Privacy policy
How AutoTime handles your data
Last updated: 15 August 2026
Data controller
The data controller is AutoTime AI Ltd ("AutoTime", "we", "us"), London, UK. ICO registration reference will be added after registration is complete. Contact: hello@autotimeai.com.
Data we collect
- Email address and OAuth account identifiers used for sign-in.
- Candidate profile information you choose to save, including role targets, work-right details, CV evidence and your ESCO skill profile.
- Application history, job descriptions, notes, status updates, outreach drafts and interview preparation records.
Storage and processors
- Supabase stores account and product data in an EU region database.
- Vercel hosts and delivers the web application. Requests and server workloads can be processed in Vercel regions outside the EEA, subject to Vercel's data-processing terms and transfer safeguards.
- OpenAI API processes job descriptions and profile data when you use AI features. Data is not used to train OpenAI models, and an OpenAI data processing agreement is in place.
- Stripe processes payment data for subscriptions. AutoTime does not store card details.
- Resend processes account and matched-job alert email delivery data.
- Adzuna, Jooble, EURES and direct employer ATS providers supply job-listing data. Candidate profile and CV data is not sent to these listing providers.
- PostHog EU receives privacy-minimised usage events only after you allow analytics.
Why we process data
AutoTime processes your data to provide job-fit analysis, application tracking, cloud sync, billing, account access, support and product improvement. We do not sell personal data.
Your GDPR rights
You have rights of access, deletion and portability under GDPR Articles 15-20, together with rights to correct inaccurate data, restrict processing and object where applicable. You can exercise access and deletion yourself at any time from Settings > Your data rights: "Export my data" downloads everything stored about your account, and "Delete my account" permanently removes your sign-in account and all associated data. For corrections, restriction or objection requests, contact hello@autotimeai.com.
Retention
Account data is retained while your account is active. Using "Delete my account" in Settings removes your account and all associated data immediately and permanently, except limited records we must retain for legal, tax or fraud prevention reasons.