Privacy Policy
Last updated: 30 July 2026
This policy explains what personal data we collect when you use JobTailor AI, why we collect it, who we share it with, and the rights you have over it.
1. Who we are
JobTailor AI (the “Service”) is operated by VOLODS LTD, a company registered in England and Wales under company number 16149306, with its registered office at 29 Rosemary Avenue, Grimsby, England, DN34 4JN (“we”, “us” or “our”).
We are the data controller for the personal data described in this policy. If you have any questions about it, contact us at khan@volods.com.
2. What data we collect
| Category | What it includes |
|---|---|
| Account data | Your email address, an optional display name, and an encrypted password hash. We never see or store your password in readable form. |
| Resume content | Everything you add to a resume: name, contact details, work history, education, skills, projects and any other text you enter or upload. |
| Job data | Jobs you save: title, company, location, salary, URL, status, notes and the job description text. |
| Usage data | Counts of AI generations, resumes tailored and jobs saved each month, used to apply plan limits, plus daily activity counts shown in your dashboard. |
| Technical data | IP address, browser type and server log data generated when you use the Service. |
We do not ask for special category data (such as health, ethnicity or religious beliefs). Please avoid including such information in your resume unless it is necessary — if you do, you are choosing to provide it and we process it only to deliver the Service to you.
3. Why we use your data, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating and running your account | Performance of a contract |
| Generating match scores, tailored resumes, cover letters and interview questions | Performance of a contract |
| Storing your resumes and job tracker so they sync across devices | Performance of a contract |
| Applying free and paid plan limits | Performance of a contract |
| Keeping the Service secure and preventing abuse | Legitimate interests |
| Improving and debugging the Service | Legitimate interests |
| Responding to your support messages | Legitimate interests |
4. AI processing — important
To produce match scores, tailored resumes, cover letters and interview questions, the text of your resume and the job description is sent to Google's Gemini API for processing, and the generated result is returned to you.
These requests are sent through our own server so that our API credentials are never exposed in your browser or in the extension. Google processes this content to generate a response for you. Please review Google's applicable API terms and privacy documentation for details of how they handle data submitted through their API.
Do not paste anything into the Service that you would not be comfortable sending to a third-party AI provider.
5. Who we share data with
We do not sell your personal data, and we do not share your resume or job data with recruiters or employers. We use the following processors to run the Service:
- Supabase — database, authentication and storage for your account, resumes and jobs.
- Vercel — hosting and delivery of the website.
- Google (Gemini API) — AI processing of resume and job description text, as described in section 4.
We may also disclose data where we are required to do so by law, or to establish, exercise or defend legal claims.
6. International transfers
Some of our processors are located outside the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
- Account, resumes and job data — kept until you delete them or close your account.
- Data deleted by you — removed from our live database when you delete it. You can delete all of your resumes and jobs at any time from Dashboard → Account → Danger zone.
- Technical logs — typically retained for a short period for security and debugging.
8. Your rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing of your data;
- receive your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email khan@volods.com. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first.
9. Security
Your data is protected by row-level security rules, which means your resumes and jobs are only readable by your own authenticated account. Data is transmitted over encrypted connections (HTTPS) and passwords are stored only as salted hashes. No system can be guaranteed completely secure, but we take reasonable technical and organisational measures to protect your information.
10. Data stored in your browser
If you use the browser extension without signing in, your resume and saved jobs are stored locally on your device using browser storage and are not transmitted to us — except for the text sent for AI processing, as described in section 4.
11. Cookies
We use a small number of strictly necessary cookies. See our Cookie Policy for details.
12. Children
The Service is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. If we make material changes we will update the date at the top of this page and, where appropriate, notify you by email.
14. Contact us
VOLODS LTD, 29 Rosemary Avenue, Grimsby, England, DN34 4JN.
Email: khan@volods.com