Who we are
Job Puffin is run by Benns Software Ltd, a company registered in England and Wales (no. 15751857), which is the controller of the personal data described here under the UK GDPR and, for people in the European Economic Area, the EU GDPR. For anything about your data, write to [email protected]. Using Job Puffin is also covered by our terms of service.
What we collect
- Your account: your email address, your name, when you signed up and last signed in, and when you accepted the terms of service.
- Your profile and searches: the profile you write or have written from your CV, and what each search is after. A CV you upload is read for its text and then discarded; the file is not stored.
- The postings you send: the browser extension reads a LinkedIn job posting only when you press Send, and sends its title, company, location, description and logo to your account, with the people LinkedIn shows on it (their name, profile link and headline). It reads nothing else on LinkedIn and nothing on any other site.
- What you do with them: the ratings, each job's stage, your notes and the introductions drafted for you.
- Billing: your plan, its renewal date and your Stripe customer reference. Stripe holds your card and billing address.
- Technical data: your IP address, used briefly to limit how many sign-in emails can be asked for.
Why we use it
To run the service you signed up for: signing you in, rating the postings you send against your profile, keeping your pipeline and taking payment. That is the contract between us, and it is our lawful basis for this data.
To keep the service safe: rate limits against abuse. That is our legitimate interest. We keep billing records because the law requires it.
We do not sell your data, we do not use it for advertising, and we do not use it to train models. We do not send you marketing email.
People named on postings
A posting you send may name a recruiter or a hiring manager. We keep only what LinkedIn shows publicly on that posting (their name, profile link and headline), in your account alone, so you can see who to approach. We never contact them. If you are one of them and want your details removed, write to [email protected].
Who else handles it
These companies process data for us, each only for the job described and under their own data protection terms:
| Company | What for | Where |
|---|---|---|
| DigitalOcean | Hosts the app and its database. | United Kingdom (London) |
| DeepSeek | Rates postings, writes the profile from a CV, suggests searches and drafts introductions. It receives your profile, your search's brief and the postings, and the CV's text when you upload one. | China |
| Stripe | Takes payments for the paid plans and holds the card details. We never see or store a card number. | United States, Ireland |
| Amazon Web Services (SES) | Sends the sign-in emails. | United States, Europe |
Where data leaves the UK or the European Economic Area for a country without an adequacy decision, the transfer is made under the safeguards the law provides: the European Commission's standard contractual clauses, with the UK addendum for data from the UK.
Cookies
One cookie keeps you signed in (jobpuffin_session, for 30 days from your last visit). The app does not work without it.
How long we keep it
Your account and everything in it are kept until you ask us to delete it. Sign-in links expire after 15 minutes and sessions after 30 days without a visit. Billing records are kept for six years, as UK tax law requires.
Your rights
Wherever you live, you can ask for a copy of your data, have it corrected, or have your account and its data deleted. In the UK and the European Economic Area you can also object to how we use it, ask us to restrict it, or ask for it in a portable form. Write to [email protected] and we will reply within a month. Your profile, searches and notes can also be changed in the app at any time.
If you are unhappy with how we handle your data, you can complain to a data protection authority: in the UK, the Information Commissioner's Office at ico.org.uk; in the European Economic Area, the authority where you live, listed by the European Data Protection Board.
If you live in the United States
We do not sell your personal information or share it for targeted advertising, and we have not done so in the past twelve months. The categories we collect, where they come from, why and who receives them are set out above. You can ask to know what we hold about you, to have it corrected or to have it deleted by writing to [email protected], and we will not treat you differently for asking. We may need to confirm the request comes from you, through the email address on your account.
Children
Job Puffin is for adults looking for work and is not meant for anyone under 18. We do not knowingly collect data from children; if you believe a child has given us data, write to [email protected] and we will delete it.
Changes
When this policy changes, the date at the top changes with it. If a change affects how your data is used, we will tell you by email before it takes effect.