Privacy Policy

This policy explains how TechnoJobs collects, uses and protects personal data. It applies to jobseekers, employers, recruiters and visitors.

The data controller is TechnoJobs. Our company details are published here before we take any payment. We process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact for anything in this policy: our support form.

Data you give us: account details (name, email), your candidate profile, your CV and the information in it, applications you submit (including optional equality-neutral details you choose to include), job alerts you set up, messages to support, and, for employers, company and billing details.

Data created by using the Service: application and purchase records, credit usage, sign-in and security events, server logs, and records of clicks through to other job sites (IP addresses, which we store only as one-way hashes in analytics and click records). With your consent only, first-party usage analytics: an anonymous identifier cookie and events such as job views and apply clicks: see the Cookie Policy. We run no third-party advertising or tracking scripts.

When you upload a CV we parse it (extracting skills, roles and history) and compute an embedding, a numerical representation used for matching, so search and match features work. Parsing can be wrong; anything important is shown to you and correctable.

To run your account and deliver the Service (showing listings, processing applications, delivering alerts you asked for, fulfilling employer purchases): performance of a contract.

To keep the platform secure and honest (sign-in protection, rate limiting, abuse and fraud prevention, audit trails of CV access and of AI-agent actions, counting clicks through to other job sites and refusing automated ones): legitimate interests (protecting the Service and its users), and legal obligation where applicable.

To measure and improve the Service with first-party analytics, and to record AI-feature usage telemetry: consent, given (or refused) on the cookie banner and changeable any time via "Cookie settings".

To send you job alerts and application updates you subscribed to: performance of a contract; every email carries a working unsubscribe. We do not send marketing without asking first, and we never sell personal data.

CVs live in private storage, never at a public URL. Access is permission-checked on every request and every recruiter access of a CV is recorded in an audit log you can ask about.

An application shares its CV and details with that advertiser only. A CV on your profile appears in recruiter CV search only if you switch CV search on in your dashboard. It is off by default and you can switch it off at any time. While it is on, recruiters see an anonymised preview and can unlock the full document (including contact details) with paid credits, under terms that restrict use to genuine recruitment.

Some features process your data with AI models: CV parsing and match scoring, natural-language search, application drafting, interview preparation, the Copilot assistant, and, for employers, advert writing and advisory applicant ranking. Where a feature sends text (for example CV or job text) to our AI provider, Anthropic, it does so under an agreement that prohibits using it to train their models. Every AI call runs through our own gateway with rate limits, spend caps and prompt-injection defences.

AI on TechnoJobs is advisory by design and we make three structural promises: no AI ranking ever hides a candidate or application from a human; AI never unpublishes or rejects anything (moderation flags go to humans); and AI-drafted messages are sent only when a human chooses to send them. We do not make decisions producing legal or similarly significant effects about you by solely automated means.

Employers and recruiters receive what you send them (applications) or unlock (profile CVs), as described above, and act as independent controllers of it.

Service providers process data for us under contract: Vercel (hosting and content delivery), Neon (managed Postgres database, hosted in London/eu-west-2), WorkOS (authentication), Stripe (payments: we never hold card numbers), Resend (transactional email), Anthropic (AI features), and optionally Voyage AI (embeddings). Public job listings (never candidate data) are shared with Google for jobs indexing. This policy is updated when that list changes.

We disclose data where the law requires, and in a business transfer your data moves with the Service under this policy's protections.

Some adverts on TechnoJobs are applied for on another UK job site. We are not told who the advertiser is, so these adverts name no employer.

When you press Apply on one of these adverts you continue on that site, and you give it your details and CV yourself. We pass nothing about you to it: no name, no email address, no CV and no TechnoJobs account details. The link only tells that site that you came from TechnoJobs, and we are paid a fee when someone registers there that way.

From then on that site's own privacy policy covers what you give it. We log each such click on our side, with or without analytics cookies: the advert, the time, a one-way hash of your IP address and your browser type, so we can count registrations and stop automated clicks. No cookie is set for this, and the record is deleted after 13 months.

Our database and CV storage are hosted in the United Kingdom (London region). Some providers (for example Anthropic and Stripe) process data in the United States; where personal data leaves the UK we rely on adequacy regulations or the UK International Data Transfer Addendum/Agreement with the provider.

We keep data on a published, automated schedule: profile CVs are deleted after 5 years of account inactivity; applications are anonymised 90 days after they are rejected or the job closes: your name, contact details, cover note and CV are removed, and any CV file attached only to that application is deleted, while the employer keeps the bare fact that an application was received; unconfirmed alert data is deleted after 7 days; order and receipt records are kept 6 years to meet tax law. Security and audit logs are kept only as long as needed for their protective purpose.

These are running deletion jobs, not aspirations: the retention sweeps are automated and their runs are logged.

You have the rights UK GDPR gives you: access (a copy of your data), rectification, erasure, restriction, objection, portability, and withdrawal of consent where processing relies on it. Export and erasure are self-service from your dashboard and run without waiting on us; anything else, use our support form and we respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to fix it first.

Cookies are covered by their own honest inventory in the Cookie Policy, and your choices are changeable any time via the "Cookie settings" link in the footer.

When this policy changes materially we update the date above and flag the change on the site. Questions about this policy: our support form.