Data Transparency
Privacy and Data Policy
This page explains what TOW Careers collects, why it is collected, how it is used in the job-matching workflow, and the controls you have over your data.
Last updated: September 2026. This policy is a transparency notice for the application and is not a substitute for independent legal advice.
What we collect
- Account details: name, email, username, subscription status, and authentication metadata.
- Uploaded CV files and parsed CV text, including employment history, education, skills, certifications, location, and preferences where included.
- Generated candidate profiles, job matches, application packages, optimised CVs, cover letters, interview preparation notes, and learning recommendations.
- Application pipeline actions such as saved, dismissed, applied, interview, offer, and rejected statuses.
- Feedback, ratings, and testimonials you submit, including publication consent and review status.
- Operational logs and diagnostics such as health checks and provider configuration status.
Why we use it
- To parse your CV and build a structured candidate profile.
- To search approved public job sources and generate relevant job-search queries.
- To compare your evidence with job requirements and explain match scores.
- To generate role-specific CV summaries, cover letters, application bullets, and interview preparation material.
- To remember your preferences, improve recommendations, track applications, and send configured notifications.
- To review user testimonials before publication on the landing page.
AI and external providers
The app uses configured AI and search providers — including AI models for profile extraction, application support, and explanations, and web-search providers for job discovery. Only the minimum necessary data is shared with these processors.
Do not upload CVs or personal data unless you are comfortable with selected text being sent to the enabled AI/search providers for the purposes described here.
Storage and retention
- Your data is stored securely in our hosted database and file storage.
- You can delete your workspace data from the app, which removes stored CV analysis, generated documents, applications, notifications, uploads, and feedback events for your account.
- If you delete your account, your CV, matches, and applications are removed.
- Backups, payment records, and provider-side processing logs may be governed by external provider policies and legally required retention periods.
Security controls
- Authentication is required for all account data, and every workspace is scoped so each user has separate profiles, matches, documents, and application records.
- Row-level security on the database restricts access to your own records.
- The app includes security headers, source restrictions for job discovery, and explicit controls for data export and deletion.
- All traffic runs over TLS.
Your controls and rights
- Review match explanations before applying to any role.
- Download generated documents and edit them before use.
- Save, dismiss, or update application status manually.
- Export everything we hold about you from the CV & preferences page.
- Delete your workspace data from the app.
- Under UK GDPR you may request access, correction, or deletion of your data by contacting us.
- Submit feedback only with explicit consent for review and possible publication.
Job-source policy
The app is designed to use public job sources such as ATS boards, company career feeds, public feeds, and search results that pass source-policy checks. It does not scrape private, logged-in, restricted, or blocked websites. Job applications are never submitted automatically.
Payments and subscriptions
Payment processing and cancellation are handled by our billing provider. The app stores only the subscription state needed to grant or restrict workspace access. Card or bank details are handled by the billing provider, never by this application.
Contact
For privacy questions, data access, correction or deletion requests, contact us via the application-support thread in your account.