GDPR & Your Data

Your data rights at a glance

Under UK GDPR, you have powerful rights over your personal data. Here's what they mean in plain English:

How to make a data request

Exercising your rights is straightforward. Here's how:

1. Email us at privacy@jude.works with the subject line "Data Request" and tell us which right you'd like to exercise.
2. Verify your identity. For your protection, we'll confirm your identity before processing the request. We may ask you to confirm the email address associated with your account.
3. We respond within one month. UK GDPR requires us to respond within one calendar month of receiving your request. If your request is complex, we may extend this by up to two additional months — but we'll let you know.
4. It's free. We do not charge a fee for data requests unless they are manifestly unfounded or excessive.

What data do we hold?

When you use Jude.works, we may hold the following categories of personal data:

• Account data: Name, email, password (hashed), user role
• CV data: Your uploaded CV document and AI-extracted information (skills, experience, qualifications, job titles)
• Preferences: Target role, location preferences, salary expectations
• Match data: Job match scores, skill gap analyses, apply click history
• AI interaction data: Usage counts for AI features (for rate limiting), career coaching conversation history
• Technical data: IP address (for UK geolocation check), session data

For full details on how we collect and use your data, see our Privacy Policy.

How we protect your data

• All data is transmitted over encrypted connections (HTTPS/TLS)
• Passwords are securely hashed — we never store them in plain text
• AI processing is done via secure API calls to Anthropic, who do not use API data to train their models
• We perform daily maintenance to clean up stale data and ghost listings
• Access to personal data is restricted to authorised personnel only

Data deletion

You can delete your data in two ways:

• Self-service: Delete your CV from your profile page, or delete your entire account from Settings. This takes effect immediately.
• By request: Email privacy@jude.works and we'll remove all your data within 30 days.

After deletion, some anonymised, aggregated data may be retained for platform analytics (e.g., total user counts), but this cannot be linked back to you.

AI and automated processing

Jude.works uses AI extensively, but we want you to understand exactly how:

• CV analysis: When you upload your CV, our AI extracts your skills, experience, and qualifications to build your profile.
• Job matching: Our semantic engine compares your profile against job listings to generate match scores.
• Career coaching: Ask Jude uses AI to provide personalised career advice based on your profile.

These AI outputs are advisory only — they inform, but do not make, employment decisions. No one is automatically rejected or selected based solely on an AI score. You can always request human review of any AI assessment.

Employer CV screening

When an employer uploads CVs for a vacancy, direct contact identifiers are redacted where detected before CV text is sent for extraction, and Jude.works uses a minimised structured profile for comparison. Candidate names, email addresses and filenames are kept separate from the scoring narrative. A location difference or a title such as “Senior” versus “Head of” is a prompt for human verification, not an automatic rejection. The employer must make an active, meaningful decision and can request a review or correction of the underlying information.

Contact the ICO

If you believe we have not handled your data properly, you have the right to complain to the UK's data protection authority:

• Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We'd appreciate the chance to address your concerns first — please reach out to privacy@jude.works before contacting the ICO.