YOUR INFORMATION. YOUR CHOICES.

Privacy at JobCheckPoint

Draft notice · 30 October 2026 · Requires operator details and jurisdiction-specific legal review before public launch.

What JobCheckPoint stores

Bookmarks and theme preferences can be stored in your browser. Signed-in profile, application and consent records are stored in our private PostgreSQL database. No advertising tracker is installed.

Server logs and visit statistics

Like most websites, our web server records each request: the page, time, your network (IP) address, browser and device type, language and the referring page. We use these logs for security and to count visits, see which pages are used and how long people stay, and estimate the visitor’s country and city from the network address using a database held on our own server. This uses no cookies, the results are only available to the JobCheckPoint team, and nothing is shared with advertisers or analytics companies. We never log passwords or sign-in cookies. Logs are kept for a limited time and deleted automatically.

AI writing help in the CV builder (optional)

If you ask for AI suggestions in the CV builder and tick the consent box, the section you chose (your profile, or the lines of one role, plus a job advert if you pasted one) is sent to our AI provider, Groq, Inc. (United States), to generate suggestions. Email addresses, phone numbers and links are removed first. We don’t store the text or the suggestions; we keep only a log of request counts, sizes and outcomes (never the text) to prevent abuse. Groq states that it does not retain inference data by default; transfers to the United States rely on standard contractual clauses. Nothing is sent unless you press an AI button.

Connected account data

For signed-in accounts, account identity, profile information, saved searches, applications and consent history are stored in PostgreSQL. CV uploads require an enabled feature flag and enter private quarantine for malware scanning. Skills and experience are used to compare listed job requirements; sensitive personal characteristics are not ranking inputs.

Sharing and control

Candidate information is private by default. A specific recipient, purpose and expiry limit access grants. You can revoke grants, export your records or request deletion in privacy settings. External application links lead to employers’ own services and privacy policies.

Retention and service providers

CV metadata has a 90-day retention deadline enforced by the privacy worker. Other retention schedules, lawful bases, controller contact details, hosting regions, international transfers and approved processors must be completed by the platform operator before live collection. No third-party AI processing is enabled by default.

Questions and rights

The operator must provide a monitored privacy contact and applicable rights/request procedures before launch. This draft does not assert GDPR, UK GDPR, UAE PDPL or Canadian-law compliance.