Privacy Policy

Effective date: 14 May 2026

JobPrepHelp is an online AI-assisted interview preparation platform owned and operated by Novexel Technology Limited ("Novexel", "we", "us", or "our"). We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller and Contact Information

For the purposes of applicable data protection laws, the data controller responsible for your personal data is:

Novexel Technology Limited

Company number: 16682369 (Registered in England and Wales)

Registered office: First Floor Office, 3 Hornton Place, London, United Kingdom, W8 4LZ

Privacy Enquiries & Data Protection Contact: info@jobprephelp.com

2. Personal Data We Collect

We collect and process personal data that you provide directly to us or that is generated through your use of the service:

Account & Identity Data: Name, email address, password authentication credentials, account creation date, role, account status, and subscription tier.
CV, Career & Candidate Information: Resumes and CVs uploaded to the platform, extracted CV text, job history, educational background, skills, qualifications, certifications, project highlights, and candidate CV library versions.
Target Job & Application Data: Job descriptions, employer specifications, job advertisement URLs, target roles, and company details you submit for preparation or match analysis.
Generated Interview Preparation Content: Tailored interview questions, STAR scenarios, rapid revision flashcards, company values drills, panel signals, quiz questions, best scores, completion timestamps, and CV-to-job match analysis reports.
Billing & Transaction Records: Subscription status, billing history, payment receipts, prep credit purchases, presentment amounts, currencies, and transaction dates. (Payment card details are collected and processed directly by our payment processor, Stripe; we do not receive or store full payment card numbers or CVCs).
Feedback & Communication Data: Ratings, comments, customer support messages, and operational communications.
Technical & Log Data: IP addresses (masked/anonymised for logging), device user-agent metadata, request IDs, timestamps, session cookies, and consent preferences.

3. Special Category (Sensitive) Personal Data

Special category personal data under Article 9 of the UK GDPR includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation.

JobPrepHelp does not actively solicit or require special category personal data for the provision of interview preparation services. However, documents or notes submitted by you (such as your CV, employment history, or career notes) may voluntarily or inadvertently contain such information (for example, health or disability accommodations, memberships, or diversity backgrounds).

Article 9 UK GDPR Condition:

Where JobPrepHelp intentionally processes special category personal data, Novexel Technology Limited must have an applicable Article 9 condition in addition to an Article 6 lawful basis. Neither uploading information, accepting our Terms of Use, nor relying on general contractual necessity under Article 6 is sufficient by itself to satisfy Article 9 requirements.

We strongly advise and request that you omit and redact any unnecessary special category personal data from your uploaded CVs and target job specifications before submitting them for processing.

4. Purposes and Lawful Bases for Processing

Under UK GDPR Article 6, we rely on specific lawful bases for each processing purpose. We do not use consent as a catch-all basis where another lawful basis is appropriate:

Purpose	Data Categories	Lawful Basis (UK GDPR)
Providing the JobPrepHelp service	Account, CV, Job Spec, Generated Prep, Quizzes, Matches	Performance of a contract (Article 6(1)(b))
Account creation, authentication & session management	Email, name, password hashes, session tokens	Performance of a contract (Article 6(1)(b))
Billing, subscription management & payment receipts	Billing transactions, amounts, currencies, credit ledger	Performance of a contract (Article 6(1)(b)) and Legal obligation (Article 6(1)(c))
Platform security, fraud prevention & abuse detection	Session logs, masked IP addresses, request telemetry, audit events	Legitimate interests (Article 6(1)(f)) to protect our platform, users, and infrastructure
Operational communications (receipts, deletion updates, security)	Email address, user name, transaction status	Performance of a contract (Article 6(1)(b)) and Legal obligation (Article 6(1)(c))
Accounting, financial reporting & statutory compliance	Billing transactions, VAT/tax records, invoices	Legal obligation (Article 6(1)(c)) under UK tax and corporate law
Optional analytics & marketing cookies	Client cookies, page interactions, campaign attribution	Consent (Article 6(1)(a)), managed through your Cookie Preferences

5. AI-Assisted Processing and Automated Decision-Making

JobPrepHelp uses state-of-the-art artificial intelligence models (including Google Generative AI / Gemini API) to analyse user-provided CVs and job descriptions in order to synthesise tailored interview practice questions, STAR responses, revision cards, and document comparison insights.

Important Clarifications regarding AI Processing:

No Employment or Recruitment Decisions: JobPrepHelp is an educational preparation tool for candidates. It does not make recruitment decisions, evaluate candidates for hiring employers, or determine employment opportunities.
No Article 22 Automated Decision-Making: We do not conduct automated decision-making or profiling that produces legal effects or similarly significantly affects you under Article 22 of the UK GDPR.
AI Provider Processing: Input texts (CV snippets and job specifications) are transmitted via secure, encrypted API calls to enterprise AI providers solely to generate preparation outputs. Model outputs are structured and saved in your account for your private use.

6. Payment Processing (Stripe)

Payment transactions, subscriptions, and billing checkouts are facilitated by our payment processing partner, Stripe Payments Europe, Ltd. and its affiliates.

When making a purchase, your payment card details are transmitted directly to Stripe over encrypted connections. Novexel Technology Limited never sees, stores, or processes complete credit or debit card numbers, expiration dates, or security codes (CVC/CVV). We receive only confirmation tokens, transaction references, amounts paid, currencies, and subscription status necessary to grant your account access and maintain our financial ledgers.

7. Third-Party Service Providers (Processors)

We share personal data with trusted third-party service providers who process information on our behalf under strict data processing agreements:

Cloud Hosting & Databases: Secure cloud infrastructure and managed PostgreSQL database services hosting our application and database records in secure European/UK data centres.
AI Infrastructure Providers: Google Cloud / Google Generative AI for server-to-server AI text generation and analysis.
Payment & Billing Processors: Stripe for payment processing, billing portal, and customer invoicing.
Email Delivery Services: Transactional email service providers (such as Resend / SMTP relays) to transmit operational notifications, password resets, verification emails, and data export alerts.

8. International Data Transfers

While our primary database and application hosting are deployed in the UK/EEA, some of our third-party service providers (such as AI API providers or payment networks) may store or process data outside the United Kingdom or the European Economic Area.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with UK data protection laws. These safeguards include UK International Data Transfer Agreements (IDTAs), the UK Addendum to EU Standard Contractual Clauses (SCCs), or transfers to countries recognised by the UK Government as providing an adequate level of data protection.

9. Retention and Account Deletion Holding Period

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, provide our services, comply with legal and tax obligations, resolve disputes, and enforce our agreements.

Account Deletion & 30-Day Holding Period:

You can request account deletion at any time from the My Profile page. When you request deletion:

Your account enters a 30-day holding period during which active preparation creation and purchases are disabled, allowing you an opportunity to reverse an accidental request.
You may cancel the deletion request at any point during this 30-day period directly from your profile.
Upon expiration of the 30-day period, your account profile, credentials, sessions, saved CVs, and preparation records are permanently purged.
Following permanent deletion, limited retention records (such as financial transactions, audit logs, and an immutable deletion event snapshot) may lawfully be retained for statutory periods (typically up to 6 to 7 years for HMRC tax and accounting compliance, or as needed for security, fraud prevention, and dispute defence).

10. Data Security

We implement robust technical and organisational security measures designed to safeguard your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include TLS/HTTPS encryption in transit, salted and hashed credentials, strict database tenant isolation ensuring users can only query their own records, rate limiting, and administrative access controls.

11. Your Statutory Rights under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have statutory rights in relation to your personal data, including:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data (e.g. updating your name via My Profile).
Right to Erasure ("Right to be Forgotten"): You can request the deletion of your account and personal data.
Right to Restriction: You can ask us to suspend processing your personal data in certain circumstances.
Right to Data Portability: You can request the transfer of your personal data to you or a third party in a structured, machine-readable format.
Right to Object: You can object to our processing where we rely on legitimate interests.
Right to Withdraw Consent: Where we rely on consent (such as for optional cookies), you can withdraw consent at any time without affecting past processing.

To exercise any of these rights, please email us at info@jobprephelp.com. We respond to all valid requests within one calendar month.

12. Download My Data versus Subject Access Requests (SAR)

JobPrepHelp offers a self-service "Download My Data" feature within your profile.

Self-Service Export vs. Formal SAR:

"Download My Data" is a self-service convenience feature designed to provide an immediate, portable export of your core user-provided documents, profile details, preparation records, quiz scores, and billing transaction summaries.
It does not necessarily contain every raw technical log, internal identifier, or backend record held by Novexel Technology Limited.
This feature in no way restricts your statutory data protection rights. You are not required to use this self-service export before or instead of making a formal Subject Access Request.
You may separately submit a formal Subject Access Request (SAR) at any time by contacting us at info@jobprephelp.com to receive a complete response regarding all personal data processed by Novexel Technology Limited.

13. Right to Complain to the ICO

If you have concerns about our handling of your personal data, we encourage you to contact us first at info@jobprephelp.com so we can resolve the matter promptly.

You also have the right to lodge a complaint at any time with the UK supervisory authority for data protection:

Information Commissioner's Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113 | Website: https://ico.org.uk

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any material updates will be communicated through the platform or by email where appropriate.