Data Controller: Jude.works Ltd, registered in England & Wales
Last updated: March 2026
Contact: privacy@jude.works
1. Who we are
Jude.works Ltd ("we", "us", "our") operates jude.works, the UK's first AI employment engine. We are the data controller for personal data processed through our platform, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
We collect the following categories of personal data:
Account information
- Full name, email address and password (hashed)
- User role (job seeker, employer, or both)
- Company name (employers only)
CV and career data
- Uploaded CV documents (PDF format)
- AI-extracted data: work history, skills, qualifications, job titles, years of experience
- Target role preferences, location preferences, salary expectations
- CV score and match data generated by our AI
Job and application data
- Job listings created by employers (title, description, salary, location)
- Apply click tracking (which listings you click to apply for)
- Job match scores and skill gap analyses
Usage and technical data
- IP address (used for UK geolocation verification)
- Browser type, device information, pages visited
- AI feature usage counts (for fair-use rate limiting)
- Session data (essential cookies for keeping you logged in)
3. How we use your data
| Purpose | Lawful basis |
|---|
| Creating and managing your account | Contract performance |
| AI-powered CV analysis and job matching | Contract performance |
| Generating AI career coaching, cover letters, interview prep | Contract performance |
| Employer job posting and candidate matching | Contract performance |
| Salary benchmarking and intelligence | Legitimate interest |
| UK geolocation verification via IP address | Legitimate interest |
| Platform security, fraud prevention | Legitimate interest |
| Service improvement and analytics | Legitimate interest |
| Responding to your enquiries | Contract performance / Legitimate interest |
4. AI processing disclosure
Jude.works uses artificial intelligence to provide core platform features. We are transparent about how AI processes your data:
- CV Analysis: Your uploaded CV is processed by Anthropic's Claude AI to extract skills, experience, qualifications and generate a CV score. The extracted data is stored in our database for matching purposes.
- Job Matching: Our semantic matching engine compares your extracted profile against job listings to generate match scores and identify skill gaps.
- Career Coaching: When you use Ask Jude, interview prep, cover letter generation, or role summaries, your relevant profile data is sent to Claude AI to generate personalised responses.
- Employer Tools: Employers may use AI-powered job description generation and platform reframing. Your personal data is not shared with employer AI features.
AI-generated outputs are advisory and should not be relied upon as the sole basis for employment decisions. You have the right to request human review of any AI-generated assessment under Article 22 of UK GDPR.
5. Third-party processors
We share personal data with the following categories of third-party processors, all of whom are contractually bound to protect your data:
- Anthropic (Claude AI): CV text and career data sent for AI analysis. Anthropic does not use your data to train their models when accessed via their API.
- Hosting provider: Our platform infrastructure where your data is stored and processed.
- Job data sources: We receive job listings from Adzuna, Reed, GOV.UK Teaching Vacancies, and the Find an Apprenticeship service. We do not send your personal data to these sources.
- IP geolocation: Your IP address is checked against ip-api.com to verify UK location. No other personal data is shared.
6. Data retention
- Active accounts: Your data is retained for as long as your account remains active.
- Deleted accounts: Upon account deletion, your personal data is removed within 30 days. Anonymised, aggregated data may be retained for analytics.
- CV documents: Stored for the duration of your account. You can delete your CV at any time from your profile.
- AI usage logs: Rate-limiting counters are reset daily at midnight UTC.
- Job listings: Stale and ghost listings are automatically cleaned up daily. Employer-posted listings are retained until closed or the employer account is deleted.
7. Your rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Ask us to correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing: Ask us to limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interest.
- Rights related to automated decision-making: Request human review of AI-generated assessments.
To exercise any of these rights, contact us at privacy@jude.works. We will respond within one calendar month, as required by law.
8. International transfers
Your data may be processed outside the UK when sent to Anthropic's Claude AI for analysis. Where international transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent protections approved by the UK Information Commissioner's Office.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Hashed password storage
- Session-based authentication with secure cookies
- Rate limiting on AI features to prevent abuse
- Regular cleanup of stale data (ghost job filtering, daily maintenance)
10. Children's data
Jude.works is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at privacy@jude.works.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via your registered email address or a prominent notice on our platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
12. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We encourage you to contact us first at privacy@jude.works so we can try to resolve your concern directly.