Privacy

What we store

Your email address, the role profile you picked, the timestamp you confirmed, and the page you signed up on. If you're a Seeker subscriber and you attach a CV, we also store that CV, your consent to it being scored, and the scores it produces — see Scoring your CV against roles below. If you separately agree to application drafts, we also store the drafts written for you and that second consent — see Writing application drafts from your CV. If you're a Seeker subscriber, you can also hold up to three scoring profiles rather than one, and your digest is sectioned and deduped across them. If you sign in to the app, we store what you set up there: your filters and score threshold — including a rounded point (about a kilometre) if you set a distance filter — never the place name you searched for, and a bare coordinate that rounds to nothing (0, 0) is treated as no point at all — any employers you've chosen to watch, any searches you've saved, whether you've switched same-day alerts on, the roles you save, apply to or dismiss, and how often your digest arrives. If you're a Recruiter subscriber, we also store the feed token that lets your spreadsheet read your shard — the edge holds only a hash of it, never the token itself, once it's minted — and any webhook URL you set for Slack or Teams alerts. If you're on Agency and add a colleague to your seats, we store their email address the same way as any subscriber's; you see the addresses on your seats, and they see whose plan they are on. A colleague gets no email from us until they set something up themselves. If you pay, we store which plan you're on, the date it's paid until, and the two references Paddle gives us for you and your subscription; your card details go only to Paddle, and we never see or store them. Signing in also sets one cookie, which does nothing but keep you signed in. Beyond that, nothing: no browsing history, no advertising and no advertising cookies. Page views are counted in two ways, neither of which sets a cookie or identifies you: see Counting page views below.

Counting page views

Our own counter records, for each page and day, how many times it was viewed and which website linked to it. No cookie, no IP address, nothing that identifies you. Every page also loads Cloudflare Web Analytics, a small script from Cloudflare, the infrastructure that runs this site, which counts visits and how fast pages load. It sets no cookie, uses no local storage, and does not follow you to other sites, under Cloudflare's own privacy policy. The app at /app/ is not counted by our own counter. Emails are covered under Emails below.

Where it's kept

New signups sit briefly in Cloudflare — the infrastructure that runs this site — until they're picked up, normally within 24 hours, and moved to a private machine in the UK. That machine is where your subscriber record lives from then on, and where the daily email is put together. The same is true if you attach or remove a CV in the app: it passes briefly through Cloudflare on its way to that machine. Payments are handled by Paddle (Paddle.com Market Ltd), our merchant of record, alongside Cloudflare: Paddle takes the payment, holds your card details, handles tax and sends your receipt, under its own privacy notice.

How long

• If you don't confirm your email, the pending signup is deleted after 7 days.
• Once confirmed, your address is usually moved off Cloudflare within a day; as a backstop it's deleted from there automatically after 30 days regardless.
• A CV you attach or remove sits in Cloudflare the same way — normally picked up within a day. Since 6 September 2026 this queue has the same backstop as a new signup: anything still sitting there after 30 days is deleted automatically, whether or not it was ever picked up.
• Your subscriber record on the private machine is kept for as long as you're subscribed. Unsubscribing on its own stops the digests and marks your record cancelled — it does not erase anything. If you also want your data erased, see Unsubscribing and erasure.

The recruiter product never sees you

We sell a second product to recruiters and employers. It is built from the employer side only — the roles they publish on their own careers pages, and how those change over time. Nothing about subscribers reaches it: not your address, not the profile you picked, not your CV or its fit scores, not what you opened, and not any count or aggregate derived from those. This is a boundary in how the two products are built, not a setting you have to find and switch off.

Scoring your CV against roles (Seeker)

If you are a Seeker subscriber and you attach a CV, we send your CV text together with the title, employer and description of each role to Google Gemini, which returns a fit score out of 100 and a short summary of the gaps. We store that score and summary against your subscription so your digest can feature the best matches.

We ask for your agreement separately before this happens, and paying for a subscription is not on its own agreement to it. You can withdraw at any time with Remove my CV in the app: we stop sending anything to Gemini, and we delete your stored CV, your fit scores and the gap summaries.

We send your CV text and the role — its title, employer and job description. We do not send your name, your email address or your send history.

Writing application drafts from your CV (Seeker)

This is a second, separate thing to agree to, and agreeing to CV scoring above does not switch it on. If you are a Seeker subscriber with a CV on file and you tick the application-drafts box in the app, then for up to three of your best-fitting roles each night we send your CV text and the details of roles that fit you — the title, employer and description, and the gap summary the scoring produced — to Google Gemini, which writes a first draft of an application in your voice. We store each draft against your subscription so the app and your digest can show it to you.

A draft is a draft. It is written automatically from what your CV says and it is told not to invent experience, but it can still be wrong about you and about the role. You read it, correct it and send it yourself — we never send anything to an employer, and nothing is sent to anyone until you do. It is not a promise of an interview or a reply.

You can withdraw at any time with Withdraw from drafts in the app: we stop writing them and delete every draft we hold for you. Your CV, its fit scores and your scoring consent are left exactly as they were — withdrawing from drafts is not withdrawing from scoring. Remove my CV withdraws both, and deletes the drafts too.

Interview briefs from your CV (Seeker)

If you are a Seeker subscriber with a CV on file and the scoring consent ticked, you can ask for an interview brief on any role you have saved or applied to, up to ten a month — overnight we send your CV text, the role's title, employer and description, the fit score and gap summary the scoring produced, and the employer's published hiring figures to Google Gemini, which writes a short brief: what the employer does, the questions they are likeliest to ask and what a strong answer covers, and three questions to ask them. We store each brief against your subscription so the app can show it to you.

A brief is written by a model from what your CV and the posting say. It can be wrong about both. It is a starting point for your own preparation, not advice, and nothing in it is sent to anyone. Remove my CV deletes every brief we hold for you along with the CV, its scores and any drafts.

Emails

Digests are sent from digest@cleanenergyroles.com. Our emails record whether they were opened and which links were clicked, so we can tell what's useful. Every one carries an unsubscribe link, which emails unsubscribe@cleanenergyroles.com for you. That inbox is handled by a person rather than software, so unsubscribing is prompt but not instant — normally within a few days, not immediately.

Unsubscribing and erasure

Use the unsubscribe link in any digest, or email hello@cleanenergyroles.com at any time. These are two different requests. Unsubscribing on its own just stops the digests and marks your record cancelled, nothing more. If you also want your data erased, say so — either in the same email or separately — and we'll action that by hand too. Both are actioned when the request is read, normally within a few days and always within 30.

If you write to us through the contact form, we keep your name, email address and message so we can reply, until the conversation is closed out. Ask and we'll erase it, the same way as above.

Erasure is answered on both sides, by hand, within the timeframe above: whoever reads the request clears your details on the private machine that holds your subscriber record, and clears the record of which plan you're on and whether it's active — and, if you've paid, the reference linking you to your payment with our payments provider — held by the infrastructure that runs this site too, but keeps a minimal record that you asked. If you gave us a name or a profile description — which only happens if you wrote in and gave us that directly; the signup form on this site never collects either — an erasure request clears it. If you're a Seeker subscriber and attached a CV, erasure clears that too, along with its fit scores, gap summaries, any application drafts written from it and any interview briefs, the same as withdrawing consent does on its own.

Keeping that — and not the rest — is what proves the request was honoured and stops us accidentally re-adding you later. It's standard practice for a suppression list. If you want the record itself gone too, say so when you write in and we'll remove it completely.

Billing records are the one exception to erasure. If you've paid, Paddle keeps its record of your payments for as long as the law requires, under its own privacy notice. If you're on an invoiced Recruiter plan, we issue the invoice ourselves and keep it and its billing details for six years, because UK company law requires it, even after you ask us to erase your details.

Job listings shown on this site are read from employers' own public careers pages, or from their LinkedIn pages where that is where they post. We store the role details, not anything about you.