Privacy Policy

1. Who we are (Data Controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Danish Din, a UK sole trader trading as DinJobs (dinjobs.co.uk).

• ICO Registration Number: TODO-ICO-NUMBER
• Contact Email: [email protected]
• Jurisdiction: England and Wales

2. Personal data we collect

Depending on which features you use, we collect and process the following categories of personal data:

• Account identifiers: When you sign in with Google or Discord, we receive your provider account ID, display name, and email address. We never collect or store passwords.
• CV content and career profile: Your uploaded CV, contact details, employment and education history, skills, preferred locations, salary expectations, and UK right-to-work or visa sponsorship requirements.
• Job matches and application activity: Public job listings matched to your profile (up to 10 matched jobs in your active queue), AI fit scores, and the application statuses you record.
• Generated application documents: Tailored CVs, cover letters, and interview preparation notes generated at your request.
• Optional Discord connection: If you link a Discord account to receive your job feed in Discord, we store your Discord user ID and delivery preferences.
• Optional Outlook / Microsoft mailbox connection: If you choose to connect your Microsoft mailbox so DinJobs can automatically detect interview invitations and rejections, we read message metadata (sender, subject, timestamps) and classify replies from employers only. We do not store or use unrelated personal emails.
• Billing and subscription status: Your plan tier, trial usage, Stripe customer ID, and payment status. Your payment card details are handled exclusively by Stripe and are never seen or stored by DinJobs.
• Usage and security logs: IP address, request timestamps, basic browser/device information, and error logs used to keep the service secure and reliable.

3. How we use your data and our lawful bases

Under UK GDPR, we must have a valid lawful basis for each way we use your personal data:

• Performance of a contract (Article 6(1)(b)): We process your account details, CV, preferences, job matches, generated documents, and optional Discord or Microsoft mailbox integrations to provide the DinJobs service you requested, both during your free trial (10 jobs delivered or 60 days, whichever comes first) and throughout your paid subscription.
• Legitimate interests (Article 6(1)(f)): We process usage logs and account identifiers to keep our platform secure, diagnose technical issues, prevent automated scraping or abuse, and enforce our one-trial-per-person rule.
• Legal obligation (Article 6(1)(c)): We retain billing and transaction records to comply with UK tax and accounting rules set by HM Revenue & Customs (HMRC).

We do not sell your personal data, serve third-party advertisements, or build marketing profiles about you for third parties.

4. Data processors, recipients, and international transfers

Our primary application database and server are hosted in the United Kingdom. To deliver the service, we share limited data with trusted infrastructure and service providers acting as data processors or independent controllers:

• Amazon Web Services (AWS Bedrock): Used to run AI models that score job fit and draft tailored CVs, cover letters, and interview prep (using UK or EU regions where available). Your prompts and CV content are not used to train public foundation models.
• Stripe: Processes monthly subscription payments (£30/month launch price; £50/month list price) and provides the customer billing portal.
• Google and Discord: Provide OAuth sign-in, and (for Discord, when enabled) deliver your matched job notifications.
• Cloudflare: Provides DNS, network routing, and DDoS / web application security.
• Microsoft: Accessed only if you explicitly connect an Outlook / Microsoft mailbox to track employer replies.
• Public job boards: When searching for roles, we send generic search queries (such as role titles and locations) only. We never send your name, contact details, or CV to job boards.

Where a provider processes data outside the United Kingdom, we rely on UK adequacy regulations (including for the EEA and certified US organisations) or the UK International Data Transfer Agreement (IDTA) and UK Addendum to Standard Contractual Clauses.

5. Automated decision-making and AI job scoring

DinJobs uses automated AI models to compare public job adverts against your CV and preferences, calculate a fit score, and select up to 10 matched jobs for your queue.

This automated scoring organises job suggestions for you; we don't think it is a “significant decision” about you under UK data protection law (UK GDPR as amended by the Data (Use and Access) Act 2025). You can review every match, inspect or edit any generated document, and override any suggestion or application status at any time.

How it works: the score compares the skills, experience, seniority and qualifications in your CV with what the advert asks for, and lowers it when an advert has a hard requirement your CV doesn't show. Our in-app helper may also use AI to explain a problem with your search or answer your questions; it never changes your search, CV or applications unless you tap to confirm.

You can ask for a person to review any score or automated suggestion, tell us why you think it's wrong, and have it looked at again: email [email protected].

6. Data retention

• Active accounts: We keep your profile, CV, job queue, and generated documents for as long as your account remains open.
• Account deletion: You can delete your account at any time from your dashboard or by emailing [email protected]. All personal data, CVs, and generated documents are permanently erased within 30 days of your deletion request.
• Job matches and applications: kept while your account is open so we never show you the same job twice, then erased with your account.
• Shorter limits: generated CV files 90 days; helper chat and notes 30 days; activity and error logs 180 days; internal automation run records 7 days; backups 14 days (so erased data can survive in a backup for up to 14 days).
• Payment records: Invoice and payment records are retained for 6 years from the end of the relevant financial year to satisfy HMRC record-keeping laws.

7. Your rights under UK GDPR

You have the following rights over your personal data:

• Right of access & data portability: You can download a machine-readable copy of your data at any time using the self-serve JSON export in your dashboard, or by contacting us.
• Right to rectification: You can update your CV, profile details, and job preferences directly in your dashboard.
• Right to erasure: You can permanently delete your account and data using the self-serve delete button in your dashboard, or by emailing us.
• Right to restriction and objection: You may ask us to restrict processing or object to processing carried out under our legitimate interests. You can also disconnect Discord or Microsoft mailbox access at any time in your settings.

To exercise any of your rights or ask a privacy question, email [email protected].

Complaints. If you're unhappy with how we handle your data, email us first with the subject “Data protection complaint”. We'll acknowledge it within 30 days, look into it, and tell you the outcome without undue delay. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies and minimum age

We use only strictly necessary session and authentication cookies, no analytics, advertising, or tracking cookies. Read our Cookie Policy for full details.

DinJobs is exclusively for users aged 16 or over, and paid plans are only for people aged 18 or over. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has created an account, please contact us at [email protected] and we will delete the account promptly.