1. Who We Are
YourJobFit Ltd. ("YourJobFit", "we", "us") is the data controller for personal data collected through the YourJobFit platform at yourjobfit.com. We are registered in Nigeria and our processing activities are designed to comply with the Nigeria Data Protection Regulation (NDPR) 2019 and, where applicable, the EU General Data Protection Regulation (GDPR). Our Data Protection Officer can be reached at dpo@yourjobfit.com.
2. Data We Collect
We collect the following categories of data:
- Account data: Email address, display name, and authentication provider (Google or email/password) collected when you create an account.
- CV and professional data: The content of any CV or professional document you upload, including your name, employment history, education, skills, and contact details embedded in that document.
- Assessment data: Your target role, target salary, Global Standard Match Score, identified skill gaps, and generated roadmap — derived from your CV by our AI system.
- Usage data: Pages visited, features used, Career Credits balance and transaction history, course progress, and exam results.
- Payment data: Transaction IDs and credit package information. We do not store card numbers or bank account details — these are handled entirely by SolydFlow and its underlying processors.
- Technical data: IP address, browser type, operating system, and device identifiers collected automatically through server logs and our analytics provider.
- Communications: Any messages you send to our support team.
3. How We Use Your Data
We process your data for the following purposes and on the following legal bases:
- Providing the Platform (Contract): Authenticating your account, running CV analyses, generating match scores, producing application materials, processing Credit transactions, and delivering course content.
- AI Processing (Contract + Legitimate Interest): Transmitting your CV content to our Premium AI Engine to generate assessments, roadmaps, rewritten CVs, cover letters, course content, and exam questions. This processing is core to the service you contracted for.
- Improving the Platform (Legitimate Interest): Analysing aggregated, anonymised usage patterns to improve feature quality and model prompts. We do not use your individual CV data to train AI models.
- Marketing (Consent): Sending product updates and feature announcements by email, only where you have opted in. You may withdraw consent at any time via the unsubscribe link in any email.
- Legal Compliance (Legal Obligation): Retaining transaction records and responding to valid legal requests from authorities.
4. Third Parties We Share Data With
We share your data only with the following processors, each bound by appropriate data processing agreements:
- Google Firebase: Authentication (email/password and Google Sign-In) and real-time database hosting. Data may be processed in the United States under Google's standard contractual clauses.
- SolydFlow: Processes payment transactions. Receives your email address and transaction amount. Underlying providers include Paystack (Nigeria/Africa), Flutterwave, M-Pesa, and Stripe.
- Cloud Hosting: Hosts our application servers. Server logs including IP addresses may be processed in the United States or European Union.
We do not sell your personal data to third parties. We do not share your data with recruiters, employers, or job boards.
5. CV Data Retention
We handle your CV with particular care given its sensitivity:
- Raw CV files (PDFs) are deleted from our servers within 24 hours of processing.
- Structured extracted data (inferred role, skills list, score) is retained in your account until you delete your account.
- AI-generated outputs (rewritten CVs, cover letters) are stored until you delete the associated application from your Applications page or delete your account.
6. Your Data Rights
Under the NDPR and GDPR (where applicable), you have the following rights:
- Access: Request a copy of all personal data we hold about you.
- Correction: Ask us to correct inaccurate personal data.
- Deletion: Request deletion of your account and all associated personal data. You can do this directly in Settings → Account → Delete Account, or by emailing privacy@yourjobfit.com.
- Restriction: Ask us to stop processing your data while a complaint is investigated.
- Portability: Receive your structured profile data in a machine-readable format (JSON) on request.
- Objection: Object to processing based on legitimate interest, including any marketing communications.
- Withdraw consent: Withdraw any consent you have given at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@yourjobfit.com. We will respond within 30 days. You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA) in Nigeria or your local supervisory authority if you are in the EU.
7. Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, Firebase Authentication for identity management, HMAC-SHA256 verification for payment webhooks, and role-based access controls on our backend. No system is perfectly secure; in the event of a data breach affecting your rights we will notify you within 72 hours as required by law.
9. Children
The Platform is not directed at persons under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact privacy@yourjobfit.com and we will delete it promptly.
10. International Transfers
Some of our processors (Google, Vercel) operate in the United States. Where we transfer data outside Nigeria or the EEA, we rely on Google's and Vercel's standard contractual clauses and adequacy decisions. You may request a copy of these safeguards by contacting our DPO.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated by email and an in-Platform notice at least 14 days before taking effect. The current version is always available at yourjobfit.com/privacy.
12. Contact and Complaints
For privacy questions or to exercise your rights: privacy@yourjobfit.com. For our Data Protection Officer: dpo@yourjobfit.com. YourJobFit Ltd, Lagos, Nigeria.