Privacy Policy

1. Who we are

Recruitment Godzy is operated by JustEng Ltd. We are the data controller for personal data collected through this platform. Contact: hello@recruitmentgodzy.com.

2. Data we collect

We collect and process the following data:

• Account data: email address, name, organisation details
• Billing data: subscription plan, payment status (card details held by Stripe, not us)
• CV data: candidate CVs and extracted information uploaded by you
• Usage data: tool usage counts, run history
• Technical data: IP address, browser type, log files

3. How we use your data

• To provide and operate the Service
• To process CV and vacancy content through AI models (OpenAI)
• To manage your account and subscription via Stripe
• To send transactional emails (e.g. invitations, receipts)
• To improve the Service through aggregated, anonymised analytics

4. Candidate data

You are the data controller for candidate personal data you upload. We process it as your data processor. Candidate CV data is processed via OpenAI's API under OpenAI's data processing agreement, which prohibits using API inputs to train models. Candidate data is stored in Cloudflare R2 and Supabase with appropriate security controls and deleted within 90 days of account closure.

5. Third-party services

We use the following sub-processors:

• Supabase — authentication and database (EU)
• Cloudflare R2 — file storage
• OpenAI — AI content generation (US, under DPA)
• Stripe — payment processing (US, under SCCs)
• Railway / Vercel — application hosting

6. Data retention

Account data is retained while your subscription is active and for 30 days after cancellation. CV and vacancy run data is retained for the duration of your subscription. You may request deletion at any time by contacting us.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, or restrict processing of your personal data. To exercise any of these rights, contact us at hello@recruitmentgodzy.com. You also have the right to lodge a complaint with the ICO (ico.org.uk).

8. Cookies

We use only essential cookies required to maintain your session. We do not use analytics or advertising cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice. Continued use after changes constitutes acceptance.