Legal

Privacy Policy

Last updated: 1 March 2026  ·  Effective: 1 March 2026

1. Who we are

JobNomad ("we", "us", "our") is a job search automation service operated by JobNomad Ltd, a company registered in England and Wales. Our registered address and ICO registration number will be listed here upon incorporation.

Contact us regarding privacy: hello@job-nomad.com

2. What data we collect

We collect and process the following categories of personal data:

3. How we use your data

We do not sell your personal data to third parties. We do not use your CV or job preferences to train AI models.

4. Google API Services / Gmail data

JobNomad's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail access is used solely to send your job-match digest emails and run notifications, and to manage a single "JobNomad" label in your inbox for organising those emails — never to read, scan, or process the content of your other personal emails.

Human access: Gmail data is accessed only by automated processes necessary to send digest emails and manage the JobNomad label. No JobNomad employee or contractor reads your Gmail messages, except in the rare case that you explicitly contact support with a specific issue and consent to it, or where necessary to investigate suspected abuse, security incidents, or to comply with a legal obligation.

Retention and deletion: your Gmail OAuth access token is stored encrypted and retained only for as long as your Gmail connection remains active. You can revoke access at any time from Profile → Notifications, or by disconnecting the app directly from your Google Account permissions — either action immediately deletes the stored token from our systems. We do not retain copies of email content beyond what is transiently needed to build and send a digest email at the time it is sent.

5. Legal basis for processing (UK GDPR)

6. Data retention

We retain your account data for as long as your account is active. On account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g. financial records for 7 years).

7. Your rights

Under UK GDPR you have the right to: access your data, correct inaccurate data, request deletion, restrict processing, data portability, and object to processing. To exercise any right, contact hello@job-nomad.com. You also have the right to lodge a complaint with the ICO (ico.org.uk).

8. Third-party processors

9. Cookies

We use a single session cookie for authentication and a preference cookie for dark mode. See our Cookie Policy for details.

10. Changes to this policy

We will notify registered users by email of material changes to this policy at least 14 days before they take effect.