Last updated: 15 September 2025
This Privacy Policy explains how Mission:Job (operated by Aspire Creative Services, Ltd, UK) collects, uses, shares and protects your information when you use our website and services.
Who we are
Mission:Job is a career and document-creation platform that helps users create CVs, cover letters and related content, including with the assistance of AI. The data controller is Aspire Creative Services, Ltd (United Kingdom). For enquiries, please use the contact page on our website.
Scope
This policy applies to visitors and registered users of our public site and dashboard, including any AI-powered features, token management, document storage and downloads.
Information we collect
- Account and identity data: name, email address, country, optional contact details, verification status and security data.
- Profile and content data: employment history, skills, role preferences, LinkedIn URL, phone, location, and any documents or text you upload or generate (CVs, cover letters, notes).
- Usage and technical data: IP address, device/browser info, timestamps, session IDs, activity logs, performance metrics and diagnostic logs.
- Token and entitlement data: token balances, token consumption, Access Pass plans, purchase confirmations and related metadata. We do not collect or store payment card details. All payment processing is performed by third‑party payment processors; we receive payment confirmations/metadata to apply entitlements you purchase.
- AI inputs and outputs: prompts, instructions and the resulting AI-generated content to deliver and improve services and for safety/abuse prevention.
- Communications: support requests, feedback and in-product messages.
- Cookies and similar technologies: essential cookies for session/authentication and optional analytics where applicable.
- Referral and campaign data: UTM parameters and similar identifiers when provided.
- Timezone and locale preferences to localise dates/times in the UI.
Sources of data
- Directly from you when you register, upload content, purchase tokens, or contact support.
- Automatically from your device/browser when you use the platform.
- From third parties such as payment processors, analytics providers, and AI vendors where necessary to provide the service.
How we use your information (UK GDPR lawful bases)
- Provide and operate the service, including document creation and downloads (performance of a contract with you).
- Authenticate users, maintain security, prevent fraud and abuse (legitimate interests/legal obligation).
- Apply payment confirmations from our payment processor and manage tokens, including eligibility checks and usage accounting (performance of a contract/legitimate interests/legal obligation).
- Deliver AI-assisted features, including sending prompts and content to third-party AI providers (contract/legitimate interests).
- Improve, troubleshoot and develop our products, including analytics, quality assurance and A/B testing (legitimate interests; consent where required).
- Communicate with you about your account, updates, policy changes and support (contract/legitimate interests).
- Marketing with your consent, where applicable (consent).
- Comply with legal obligations and enforce our Terms (legal obligation/legitimate interests).
AI-specific processing
To provide AI-assisted features, we send necessary content you supply (for example, profile details, job histories, skills, and prompts) to third-party AI providers such as OpenAI and Google/Vertex AI to generate outputs. These vendors process the data under their terms and privacy practices and may temporarily log requests for safety/abuse prevention. Outputs may contain inaccuracies ("hallucinations") or omit important details. You must fact-check all AI outputs, ensure accuracy, remove sensitive information you do not wish to share, and make any necessary corrections before use. Avoid submitting special category data (such as health, racial or ethnic origin) unless strictly necessary.
Tokens and Access Pass
AI features consume tokens. Your remaining tokens are displayed in your profile. Access to AI features and the document library is governed by your Access Pass expiry. When an Access Pass expires, AI features and library access are disabled and any remaining tokens expire. If you renew your Access Pass before it expires, all existing tokens will expire at renewal and be replaced with the new token allocation included with the renewed Access Pass.
Sharing your information
- Service providers and processors: hosting, storage, analytics, email delivery, customer support, payment processing and AI vendors.
- Legal and compliance: to comply with law, enforce our Terms, or protect rights, safety and security.
- Business transfers: as part of a merger, acquisition or asset sale, subject to appropriate safeguards.
International data transfers
Your data may be processed outside the UK/EEA (for example, by AI providers or cloud hosting). Where transfers occur, we rely on recognised safeguards such as the UK International Data Transfer Agreement/Addendum or Standard Contractual Clauses.
Retention
We retain personal data for as long as necessary to provide the service, comply with legal obligations, resolve disputes and enforce agreements. This typically includes: account data for the life of the account; generated documents and activity logs for operational needs; and transaction records as required by law. You may request deletion of your account and content, subject to legal or legitimate business retention requirements. If you request deletion, any remaining tokens and Access Pass time will be surrendered and will not be refunded (except where a refund is required by applicable law).
Security
We use technical and organisational measures to protect personal data, including encryption in transit, access controls and monitoring. However, no system is 100% secure and we cannot guarantee absolute security.
Your rights (UK GDPR)
- Access, rectification, erasure and restriction of processing.
- Data portability and the right to object to processing based on legitimate interests.
- Withdraw consent at any time where processing relies on consent.
- Lodge a complaint with the UK Information Commissioner’s Office (ICO).
- To exercise your rights, please use the contact page on our website.
Account and renewal notices
If your Access Pass is approaching expiry or has expired, we may contact you about your account status and renewal options (legitimate interests). You can manage marketing preferences within your account where available.
Cookies
We use essential cookies to operate the site (e.g., authentication, session management). Where non-essential analytics cookies are used, we will ask for your consent via a banner (in regions where required). You can adjust cookie settings in your browser; disabling essential cookies may impact functionality.
Children
Our services are intended for adults. If you are under 18, you may only use the services with parental consent. Do not submit personal data of children without appropriate consent.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date. The updated version is effective upon posting (unless stated otherwise) and supersedes all prior versions. Your continued use of the services after changes take effect constitutes acceptance.
Contact
Questions about this policy or your data rights: please use the contact page on our website.