Data retention and deletion

We keep what the service needs to work, for as long as your account exists. You can remove your CV yourself, today, from your profile. Anything else — including closing your account entirely — you ask us for, and we do it within 30 days.

• Account (email, name, password hash): while the account exists.
• Candidate profile (headline, summary, location, phone, experience, skills, languages, salary expectations, links): while the account exists, or until you clear the field.
• CV file: until you delete it, or until the account is deleted. Deleting it removes the stored file, not just the link to it — including for applications you already sent, which point at the same file rather than at a copy of it.
• Applications you sent, including any cover letter and the reference to the CV that was current when you applied: while the account exists.
• Employer notes about an applicant: while the application exists.
• Company profiles and listings: while the employer account exists. Listings are archived rather than deleted when they end, so the record of a hire stays intact.
• Request logs, including IP addresses: short-lived, kept for operating and rate-limiting the service.
• Backups at Cloudflare R2: database dumps are kept 30 days and then deleted. Uploaded files, CVs included, are mirrored rather than versioned — so a file you delete here disappears from the backup at the next nightly run, which is stricter than 30 days, not looser.

• Edit or clear any profile field, from your profile page.
• Delete your CV, from your profile page.
• Withdraw an application you sent. Be aware of what that does and does not do today: it marks the application withdrawn so the employer can see you are no longer a candidate, but it does not retract the application from their list or revoke their access to your CV. To take the CV back, delete it from your profile — that removes the file itself.
• Turn off being discoverable by employers — it is off unless you turned it on.

Closing your account, a full copy of your data, or deletion of specific records: write to support@junketclub.app from the address on the account. We will confirm it is you, act within 30 days, and tell you when it is done.

We say this plainly rather than implying otherwise: there is no self-service account deletion yet. Building it is on the list. Until it exists, the email route is the route, and it is not a slower version of a button that already exists.

Deleting your account removes your account record, your candidate profile, your CV file and your applications. Because we do it by hand, we do it in that order deliberately: the stored file is removed first, since once the record pointing at it is gone the file could no longer be found.

Two things survive it, and you should know which:

• Backups. Copies persist in encrypted nightly backups until those age out, within 30 days. They are not used to restore deleted accounts — only to recover from failure.
• An employer's own records — with one exception in your favour. Anything an employer copied out of this service (details they wrote down, a CV they downloaded) is theirs and beyond our reach: these terms require them to use it only for that role and keep it no longer than needed, so ask them directly and tell us if they do not comply. The exception is the CV file itself: while it is still only stored here, deleting it does remove the employer's access, because their application points at the file rather than at a copy of it.

Tell us at support@junketclub.app. Using applicant data for anything other than the role applied for is a breach of the terms, and accounts get suspended for it.