Privacy Policy

Overview

RR JobCopilot is an AI career platform operated by Recruitment Room. This policy explains what personal data we collect when you use the service, why we collect it, how long we keep it and the choices you have.

We only process the data needed to run your job search. We do not sell your personal data, and we do not use your resume to train third-party public AI models.

Data we collect

We collect three broad categories of data:

• Account data — name, email address, password hash, country and billing details processed by our payment provider.
• Career data — the resume you upload, job preferences, screening answers, cover letters, application history and interview practice sessions.
• Usage data — pages visited, features used, device and browser type, approximate location from IP, and error diagnostics.

How we use your data

Your data is used to deliver and improve the service you asked for.

• Matching you to relevant roles and scoring how well you fit them.
• Generating tailored applications, cover letters and resume suggestions.
• Submitting applications to employers on your instruction.
• Providing interview practice, salary benchmarks and progress tracking.
• Billing, support, fraud prevention and legal compliance.
• Product analytics in aggregated or pseudonymised form.

Responsible AI processing

AI features process your resume and job descriptions to draft application content. Model providers act as processors under contract: your content is not used to train their public models, and it is not shared with other users.

AI-generated content is a draft. You remain responsible for the accuracy of anything submitted to an employer, and we encourage you to review each application before it is sent.

Who we share data with

We share data with employers only when you apply to a role, and with service providers who help us operate the platform.

• Employers and their applicant tracking systems, for applications you submit.
• Cloud hosting, email delivery, analytics and payment processors.
• Authorities, where required by law or to protect users from harm.

Legal bases and your rights

Where GDPR or a comparable law applies, we rely on contract performance (running your account), legitimate interests (security and product improvement), consent (marketing and non-essential cookies) and legal obligation (tax and accounting records).

You can request access, correction, deletion, restriction, portability or object to processing at any time. You may also withdraw consent and lodge a complaint with your local data protection authority.

Data retention

Account and career data is kept while your account is active. After you delete your account, personal data is removed from production systems within 30 days and from backups within 90 days, except records we must keep for legal or accounting purposes.

Security

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is limited to staff who need it, protected by multi-factor authentication and logged. No online service can promise absolute security, so we also encourage strong, unique passwords.

International transfers

We serve job seekers in more than 150 countries, so your data may be processed outside your home country. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

Children

The service is intended for people aged 16 and over. We do not knowingly collect data from children.

Contact and changes

Privacy questions and data requests can be sent through our contact page. We will respond within 30 days.

If we make material changes to this policy, we will update the date at the top and notify account holders by email where the change affects them.