Privacy policy

Last updated 3 November 2026 · Zeylanica Ltd

This policy explains what personal data Jobuck collects, why, who sees it, how long we keep it and the rights you have. It covers job seekers, employers and anyone who visits jobuck.com or opens a Jobuck CV link.

1. Who we are

Jobuck is run by Zeylanica Ltd, a company registered in England and Wales. Zeylanica Ltd is the controller of the personal data described here.

Questions about this policy or your data: privacy@jobuck.com. Anything else: support@jobuck.com.

2. What we collect

Your account. When you sign in with Google we receive your name, email address and profile picture. We never see your Google password.

Job seekers. What you put in your profile: headline, summary, work experience, education, skills, languages, the jobs you are looking for (roles, places, job types, work modes, salary), your photo, the CVs you upload and your applications with any cover note.

Employers. Your company details and logo, the job ads you post (typed or uploaded as an image), the people you shortlist and your private notes on applicants, ad orders, invoices and bank transfer slips.

Payments. Card payments are taken by Stripe on its own secure page. Jobuck never sees or stores your card number; we receive the payment result, amount and a Stripe reference.

AI features. When you use Ask Jobuck, the writing helper, "Fill my profile from my CV" or image ads, the text, CV or image you choose is sent to our AI provider to produce a suggestion. We keep the questions you ask Ask Jobuck with your account, so we can improve the service and stop misuse; we do not keep its answers. We keep a record of each AI use (what kind, when, how much) to manage limits and costs.

Jobuck CV links. If you share a Jobuck CV link, each time someone opens it we record, for you as the CV owner: when, an approximate place (country, region and city worked out from the network address), the network provider, the device, browser and operating system, the site or app the link was opened from, and how long the CV was looked at. The full network address is not stored, only a shortened (masked) one. If the visitor is signed in to Jobuck, their name, role and company are shown to the CV owner. Visitors are told this on the CV page.

Job ad statistics. To show advertisers how their ads perform we count views, Apply presses and applications by channel, device and country, with a random visitor number kept in your browser. This does not identify you.

Notifications. Your email and push settings, the time zone and hour for your daily summary, the browsers or phones where you turned on push (a technical address from your browser and a device name), and a record of each email and push we send, including whether it was delivered.

Technical data. Our servers keep short-lived logs (network address, browser, the page asked for, errors) to keep Jobuck running and secure.

3. How we use it, and our legal reasons

UK data protection law needs a legal reason ("lawful basis") for each use:

To provide Jobuck to you (contract): your account, profile, CV, applications, job ads, payments, CV links and the notifications you asked for.
Legitimate interests: keeping Jobuck safe and free of fake jobs and spam, checking ads, counting ad and CV link views, improving our features, sending job alerts you can switch off at any time, and handling disputes. We weigh these against your rights and you can object (see "Your rights").
Legal obligation: keeping payment and invoice records, and answering lawful requests from authorities.
Consent: browser push notifications (your browser asks you first). You can withdraw consent at any time in Settings → Notifications.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who can see your data

Employers you apply to see your profile, the CV you send and your cover note. From then on they are responsible for your data as their own controller under data protection law.
People you send your CV link to see your Jobuck CV. You can switch a link off at any time.
Everyone can see live job ads, including the company details and any contact email the employer chose to publish.
Jobuck admins see what they need to run the service, check payments and ads, and help you.

We use these service providers, who handle data only on our instructions:

Google - sign-in with Google, and cloud hosting and file storage.
Our database host - stores Jobuck's data.
Anthropic (Claude) - the AI that reads CVs and image ads and writes suggestions. Under Anthropic's commercial terms, what we send is not used to train its models by default.
Stripe - card payments.
Our email delivery service - sends Jobuck emails.
Browser push services (for example Google, Apple, Mozilla, Microsoft) - deliver push notifications to your device.
An IP location service - turns a CV visitor's network address into an approximate place.

We may also share data if the law requires it, to protect people from harm or fraud, or if Jobuck is sold or merged (you would be told).

5. Data sent outside the UK

Some providers above store or process data outside the UK, for example in the United States or the European Economic Area. When that happens we rely on UK "adequacy" rules (such as the UK-US data bridge, where the provider has signed up) or on the UK International Data Transfer Agreement or Addendum, so your data stays protected.

6. AI and automated decisions

Jobuck's AI only makes suggestions: a draft text, profile details read from your CV, or job details read from an ad image. You review them and decide what to save or publish. Jobuck does not make hiring decisions and does not decide anything with legal or similarly significant effects about you by automated means alone. Employers decide whom to contact or hire.

Job alerts are chosen by matching new jobs to the preferences in your profile. You can change your preferences or switch alerts off at any time.

7. How long we keep it

Your account and profile: while your account is open.
When a job seeker deletes their account (Settings → Delete my account) we delete the profile, applications, CV designs and links with their view records, AI use records and questions, and notification settings and records. Uploaded files (CVs and photo) are unlinked from Jobuck at once; email privacy@jobuck.com if you also want them erased from our file storage. Copies in our backups are overwritten in their normal cycle.
Employer accounts hold business records (company, job ads, orders, invoices). To close one, email support@jobuck.com.
Payment and invoice records: 6 years, as UK tax law requires.
Job ad statistics contain no names and are kept for the ad's performance history.

8. Your rights

Under UK data protection law you can ask us to:

see the personal data we hold about you and get a copy;
correct data that is wrong or incomplete (most of it you can edit yourself);
delete your data;
limit how we use it, or object to uses based on legitimate interests;
move data you gave us to another service in a common format;
withdraw consent where we rely on it, such as push notifications.

Email privacy@jobuck.com. We answer within one month, and we may ask you to confirm who you are. It is free in most cases.

If you are unhappy with how we handled your data, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.

9. Cookies and browser storage

Jobuck has no advertising cookies and no third-party analytics. We store these small items in your browser:

Signed-in session (jobuckUserInfo) - keeps you signed in. Needed for Jobuck to work.
Your price country (jobuckPriceCountry) - remembers the country you picked on the pricing page.
Job ad statistics (jobuckVisitorId, jobuckLanding, jobuckRef) - a random number and the page you arrived on, so advertisers see visits and where they came from without knowing who you are.
CV link visits (jb_cvv cookie, only on Jobuck CV pages) - tells a CV owner whether a visit is someone coming back.
Your statistics choice (jobuckNoStats, jb_nostats) - remembers if you turned visit counting off.

Google sets its own cookies when you sign in with Google, and Stripe does on its payment page; their policies apply there.

Job ad statistics and CV visit cookies are only used for statistics. You can turn them off below, or by clearing your browser storage.

10. Age

Jobuck is for people aged 16 or over. We do not knowingly collect data from younger children. If you believe a child under 16 has an account, tell us at privacy@jobuck.com and we will delete it.

11. Keeping data safe

Data is sent over encrypted connections (HTTPS), access is limited to people who need it, and admin areas are open only to named Jobuck admins. No system is perfectly secure; if a breach puts you at high risk, we will tell you and the ICO as the law requires.

12. Changes to this policy

We will update this page when Jobuck changes how it uses data, and show the new date at the top. If a change matters to you, we will also tell you by email or in Jobuck before it applies.