Privacy policy
Last updated 1 October 2026.
The short version. You can browse Polyfetch without giving us anything. If you create an account or join our email list, we keep only what's needed to run those features. We don't sell your data, we don't run ads, and you can delete your account yourself at any time.
1. Who we are
Polyfetch is run by the Polyfetch team. We are the “controller” of the personal data described here. Contact us about privacy at jon@solura.ai.
2. What we collect and why
| What | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Email, name and profile picture from Google, when you sign in | To create and identify your account | Contract: providing the account you asked for | Until you delete your account |
| Your saved jobs (shortlist) and alert setting | To show your shortlist and send the alerts you've turned on | Contract | Until you remove them or delete your account |
| Your email address and the fields you picked, if you join the weekly email, and a record of which weekly emails we sent you | To send the weekly email | Consent, which you can withdraw at any time | Until you ask us to delete it. Signups never confirmed are deleted after 30 days. After you unsubscribe we keep only your address, marked unsubscribed, so we never email it by mistake |
| Apply clicks: which job, when, the website you came from (domain only) and your browser type. No IP address, and not linked to your account. | To see which listings are useful, check referral fees are reported correctly, and filter out bots | Legitimate interests: running and funding the site | 24 months, after which we keep only the total click count per job |
| Visit statistics: pages viewed, searches and filters used on the jobs page, the website you came from (domain only), campaign tags in the link, and device type (phone, tablet or computer). Each visit gets an anonymous code made from your IP address and browser that changes every day, so we can count visitors without cookies and can't follow you from one day to the next. We don't store your IP address, and this isn't linked to your account. | To see which pages and listings are useful, what people search for and can't find, and to improve the site | Legitimate interests: running and improving the site | 13 months |
| Messages you send us, for example to report a listing | To reply and investigate | Legitimate interests | Up to 24 months after the conversation ends |
| Technical logs kept by our hosting provider, which may include your IP address | Security and fixing faults | Legitimate interests | A short period set by the provider |
We don't ask for your CV, ID or application details. You apply on the company's own site, and whatever you give them is covered by their privacy policy, not ours.
3. Google account data
Signing in with Google gives us only your email address, name and profile picture (the “openid”, “email” and “profile” permissions). We don't ask for access to your Gmail, Drive, contacts or anything else. We use this data only to identify your account and send the shortlist alerts you choose. We don't sell it, share it, use it for advertising or use it to train AI models.
4. Emails we send
- Shortlist alerts, only if you have an account and alerts are on: a message when a saved job closes, re-opens or changes its pay. Turn them off from your account page or with the link in any alert.
- The weekly email, only if you signed up and clicked the link in our confirmation email: new roles in the fields you picked. Every one has links to change your fields or unsubscribe. If an email to you bounces or is reported as spam, we stop sending to that address.
We don't put advertising in alert emails.
5. Cookies
We use the cookies needed to keep you signed in and to protect sign-in from forgery. They're set when you sign in, and because they're strictly necessary the law doesn't require us to ask for consent. We don't use advertising cookies or tracking that follows you across sites. Our visit statistics (section 2) use no cookies and no third-party analytics service.
If we ever add optional cookies, such as analytics, we'll ask before setting them and you'll be able to change your mind from the site footer.
6. Who we share data with
We use a few service providers who handle data only on our instructions:
- Railway: hosting and database (United States)
- Google: sign-in (United States). Google also has its own relationship with you under its own privacy policy.
- Resend: sending emails (United States)
We use OpenAI (and sometimes Anthropic) to help draft job listings from companies' public job postings. We never send them your personal data.
When you click Apply, you go to the company's own site. If it's a referral link, the company can see that you arrived from Polyfetch. We don't send them your name, email or anything else about you. If you're hired, the company may tell us so it can pay a referral fee, and we use that only to reconcile the fee.
We may also disclose data if the law requires it, to protect people from fraud or harm, or to a buyer if the business is sold (who would have to respect this policy). We don't sell your personal data, and we don't share it for advertising.
7. International transfers
Our providers store data in the United States. When personal data leaves the UK or European Economic Area, we rely on the safeguards in our providers' data processing terms, such as the UK-US data bridge, the EU-US Data Privacy Framework or standard contractual clauses. Contact us for details.
8. Your rights
You can ask us to:
- give you a copy of your data
- correct it
- delete it
- restrict or object to how we use it
- send it to you in a portable format
You can withdraw your consent at any time, for example by unsubscribing. You can do much of this yourself: delete your account or turn off alerts from your account page, or unsubscribe from any email. For anything else, email jon@solura.ai. We'll reply within one month, free of charge, and may need to confirm it's you.
These rights apply to everyone, wherever you live, including residents of California and other US states. We don't sell or “share” personal data as California law defines it, we don't use it for targeted advertising, and we won't treat you differently for using your rights.
If you're unhappy, please tell us first. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority where you live.
9. Deleting your account
When you delete your account, we delete your profile, your shortlist and any weekly-email signup straight away. Copies in our database backups are overwritten within 30 days.
10. Security
We use encrypted connections, restricted access and reputable providers. No system is perfectly secure; if a breach affects you, we'll tell you when the law requires it.
11. Children
Polyfetch is for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.
12. Changes
When this policy changes we'll update the date at the top. If a change is significant, we'll email account holders before it takes effect.
13. Contact
the Polyfetch team. Email jon@solura.ai.