptance of the revised policy.
Sending applications and Gmail access
If you choose to have JobExpress send applications for you, you authorise a Gmail account of your choice through Google. That account does not have to be the one you sign in to JobExpress with, and the permission is limited to sending email in your name.
- We use this permission only to send the applications you have confirmed one by one (your CV and cover letter) to the employer address.
- We do not read your inbox and do not request permission to read mail.
- The authorisation credentials are stored encrypted on our servers. You can disconnect the account at any time in your settings, and the credentials are deleted immediately.
- Every email sent for you is recorded in your application history, so you can always see who it went to and when.
Google data policy: JobExpress's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A parent account can generate a one-time authorisation link for their child, who completes the Gmail authorisation on their own device. The parent never sees the child's Google credentials.
Account role, phone number and payment details
Student and parent accounts
You choose a student or parent role when you register. The role is stored on your account and shapes how we talk to you. A parent account handles a child's job-search information, and the parent is responsible for having the child's consent.
Phone sign-in
If you register with a phone number, we store the number to sign you in and send verification codes through an SMS provider. A phone-registered account is given an internal placeholder email address that receives no mail; you can add a real email address for notifications in your settings.
Payment details
Payments are processed by Stripe (including WeChat Pay and Alipay), a third-party payment provider. We do not store card numbers or payment account details; the provider receives only the order reference and amount. We keep order records for reconciliation and support.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
General Inquiries
Email: [email protected]
Response Time: Within 48 hours
Quick Response: For urgent privacy concerns, mark your email as "Urgent - Privacy" for priority handling within 24 hours.
This Privacy Policy is governed by the laws of the United Kingdom.
© 2024–2026 Careertuner Limited. All rights reserved.
