Privacy Policy

1. Who We Are

ShowJob Ltd ("we", "us") is the data controller for personal data processed through the ShowJob platform (showjob.co.uk). Contact: hello@showjob.co.uk.

2. What Data We Collect

Candidates

Account data: email address, name, password (hashed). CV data: when you upload your CV, our AI extracts skills, job titles, experience level, education, salary expectations, and location preferences. This parsed data is stored in our database. Assessment data: your responses to skill assessments, scores, behavioural signals (keystroke patterns, paste events, tab switches), and AI detection results. Application data: cover notes, contact details, and application status.

Employers

Account data: work email, name, job title. Company data: benefits, progression pathways, satisfaction scores, website, careers URL. Payment data: processed by Stripe — we do not store card details.

All Users

Usage data: pages visited, search queries, device type, IP address, browser. Cookies: essential cookies only (authentication). We do not use advertising or tracking cookies.

3. How We Use Your Data

We process your data for the following purposes and legal bases:

Contract performance: providing the Platform, matching candidates to jobs, processing applications, grading assessments, managing subscriptions.

Legitimate interest: improving the Platform, calculating transparency scores, detecting fraudulent assessment submissions, generating aggregated salary statistics, preventing abuse.

Consent: sending marketing emails (only with explicit opt-in).

4. AI Processing

We use AI (Claude by Anthropic) to: parse CVs and extract structured data; generate and grade skill assessments; detect AI-assisted assessment responses; match candidates to jobs. AI decisions that significantly affect you (such as assessment scores) include human-reviewable outputs and are not fully automated. You have the right to contest AI-generated scores by contacting us.

5. Who We Share Data With

Employers: when you apply for a job, the employer sees your name, email, parsed CV data, assessment scores, and application details. Employers cannot see your data until you apply.

Service providers: Supabase (database hosting, EU), Vercel (website hosting, US — with EU data processing), Anthropic (AI processing, US — data not used for training), Stripe (payments, PCI compliant), Resend (email delivery).

Aggregated data: salary statistics on our /salaries pages use anonymised, aggregated data that cannot identify individuals.

We do not sell your personal data to third parties.

6. Data Retention

Account data: retained until you delete your account. CV data: retained until you delete or update it. Assessment data: retained for 2 years after completion. Application data: retained for 2 years after the application. Payment records: retained for 7 years (legal requirement). Usage logs: retained for 90 days.

7. Your Rights (UK GDPR)

You have the right to:

Access your personal data — request a copy of all data we hold about you. Rectification — correct inaccurate data. Erasure — request deletion of your data ("right to be forgotten"). Restriction — limit how we process your data. Portability — receive your data in a machine-readable format. Object — object to processing based on legitimate interest. Withdraw consent — where processing is based on consent.

To exercise any right, email hello@showjob.co.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures including: encrypted connections (HTTPS/TLS); hashed passwords; row-level security on database tables; secure API key management; access controls limiting who can view candidate data.

9. International Transfers

Some of our service providers process data outside the UK. We ensure adequate safeguards through: Standard Contractual Clauses (SCCs); UK adequacy decisions; processor agreements with appropriate data protection commitments.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, analytics cookies, or third-party tracking. No cookie consent banner is required for essential-only cookies under UK PECR, but we disclose their use here for transparency.

11. Children

The Platform is not directed at children under 16. We do not knowingly collect data from anyone under 16. If we become aware of such data, we will delete it promptly.

12. Changes

We may update this policy. Material changes will be communicated via email. The "last updated" date above reflects the latest revision.

13. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact

Data Controller: ShowJob Ltd. Email: hello@showjob.co.uk.