Privacy Policy

1. Who we are

JobCruise is operated by Patrium Health Limited (“JobCruise”, “we”, “us”), a company registered in England and Wales. We are the data controller for the personal data described below.

2. Data we collect

• Account data: name, email address, authentication tokens (provided via Clerk), password hashes (we never see the plaintext).
• Profile data: CV content, work history, skills, preferred roles and locations, visa-sponsorship preferences, salary expectations.
• Application data: records of jobs you save, apply to, or pass on; AI-generated cover letters and CV variants; interview preparation notes and voice recordings.
• Usage data: anonymised event analytics (PostHog) so we can improve the product. We do not sell this data.
• Payment data: handled by Stripe. We never see card numbers; we only store a Stripe customer ID and subscription state.

3. Why we use it

• To run JobCruise: match you to roles, generate applications, coach interviews.
• To bill you accurately for paid plans.
• To send transactional and (with your consent) marketing email — you can unsubscribe at any time.
• To comply with our legal obligations and to defend legal claims.

4. Lawful bases (UK GDPR Article 6)

We rely on contract for service delivery, consent for marketing communications and any voice recording features, and legitimate interests for product analytics and security monitoring.

5. Sharing

We share data only with sub-processors required to deliver the service: Clerk (auth), Convex (database), Stripe (billing), Resend (email), PostHog (analytics), and our AI providers (Anthropic, Google, Baseten). Each is bound by data-processing agreements.

6. International transfers

Some of our sub-processors are based outside the UK / EEA. Where they are, transfers rely on the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

7. Retention

We keep your account data for as long as your account is active, plus 12 months after deletion for dispute-resolution purposes. Voice recordings are deleted within 30 days of capture unless you save them.

8. Your rights

Under UK GDPR you can request access, rectification, erasure, restriction, portability, and to object to processing. Email privacy@jobcruise.app and we will respond within one month.

9. Cookies

We use strictly-necessary cookies for authentication and a small number of analytics cookies. A cookie banner gives you granular control on your first visit.

10. Complaints

You can lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first — write to privacy@jobcruise.app.

11. Changes

When we update this policy we will revise the “last updated” date and, if the change is material, notify you in-app or by email.