Privacy policy
Last updated:
1. Who is responsible for your data
The controller of your personal data is The operator of FOTT Jobs (“FOTT Jobs”, “we”, “us”). You can contact us about anything in this policy at admin@fott-jobs.com.
This policy covers the website at fott-jobs.com and the web application at app.fott-jobs.com (together, the “service”).
2. The data we collect
Data you give us
- Account data: your email address, preferred language and a record of when you accepted these terms and this policy.
- Documents and profile: the CVs and LinkedIn PDF exports you upload, the profile we extract from them and any edits you make, an optional profile photo, and optional application details such as salary expectations, notice period, work authorisation, willingness to relocate and remote-work preference.
- Job search data: the searches you save, the jobs you save, dismiss or add yourself, and the companies you follow.
- Generated content: the CVs, cover letters and screening-question answers the service writes for you, and the versions you edit.
- Application tracking: the status of each application, its history and any notes or rejection reasons you record.
- Preferences: digest and alert settings, your time zone and progress in the kitchen (tasks, XP and streaks).
- Messages: anything you send us by email.
Data we collect automatically
- Technical data: your IP address, browser type and the pages requested, recorded in server logs and used for security and to limit abuse (for example, how often sign-in codes can be requested).
- Sign-in data: one-time sign-in codes are stored only as a cryptographic hash and expire after 10 minutes. Session tokens are kept in a secure, HTTP-only cookie.
Sensitive data
We do not ask for special categories of data (such as health, religion or ethnic origin). CVs sometimes contain them, along with details like age, nationality or a photo. Please remove anything you do not want processed before you upload a document.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, signing you in, building your profile, searching for jobs, scoring your fit and generating CVs, cover letters and answers | Performance of our contract with you (Art. 6(1)(b)) |
| Sending sign-in codes and, if you switch them on, digests and job alerts | Performance of our contract with you (Art. 6(1)(b)); you can turn digests and alerts off at any time |
| Keeping the service secure, preventing abuse, enforcing fair-use limits and fixing errors | Our legitimate interest in running a safe, reliable service (Art. 6(1)(f)) |
| Optional analytics on fott-jobs.com, if we ever enable them | Your consent (Art. 6(1)(a)), which you can withdraw in the cookie settings |
| Keeping records we are legally required to keep, and responding to legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
4. How we use AI
FOTT Jobs uses a large language model to read your documents, suggest profiles and keywords, rank and score jobs and write CVs, cover letters and answers. To do that, the relevant parts of your profile and the job posting are sent to our AI provider (see section 5). The provider processes them only to return a result to us, under a data processing agreement, and does not use them to train its models.
Fit scores and rankings are suggestions to help you decide where to apply. They are not decisions with legal or similarly significant effects on you, and no employer sees them. You can always read the reasons behind a score and ignore it.
6. International transfers
Our main servers are in the European Union. Where a provider processes data outside the European Economic Area (such as Anthropic in the United States), the transfer is protected by the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the relevant safeguards at admin@fott-jobs.com.
7. How long we keep it
| Data | How long |
|---|---|
| Account, profile, documents, searches, CVs and applications | While your account is open |
| One-time sign-in codes | 10 minutes |
| Session (refresh) cookie | 30 days, renewed while you use the service |
| Server and security logs, including IP addresses | Up to 90 days |
| Cached job descriptions | 30 days |
| Data export files | 24 hours after they are generated |
| Encrypted backups | Up to about 3 months (7 daily, 4 weekly and 3 monthly copies) |
8. Deleting your account
You can delete your account at any time in Settings. Your account and sign-in data are then deleted straight away and you can no longer use the service.
During the beta, some content you created (such as uploaded documents, your profile, CVs and applications) is removed in a second step that is not yet automatic. To make sure everything is erased, email admin@fott-jobs.com from the address you signed up with, and we will erase all of it within one month. Copies in encrypted backups expire on the schedule above.
9. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- correct inaccurate data (most of it you can edit directly in the app);
- erase your data;
- restrict or object to certain processing, including processing based on our legitimate interests;
- data portability: receive your data in a machine-readable format;
- withdraw consent at any time, without affecting earlier processing.
The export in Settings covers your account data. For a complete copy of everything we hold, or to exercise any other right, write to admin@fott-jobs.com. We answer within one month.
You can also complain to a data protection authority, such as the Spanish Agencia Española de Protección de Datos (aepd.es) or the authority where you live or work.
10. How we protect it
All traffic is encrypted with TLS. Data is stored on encrypted disks, uploaded files are kept outside any public location, and backups are encrypted before they leave the server. Each user’s data is isolated at the database level, sign-in codes are stored only as hashes, and personal data is kept out of our logs. No system is perfectly secure, but we will notify you and the authorities of a breach affecting you as the law requires.
11. Children
FOTT Jobs is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We will update this policy when the service changes. The date at the top shows the latest version. If a change is significant, we will tell you by email or in the app before it takes effect.