Privacy
What this site holds about you, why, where it sits, and how to get rid of it. Written from what the code actually does.
Last updated 6 September 2026.
Who holds it
Harry Russell, based in Aberdeen, Scotland, is the data controller for everything described here.
Contact: harryrussell081203@gmail.com. Questions about your data go to the same address as everything else — there is one person, and he reads it.
What is held, and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address | It is the account. Sign-in links go to it. | Performing our contract with you |
| Your CV, as a file and as text read out of it | To match you to jobs and to attach to letters | Performing our contract with you |
| Your answers: trade, locations, pay floor, work history | To score listings and write letters that are about you | Performing our contract with you |
| Letters drafted for you, and a log of ones sent | So the same employer is never written to twice | Performing our contract with you |
| Your mail server address and password, encrypted | Only if you connect your own mailbox | Your consent, withdrawable at any time |
| A Recruited sending address, if you take one | To send from, instead of using your own address | Performing our contract with you |
| Stripe customer and subscription identifiers | To know whether your subscription is live | Performing our contract with you |
| Your IP address, briefly, when you use the free tool or sign in | Rate limiting, so one person cannot exhaust the site for everybody | Legitimate interests — keeping the service available |
Card details are never seen by this site. Payment happens on Stripe's own pages. Nothing here stores a card number, and nothing here could.
If you take a Recruited address
You can send from an address we issue instead of your own. If you do, there is no password for us to hold, because there is nothing of yours to authenticate as.
What we do hold is the address itself and the real address your replies go to. Your letters carry that on Reply-To, so an employer answering one writes straight to your own inbox — the reply does not come to us and we do not keep a copy.
The trade is that the letter leaves through our mail provider rather than your mailbox, so that provider processes it — the same as your own provider would.
The mail password, specifically
This section applies only if you connect your own mailbox. Doing that means giving this site something that can send mail as you, because there is no way to send as somebody without it. So, plainly:
Use an app password, not your account password. It can be revoked on its own, without changing your password or touching another device.
It is stored encrypted, with the key held in the server's environment and never in the database — so the most likely breach by a distance, a leaked database dump, yields ciphertext.
It is still access to your mailbox. An app password can generally read that mailbox as well as send from it. That is the honest summary, and it is why the by-hand route exists and always will: the app writes the letter, you press send from your own mail client, and nothing of yours is stored.
Disconnecting the mailbox deletes the stored credential.
Where it lives
The database is Supabase, hosted in Ireland (eu-west-1). The app itself runs on Render, in Frankfurt. Both are inside the EEA.
Who else sees it
| Who | What reaches them |
|---|---|
| Supabase | Everything above — they host the database |
| Render | The running app, and its logs |
| Stripe | Your email address and payment. Their privacy notice governs what they then do with it. |
| Google (Gemini) | Job adverts, and the parts of your CV and answers needed to score a listing and write a letter. This is a transfer outside the UK, to the United States, under the transfer terms in Google's own API terms. |
| Adzuna and Reed | Search terms only — your trade and your locations. Not your CV, not your name. |
| Your own mail provider | Whatever you send through them, if you connect a mailbox |
Nothing is sold, and nothing is shared for advertising. There is no advertising here to share it with.
Cookies
One, and it is the sign-in session. There is no analytics, no tracking pixel and no third-party script on any page of this site.
How long it is kept
While you have an account. Delete your account and it goes — the user row, the profile, the CV, the drafts, the contacted list and the stored mail credential, in one operation, from your account page. It is not a request queued for somebody to action; the rows are removed.
What cannot be pulled back: letters already sent are in the recipient's inbox, and Stripe keeps its own payment records for as long as its own obligations require.
Your rights
Under UK GDPR you can ask for a copy of what is held, ask for it to be corrected, ask for it to be deleted, ask for it in a portable form, object to processing based on legitimate interests, and withdraw consent for automatic sending at any time.
Ask at harryrussell081203@gmail.com.
If the answer is unsatisfactory you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. You do not have to ask here first.
Children
This is a service for people looking for work and is not intended for anyone under 16.