Privacy Policy

Last updated: February 2026

1. Introduction

Nox ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use the Nox service ("the Service") at noxjobs.com.

2. Data We Collect

Information you provide directly:

  • Account information: Email address, name, and password (hashed)
  • Profile data: CV/resume content, work experience, skills, education, career preferences, job search criteria
  • Writing samples: Cover letters, interview notes, and other documents you upload for voice extraction
  • ATS credentials: Login credentials for job platforms you connect (stored encrypted)
  • Payment information: Processed by Stripe — we do not store your card details

Information generated by the Service:

  • AI-generated application materials (CVs, cover letters, form answers)
  • Voice profile and writing style analysis
  • Job match scores and preference analysis
  • Application submission records and status tracking

Information collected automatically:

  • Basic usage data (pages visited, features used) for service improvement
  • Authentication tokens and session data

3. How We Use Your Data

We use your data solely to provide and improve the Service:

  • Application generation: Your profile, CV, and writing samples are used to generate tailored application materials
  • Voice matching: Your writing samples are analysed to extract your writing style for cover letter generation
  • Job matching: Your preferences are used to score and filter job listings
  • ATS submission: Your credentials and generated materials are used to submit applications on your behalf
  • Communication: Your email is used for account notifications, daily digests, and service updates
  • Payment processing: Billing information is used to manage your subscription through Stripe

4. Third-Party Services

We share data with the following third-party services as necessary to provide the Service:

Supabase

Database, authentication, and file storage. Your profile, applications, and documents are stored on Supabase infrastructure with row-level security.

Stripe

Payment processing. Stripe handles all payment card data. We store only your Stripe customer ID.

OpenAI

AI content generation (CV parsing, cover letter writing, voice analysis). Profile and document data is sent to OpenAI's API for processing. OpenAI does not use API data for training.

Google (Gemini)

AI content generation (scoring documents, about-me profiles). Similar data is sent for processing. Google does not use paid API data for training.

Anthropic

Fallback AI provider. Used only when primary providers are unavailable. Anthropic does not use API data for training.

AgentMail

Email service for your personal Nox email address, used for application tracking and employer communication.

ATS Platforms (Greenhouse, Ashby, Lever, Workable)

Application submission. Your generated application materials are submitted through these platforms' APIs.

5. Data Storage and Security

  • All data is stored on Supabase with row-level security (RLS) — only you can access your data through the application
  • ATS credentials are stored encrypted
  • Authentication uses Supabase Auth with secure session management
  • Documents are stored in a private storage bucket scoped to your user ID
  • All connections use HTTPS/TLS encryption in transit

6. Data We Do NOT Collect or Share

  • We do not sell your personal data to anyone
  • We do not use your data for advertising
  • We do not share your data with recruiters or employers beyond the applications you explicitly approve
  • We do not use tracking cookies or third-party analytics that identify you personally

7. Your Rights

You have the right to:

  • Access: View all data we hold about you through your dashboard
  • Edit: Update or correct your profile information at any time
  • Delete: Delete your data from your account settings. This removes your profile, documents, applications, and all generated content
  • Export: Request a copy of your data by contacting us
  • Withdraw consent: Stop using the Service at any time. Cancel your subscription without penalty

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Some anonymised, aggregated data may be retained for service improvement (e.g., overall application success rates).

9. Children

The Service is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at privacy@noxjobs.com.

See also our Terms of Service.