Privacy notice
This notice describes what Job Alerts actually does today. You can browse the whole site without an account; if you create one, this explains what we store.
If you create an account
We store your email address, your password in an irreversibly hashed form, and anything you choose to add to your profile: name, headline, location, work authorisation, salary expectation, skills and a short description. We also store the jobs you save, the applications you send, the message you attach to an application, and the searches you save as alerts. You can edit or clear any of it from your profile page.
Who can see your profile
Your profile setting controls this, and the default is private. Nothing about you is shown publicly. If you choose to be discoverable, verified employers can find you in the candidate database: only owners, admins, recruiters and hiring managers of a verified company, never the open internet. You can opt out of the candidate database entirely, and you can block individual companies. Every search that returns you and every time someone opens your profile is logged, and you can read that log on your privacy page. Administrators of Job Alerts can see account records for support and abuse investigation.
When you apply for a job
The employer that posted the job sees your application, the answers you gave to their questions, the resume you attached and any private notes, ratings and tags their team adds about you. Their team can download the applicants for a job as a spreadsheet; those downloads are limited and recorded in our audit log.
Signing in with Google
If you choose Google sign-in, Google tells us your email address and basic profile details so we can create or match your account. We do not receive your Google password and do not post anything to your Google account.
Information that stays in your browser
Your cookie choice is stored in your browser. The resume builder keeps a working copy there too, and also saves your draft and named versions to your account so you can return to them on another device. Clearing your browser data removes the local copies only.
Cookies and analytics
Signing in sets a cookie that keeps you signed in; it is necessary for the account to work. Analytics and marketing cookies are optional, are off unless you switch them on, and none are set today. Your choice is stored in your browser, and if you are signed in it is also recorded against your account with the date and policy version. You can change it any time on your security and privacy page.
Resume uploads
Resumes you upload are stored in private file storage on your account and are only released through short-lived links to you and to employers you have applied to. We read the text out of the file so it can be matched and checked. Uploads are passed to a virus scanner where one is configured, and a file that fails the check is deleted and refused. You can delete a resume at any time from your profile.
Sample listings
While this preview is running, some jobs and companies shown are examples we created ourselves rather than real openings. Applications you send to a real employer are visible to that employer's team; applications against sample listings simply stay on your account.
Notifications
We show notifications inside the site — application updates, job-alert matches and messages from employers. Email delivery is switched off until a verified sending address is in place, so nothing is emailed to you today other than the sign-in and password messages the account system sends.
How long we keep things
Automated housekeeping runs daily and clears out expired records such as old sign-in counters, abuse counters and stale access logs. Applications and profile data stay until you delete them or delete your account.
Your rights
From your security and privacy page you can download everything we hold about you as a file, and delete your account permanently, which removes your profile, saved jobs, applications and alerts straight away. You can also change your password, which requires your current one, and switch on optional two-step verification. Sensitive account actions are written to an internal audit log that only administrators can read.
What is still planned
Email delivery, interview scheduling, direct messaging and paid plans are not in service yet.
Contact
We do not yet publish a data protection contact address. One will be added here before Job Alerts is promoted beyond this preview.
This notice describes the preview as it stands today. It will be reviewed by a qualified adviser and expanded before accounts, applications, or payments go live.