Privacy Policy

Introduction

JobWinner (“we,” “our,” or “us”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, share, and protect personal information when you access our website (www.jobwinner.ai), mobile applications, or white-label platforms operated in collaboration with third-party institutions such as universities, bootcamps, or training providers (“Institutions”).

When you use JobWinner, whether directly through our platform or through a white-label service provided by an Institution, your data will be processed in accordance with this Privacy Policy. Both JobWinner and the Institution will act as joint data controllers, meaning that both decide how and why your personal information is processed, each within the scope of their responsibilities.

By using our services, you acknowledge and agree to the terms of this Privacy Policy, including the sharing of your data with the Institution providing the white-label service (if applicable) and the possibility of receiving personalized course offers from JobWinner and/or the Institution.

Scope of this Privacy Policy

This Policy applies to all users who:

  • Access JobWinner directly via www.jobwinner.ai or any subdomain operated by us.

  • Use JobWinner via a white-label platform offered by an Institution.

  • Interact with us through customer support, email communications, or marketing activities.

  • Receive personalized recommendations, job-related tools, or course offers from JobWinner or our institutional partners.

This Policy should be read in conjunction with our Terms of Service.

1. Information We Collect

We collect and process the following categories of personal data. The data may be collected directly from you, automatically when you interact with our platform, or through your Institution if you use a white-label instance.

a) Account & Identity Information

  • Name, surname, email address, password, and Institution affiliation (if applicable).

  • Profile details provided during account setup, such as career goals, preferred industries, or job-search preferences.

b) Content You Provide

  • CVs, cover letters, job descriptions, interview practice answers, and any other documents or information you upload.

  • Feedback, support requests, survey responses, or communication with our team.

c) Interaction & Usage Data

  • Records of how you use the platform: logins, session times, features accessed (e.g., CV tailoring, interview preparation), frequency of use, and progress tracking.

  • User journey logs (e.g., how you navigate within the app, what tools you use most often, and interaction outcomes).

  • These data are visible to JobWinner administrators and, when you use a white-label instance, also to Institution administrators.

d) Technical & Device Data

  • IP address, browser type, operating system, device identifiers, location data (if enabled), and cookies.

  • Error logs, performance data, and connection timestamps to help us maintain service quality.

e) Institutional Data (White-Label Users Only)

  • Your Institution may provide additional data (such as enrollment status, program participation, or course completion data) when integrating JobWinner into their platform.

  • This data may be combined with your JobWinner activity to generate usage reports and personalized recommendations.

f) Marketing & Communications Data

  • Your preferences for receiving emails, notifications, or personalized offers.

  • Records of which offers or campaigns you interact with.

  • By accepting this Privacy Policy, you agree that both JobWinner and your Institution may use your data to send you personalized offers of courses and related services. You can opt out at any time (see Marketing & Communications section).

 

2. How We Use Your Information

We use your personal data for the following purposes:

a) Service Delivery & Functionality

  • To create and manage your account.

  • To provide you with our job-search and career tools (CV tailoring, cover letter generation, interview preparation, job-match analysis, etc.).

  • To personalise your user experience, showing you features and recommendations relevant to your goals.

  • To ensure the proper functioning, stability, and security of the platform.

b) Customer Support

  • To respond to your inquiries, requests, and technical issues.

  • To provide troubleshooting, feedback handling, and resolution of problems.

c) Platform Analytics & Improvements

  • To monitor usage patterns, identify popular features, and optimise user experience.

  • To conduct internal research that helps us improve service efficiency and develop new tools.

d) Legal Compliance & Security

  • To comply with laws, regulations, and legal processes.

  • To prevent fraud, misuse, or unauthorised access.

e) Institutional Use (White-Label Platforms)

  • If you are accessing JobWinner through an Institution’s white-label platform, your data may be used by the Institution to:

    • Monitor and evaluate how students or participants engage with the platform.

    • Generate reports on overall usage and outcomes.

    • Provide career guidance, training, and additional resources.

    • Send you relevant information about the Institution’s services, including training opportunities and events.

3. Marketing & Personalized Offers

By accepting this Privacy Policy, you acknowledge and agree that:

  • Personalized Course Offers: Both JobWinner and the Institution operating your white-label platform may use your data (such as your career goals, uploaded CVs, job applications, and app interaction patterns) to create and send you personalised offers of courses, programs, and related services.

  • Types of Offers: These offers may include, but are not limited to, online courses, professional training programs, workshops, certifications, and career development opportunities. They may be delivered via email, in-app notifications, or other communication channels.

  • Marketing by Both Parties: JobWinner may send you offers for its own services or for partner courses. The Institution may also send you offers specific to its programs and educational activities.

  • Opt-Out Rights: You may unsubscribe from these communications at any time by following the instructions provided in the emails or by updating your preferences in your account settings. Opting out will not affect your ability to use the platform.

4. White-Label Usage and Joint Controllers

When you use JobWinner via a white-label platform provided by an Institution, the following rules apply:

a) Shared Responsibility

  • JobWinner and the Institution act as joint controllers under GDPR and other applicable data protection laws.

  • This means that both parties determine the purposes and means of processing your personal data.

b) Data Visibility

  • Both JobWinner administrators and Institution administrators will have access to your personal and usage data, including:

    • Account details (name, email, Institution affiliation).

    • Uploaded content (CVs, cover letters, job descriptions).

    • Interaction data (logins, features used, session times).

    • Generated outputs (tailored CVs, interview answers, reports).

  • Institutions will only access the data of users registered within their own instance.

c) Purpose of Access

The Institution may use your data for the following purposes:

  • To monitor how students, employees, or participants engage with the platform.

  • To provide direct support and career guidance.

  • To assess performance and program outcomes.

  • To send personalised offers of courses, training, and events.

d) Limitations on Use

  • Institutions are not permitted to use your data for purposes unrelated to education, training, or career development.

  • Institutions may not share your personal data with third parties for independent commercial gain without your explicit consent.

  • JobWinner will ensure that all Institutions sign appropriate agreements limiting their use of your data to the purposes described in this Privacy Policy.

e) Allocation of Responsibilities

  • JobWinner remains responsible for ensuring the security and integrity of the platform, compliance with GDPR, and handling user rights requests (e.g., access, deletion, correction).

  • Institutions are responsible for ensuring that their staff handle your data in compliance with GDPR and this Privacy Policy, and for responding to queries relating to their own use of your data.

5. Legal Basis for Processing

For users located in the European Union (EU), European Economic Area (EEA), and the United Kingdom, we process personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act.

The main legal bases we rely upon include:

  • Consent (Art. 6(1)(a) GDPR) – When you agree to receive marketing communications, personalised course offers, or voluntarily upload data.

  • Contractual necessity (Art. 6(1)(b) GDPR) – To provide the services you request, such as tailoring CVs, generating cover letters, or enabling institutional reporting.

  • Legitimate interests (Art. 6(1)(f) GDPR) – To maintain platform security, prevent abuse, improve services, and conduct analytics.

  • Legal obligations (Art. 6(1)(c) GDPR) – To comply with applicable laws and regulatory requirements.

For users in California, we comply with the California Consumer Privacy Act (CCPA) and other applicable U.S. privacy laws. This includes the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal data. JobWinner does not sell personal data.

For users in other jurisdictions, we apply the same principles of fairness, transparency, and security in line with relevant local laws.

6. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Privacy Policy, including to:

  • Provide services to you during your active subscription or account use.

  • Fulfil legal and contractual obligations.

  • Resolve disputes and enforce agreements.

When data is no longer needed, it will be securely deleted or anonymised.

If you request deletion of your account, your personal information will be erased within a reasonable period, unless legal obligations require further retention.

7. Third-Party Service Providers

We work with trusted third-party companies and individuals (“Service Providers”) to facilitate, support, and improve our services. These Service Providers perform functions such as analytics, authentication, hosting, payment processing, communications, and AI-based outputs.

Service Providers may have access to your personal data only to perform these tasks on our behalf. They are contractually obligated not to use or disclose your data for any other purpose and must comply with applicable data protection laws.

Our current Service Providers include:

  • Google – For analytics (Google Analytics, Google Tag Manager), authentication (Google Sign-In), and behavioural tracking. Google Privacy Policy

  • Stripe – For secure subscription billing and payment processing. Stripe Privacy Policy

  • Firebase – For authentication, database management, hosting, and code infrastructure (provided by Google). Firebase Privacy Policy

  • Brevo (formerly Sendinblue) – For email hosting and sending communications. Brevo Privacy Policy

  • Hotjar – For user behaviour analytics and product improvement. Hotjar Privacy Policy

  • Cookiebot (by Usercentrics) – For cookie consent management. Cookiebot Privacy Policy

  • OpenAI – For generating personalised outputs (e.g., CVs, cover letters) based on user-provided information. OpenAI Privacy Policy

  • Facebook (Meta) – For authentication through social login functionality. Meta Privacy Policy

We ensure that all Service Providers handle your data responsibly and in accordance with privacy regulations such as GDPR and CCPA. For more details on how these providers process your data, please consult their individual privacy policies using the links provided above.

8. Data Security

We take the protection of your personal data seriously. Measures include:

  • Encryption of data in transit and at rest.

  • Role-based access controls to restrict who can view your data.

  • Monitoring systems to detect unauthorised access or unusual activity.

  • Regular audits and updates to security practices.

Institutions using a white-label platform are contractually required to apply equivalent security measures to protect your data from misuse, loss, or unauthorised disclosure.

9. International Data Transfers

If you are located outside the European Union or United Kingdom, your data may be transferred to servers located in other jurisdictions, including the United States.

When transferring data internationally, we implement safeguards such as:

  • Standard Contractual Clauses approved by the European Commission.

  • Adequacy decisions where available.

  • Technical and organisational measures ensuring that your rights are protected.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of Access: To obtain confirmation and a copy of your personal data.

  • Right of Rectification: To correct inaccurate or incomplete data.

  • Right of Erasure (“Right to be Forgotten”): To request deletion of your personal data, subject to legal exceptions.

  • Right to Restrict Processing: To limit how your data is used in certain situations.

  • Right to Data Portability: To receive your data in a structured, machine-readable format.

  • Right to Object: To object to certain processing, including marketing.

  • Right to Withdraw Consent: To withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at: support@jobwinner.ai.
If you are a white-label user, you may also contact your Institution, which will coordinate with JobWinner in handling your request.

11. Cookies & Tracking Technologies

We use cookies and similar technologies for purposes such as:

  • Authentication and maintaining your session.

  • Analytics to understand how users interact with the platform.

  • Improving website performance and security.

  • Delivering relevant course recommendations and offers.

You can manage your cookie preferences via your browser settings. Disabling cookies may affect the functionality of certain features.

12. Children’s Privacy

Our services are not intended for individuals under the age of 16. If we discover that we have collected personal data from a child under 16, we will delete it promptly.

Institutions using our white-label service must ensure that their users meet the minimum age requirements under applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technical developments.

  • Material changes will be communicated to users via email or platform notifications.

  • The “Effective Date” at the top of this document will always indicate when the Policy was last updated.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, you may contact us at:

JobWinner
Email: privacy@jobwinner.ai
Website: www.jobwinner.ai

If you are using a white-label platform and wish to contact your Institution directly, please refer to the contact details provided by your Institution.