Privacy Policy

Last updated 27 October 2026

Who we are. Nod Careers is operated by Jaagili, the data controller for your personal data. Contact: hello@jaagili.com.

What we collect. Your account details (name, email, password stored as a one-way hash); your CV and profile (work history, skills, education, target roles, location, salary expectations, notice period, right-to-work and sponsorship status); answers you give to employer questions; jobs we found for you and the applications sent; emails employers send to your Nod address; and wallet and payment records (card details are held by Stripe, never by us).

Why we use it, and our lawful basis. To provide the service you signed up for — finding jobs, writing your CV and cover letters, sending applications, and sorting replies (contract). To keep the service secure and prevent abuse (legitimate interests). To send applications automatically on your behalf, only while you have auto-apply switched on (consent, which you can withdraw at any time in Settings). We never sell your data or use it for advertising.

Automated decisions. When auto-apply is on, Nod decides by itself which jobs to apply for, using your profile, your target roles and a match score. Decisions are limited by fixed rules (for example, it never applies to roles needing a language not on your CV, or to employers that say they do not sponsor visas if you need sponsorship). You can switch auto-apply off, approve each application yourself, see every application sent under Jobs for you, and ask us to review any decision by emailing us.

Who receives your data.

• Employers and recruitment agencies you apply to, and the application systems they use (for example Greenhouse, Lever, Ashby, Workable) — your CV, cover letter and answers.
• Anthropic (Claude) — writes CVs, cover letters and form answers for Premium accounts. United States.
• OpenAI — backup writing engine. United States.
• Google (Gemini) — backup writing engine, only if enabled. United States.
• Job matching and email sorting run on a model on our own server; that data is not sent to an outside AI company.
• Microsoft (Microsoft 365) — sends and receives Nod's email.
• Stripe — processes card payments.
• Our server hosting provider — stores the service and its database.

AI providers process your data only to produce your documents and, under their business terms, do not use it to train their models. Transfers outside the UK use the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it. While your account is open. When you delete your account (Settings → Delete my account) we delete your profile, CV, documents and emails at once; database backups roll off within 7 days. We keep payment records for 6 years because tax law requires it.

Your rights. You can see, correct, download (Settings → Download my data) or delete your data, object to processing, and withdraw consent for automatic applications at any time. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Security. Data is sent over encrypted connections, passwords are hashed, payment details stay with Stripe, and access to the database is restricted. Full terms are in our Terms & Conditions.