Privacy Policy

Nox ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use the Nox service ("the Service") at noxjobs.com.

Information you provide directly:

• Account information: Email address, name, and password (hashed)
• Profile data: CV/resume content, work experience, skills, education, career preferences, job search criteria
• Work authorization and visa status: Your right to work in the countries you target, including any visa or sponsorship requirements. Nox uses this to answer employer questions about work eligibility and to filter out jobs you are not eligible for.
• Writing samples: Cover letters, interview notes, and other documents you upload for voice extraction
• ATS credentials: Login credentials for job platforms you connect (stored encrypted)
• Payment information: Processed by Stripe — we do not store your card details

Information generated by the Service:

• AI-generated application materials (CVs, cover letters, form answers)
• Voice profile and writing style analysis
• Job match scores and preference analysis
• Application submission records and status tracking

Information collected automatically:

• Basic usage data (pages visited, features used) for service improvement
• Authentication tokens and session data

We use your data solely to provide and improve the Service:

• Application generation: Your profile, CV, and writing samples are used to generate tailored application materials
• Voice matching: Your writing samples are analysed to extract your writing style for cover letter generation
• Job matching: Your preferences are used to score and filter job listings
• ATS submission: Your credentials and generated materials are used to submit applications on your behalf
• Communication: Your email is used for account notifications, daily digests, and service updates. Employer responses to your applications (interviews, rejections, confirmations) are forwarded to your personal email
• Payment processing: Billing information is used to manage your subscription through Stripe

We share data with the following third-party services as necessary to provide the Service:

Nox runs a limited paid advertising test on Google Ads. This adds advertising measurement to visits that come from one of our ads. It applies only to those ad-linked visits and does not change how we handle the personal data described above.

• Conversion measurement cookies: Our Google Ads tag loads on all visits to noxjobs.com, other than visitors in the United Kingdom, the European Economic Area, or Switzerland, where storage stays denied by default (see below). On those other visits the tag may set a first-party conversion-measurement cookie regardless of how you arrived at the site. We use it only to measure whether an ad click led to a sign-up, so the conversion measurement itself relates to visits that arrive from one of our ads. We have not enabled enhanced conversions, so we do not send your email or other personal identifiers to Google for this purpose.
• First-party click identifiers: When you arrive from an ad, the click carries an identifier in the URL (for example a Google Click ID, also called a gclid). If you create an account, we store that identifier and the click time with your account record so we can attribute your sign-up to the ad that brought you. It is not shared with employers and is not used to build an advertising profile of you.
• Consent Mode for UK, EEA, and Swiss visitors: Visitors that Google identifies as being in the United Kingdom, the European Economic Area, or Switzerland have advertising and analytics storage denied by default. We do not show a consent banner and we do not enable these cookies for those visitors, so no advertising cookies are stored. A click identifier may still pass through the URL, but nothing is written to the device.
• Product analytics stays cookieless: Our day-to-day product analytics (Umami) remains cookieless and does not set cookies or identify you personally, as it always has.

You can manage ad personalization through Google's own settings at myadcenter.google.com.

• All data is stored on Supabase with row-level security (RLS) — only you can access your data through the application
• ATS credentials are stored encrypted
• Authentication uses Supabase Auth with secure session management
• Documents are stored in a private storage bucket scoped to your user ID
• All connections use HTTPS/TLS encryption in transit

• We do not sell your personal data to anyone
• We do not use your profile, CV, application content, or other information you provide to us for advertising or ad targeting
• We do not share your data with recruiters or employers beyond the applications you explicitly approve
• We do not use tracking cookies or third-party analytics that identify you personally. Our product analytics is cookieless; the only advertising cookie we use is the first-party conversion-measurement cookie set by our Google Ads tag, which can be set on any visit outside the United Kingdom, the European Economic Area, and Switzerland (where storage stays denied), and which is described in the Advertising and Conversion Measurement section above

You have the right to:

• Access: View all data we hold about you through your dashboard
• Edit: Update or correct your profile information at any time
• Delete: Delete your data from your account settings. This removes your profile, documents, applications, and all generated content
• Export: Request a copy of your data by contacting us
• Withdraw consent: Stop using the Service at any time. Cancel your subscription without penalty

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Some anonymised, aggregated data may be retained for service improvement (e.g., overall application success rates).

The Service is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

If you have questions about this Privacy Policy or your data, contact us at privacy@noxjobs.com.

See also our Terms of Service.