Privacy Policy

Effective Date: 8 April 2026  |  Last Updated: 8 April 2026  |  Version: 1.0

Summary: JAgent, operated by Bunee, collects personal and professional information you provide to power your AI job hunting agent. We take your privacy seriously. This policy explains exactly what we collect, why, how long we keep it, and your full rights under GDPR, UK GDPR, and CCPA. We do not sell your personal data.

1. Who We Are

JAgent is an AI-powered job hunting platform operated by Bunee ("Bunee", "we", "us", "our"). JAgent is accessible at jagent.bunee.co and related subdomains.

For the purposes of the UK GDPR and EU GDPR, Bunee acts as the data controller in respect of all personal data collected and processed through the JAgent platform.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at the details provided in Section 16.

2. Information We Collect

We collect information you provide directly, information generated through your use of the service, and limited technical information collected automatically.

2.1 Account and Identity Information

2.2 Professional and Career Profile Data

To operate your AI job hunting agent, we collect and store:

2.3 Job Application Tracking Data

2.4 Payment Information

2.5 Communications Data

2.6 Technical and Usage Data (Automatically Collected)

2.7 Data from Third-Party Job Sources

When your agent searches for jobs, it retrieves data from third-party job listing APIs and platforms including JSearch, Reed, Adzuna, Jooble, and Apify. This data consists of publicly available job listing information (job titles, descriptions, employer names, locations, salary ranges, and application URLs). We do not collect personal data from these sources — they provide job listing content only.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing and Operating the Service

3.2 Processing Payments

3.3 Service Improvement and Analytics

3.4 Communications

3.5 Legal and Safety Obligations

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Third-Party Services and Data Processors

To operate JAgent, we engage trusted third-party service providers who act as data processors on our behalf. These processors are bound by contractual obligations and, where applicable, Data Processing Agreements (DPAs) to protect your data.

5.1 Supabase (Authentication and Database)

5.2 Anthropic (AI Processing)

5.3 Stripe (Payment Processing)

5.4 Resend (Email Delivery)

5.5 Railway (Hosting and Infrastructure)

5.6 Job Listing API Providers

Your agent queries the following third-party job data sources to find relevant job listings. These providers supply job listing data to us; we do not share your personal information with them:

Note that when your agent accesses these platforms, standard API request metadata (such as IP addresses) may be logged by these providers in accordance with their own privacy policies.

5.7 Google (OAuth)

We do not share your personal data with any other third parties except as required by law or with your explicit consent.

6. International Data Transfers

JAgent is a global service. Your data may be transferred to and processed in countries outside your country of residence, including the United States, which may have different data protection laws to those in your jurisdiction.

Where we transfer personal data from the EEA or United Kingdom to third countries, we ensure that appropriate safeguards are in place, including:

You may request information about the specific safeguards applicable to your data transfers by contacting us at the address in Section 16.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data Category Retention Period
Account and identity information Until account deletion, then 30 days for backup purge
CV / resume text and career profile data Until account deletion or upon your request
Job application tracking data Until account deletion or upon your request
AI-generated cover letters and suggestions Until account deletion or upon your request
Payment records and billing history 7 years (legal and tax compliance obligation)
Email delivery logs 90 days
Technical logs and error reports 90 days
IP address and session data 90 days
Support communications 3 years from last correspondence

When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by legal obligation (such as payment records for tax purposes). Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

If you request erasure of your data without deleting your account, we will assess and fulfil your request in accordance with applicable law — see Section 10.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve JAgent. A cookie is a small text file stored on your device by your browser.

8.1 Essential Cookies

These cookies are strictly necessary for the platform to function and cannot be disabled:

8.2 Functional Cookies

8.3 Analytics Cookies (with Consent)

Where you have given consent, we may use analytics tools to understand how users interact with JAgent. These cookies collect information about pages visited, features used, and session duration in aggregate form. No personally identifiable information is shared with analytics providers.

8.4 Third-Party Cookies

Third-party services integrated into JAgent (such as Stripe's payment widgets) may set their own cookies. These are governed by the respective third parties' cookie policies.

8.5 Managing Cookies

You can control non-essential cookies through our cookie preference centre (displayed on first visit). You can also manage cookies through your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly.

For more information on managing cookies, visit allaboutcookies.org.

9. Your Rights (All Users)

Regardless of where you are located, you have the following rights with respect to your data:

10. GDPR and UK GDPR Rights (EEA and UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR and UK GDPR:

10.1 Right of Access (Article 15)

You have the right to request a copy of all personal data we hold about you, along with information about how it is used and where it is shared. We will respond within 30 days of receiving a verified request.

10.2 Right to Rectification (Article 16)

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can correct most data directly in the platform. For data you cannot self-correct, contact us.

10.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data where:

Note that we may be unable to delete certain data where we have a legal obligation to retain it (e.g., payment records).

10.4 Right to Restriction of Processing (Article 18)

You have the right to request that we restrict processing of your data in certain circumstances, for example while a rectification request is being assessed.

10.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV), and to transmit that data to another controller. You can export your data from the account settings page, or request a full data export by contacting us.

10.6 Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Rights Related to Automated Decision-Making and Profiling (Article 22)

JAgent uses AI to generate cover letters and CV suggestions based on your profile. This does not constitute automated decision-making that produces legal or similarly significant effects about you — it produces draft content which you review and control. You are never automatically applied to jobs without your review. See Section 14 for more detail.

10.8 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.9 Right to Lodge a Complaint

You have the right to lodge a complaint with your national data protection supervisory authority:

We encourage you to contact us first so we can address your concern directly before escalating to a supervisory authority.

How to Exercise Your GDPR Rights

To exercise any of the above rights, please contact us at privacy@bunee.co or the postal address in Section 16. We may need to verify your identity before processing your request. We will respond within 30 days. If your request is complex or numerous, we may extend this by a further two months and will notify you accordingly.

All rights requests are free of charge, except where requests are manifestly unfounded, excessive, or repetitive — in which case we may charge a reasonable administrative fee.

11. CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

11.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, our business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

11.2 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

11.3 Right to Delete

You have the right to request deletion of the personal information we have collected about you, subject to certain exceptions (e.g., data necessary to complete a transaction, comply with a legal obligation, or detect security incidents).

11.4 Right to Correct

You have the right to request correction of inaccurate personal information we hold about you.

11.5 Right to Opt Out of Sale or Sharing

We do not sell or share your personal information for cross-context behavioural advertising. You do not need to opt out. If our practices change, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link on our homepage as required by law.

11.6 Right to Limit Use of Sensitive Personal Information

We do not use sensitive personal information for purposes beyond those necessary to provide the service.

11.7 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you service, charge different prices, or provide a different quality of service based on your exercise of these rights.

How to Exercise Your CCPA Rights

California residents may submit a verifiable consumer request by:

We will verify your identity and respond within 45 days. We may extend this by an additional 45 days with notice. You may designate an authorised agent to submit requests on your behalf by providing written authorisation.

12. Children's Privacy

JAgent is not directed to individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you become aware that a child under 16 has provided us with personal data, please contact us at privacy@bunee.co and we will take steps to delete such information promptly.

In jurisdictions where the minimum age for digital services is higher (e.g., 18 in some countries), you must meet your local minimum age requirement to use JAgent.

13. Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or destruction.

Our security measures include:

No system is 100% secure. While we implement strong safeguards, we cannot guarantee absolute security of data transmitted over the internet. You use the service at your own risk and are responsible for keeping your login credentials confidential.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under the GDPR and applicable law.

14. AI Processing and Automated Decision-Making

JAgent uses artificial intelligence, specifically Anthropic's Claude AI model, to generate content on your behalf. It is important you understand how this works.

14.1 What AI Processes

When you request a cover letter, CV suggestion, or other AI-generated content, your CV text, career profile data, job preferences, and the relevant job listing details are transmitted to Anthropic's API to generate a response. This data is used solely for the purpose of generating the requested content.

14.2 Nature of AI Outputs

AI-generated content is produced by a probabilistic language model. It may contain errors, omissions, inaccuracies, or content that is not appropriate for a specific application. You acknowledge that:

14.3 No Fully Automated Consequential Decisions

JAgent does not make fully automated decisions about you that produce legal or similarly significant effects without human (your) involvement. Job applications are not submitted without your review. AI outputs are suggestions and tools, not automated actions taken on your behalf without oversight.

14.4 Anthropic's Data Practices

Your data sent to Anthropic is subject to Anthropic's API usage policies. By default, Anthropic does not use API inputs and outputs to train their models. You should review Anthropic's current privacy policy at anthropic.com/privacy for up-to-date information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Your continued use of JAgent after the effective date of the updated policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the service and may request deletion of your account and data.

We encourage you to review this policy periodically. Previous versions will be made available upon request.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Company: Bunee

Product: JAgent

Privacy enquiries: privacy@bunee.co

General support: support@bunee.co

We aim to respond to all privacy-related enquiries within 5 business days and to fulfil formal data subject requests within the statutory deadlines set out in this policy.