Privacy Notice - nixers
1. Who We Are
nixers is a jobs site for Ireland that helps people find work (mostly shift, casual and hands-on work) and lets employers post jobs. This notice explains what we do with your information in plain English.
nixers is operated by Factory X Limited (trading as nixers.com), company number 790278, registered address 1 Adelaide Villas, Adelaide Road, Glenageary, Co. Dublin, A96 V2T8. For data protection law, Factory X Limited is the controller of your information.
Contact for anything in this notice: hi@nixers.com. A person reads that inbox.
You must be 16 or over to use nixers (section 10).
2. The Short Version
We do not sell your information. We do not use advertising trackers. Section 3.13 describes Google Analytics and the counts we keep ourselves.
- If You...
- Only browsed
- We Hold...
- Almost nothing. See section 3.1.
- If You...
- Chatted with the nixers job assistant
- We Hold...
- Your chat stays in your own browser. To reply, we pass what you typed to our AI provider, and we do not keep a copy. See section 3.2.
- If You...
- Uploaded a CV
- We Hold...
- The file, the text we read from it, and the profile details you confirm. See section 3.3.
- If You...
- Made an account
- We Hold...
- Your name, email address, password (stored scrambled, never readable), area, and anything you add.
- If You...
- Turned on job emails
- We Hold...
- Your choices and a record of what we sent.
- If You...
- Turned on phone alerts
- We Hold...
- The address and keys your browser gives us for the notification, your account, and your choices. See section 3.12.
- If You...
- Used Help me apply
- We Hold...
- The draft we wrote with you. Help me apply never sends it for you.
- If You...
- Turned on Apply for me
- We Hold...
- Your apply profile, what we sent to each employer, screenshots, and their confirmation, kept as your application history while your account is open. A short record of each batch you approved (when, which jobs, a fingerprint of the cover note) is kept for 6 years. See section 3.14.
- If You...
- Applied for a job
- We Hold...
- Your email address, your message, an optional name, and the job.
- If You...
- Posted a job
- We Hold...
- The job, a reply email address or your account, and a business phone number if you give one. The number is shown only after a tap.
- If You...
- Recorded a job by voice
- We Hold...
- Your recording, its text, and the job details picked out of it. The recording is published on the job.
- If You...
- Run a company whose job we list as Sourced or imported
- We Hold...
- The public job details and links to the employer's own site. No named contact person. A business phone number, if the listing has one, is shown only after a tap. See section 3.9.
| If You... | We Hold... |
|---|---|
| Only browsed | Almost nothing. See section 3.1. |
| Chatted with the nixers job assistant | Your chat stays in your own browser. To reply, we pass what you typed to our AI provider, and we do not keep a copy. See section 3.2. |
| Uploaded a CV | The file, the text we read from it, and the profile details you confirm. See section 3.3. |
| Made an account | Your name, email address, password (stored scrambled, never readable), area, and anything you add. |
| Turned on job emails | Your choices and a record of what we sent. |
| Turned on phone alerts | The address and keys your browser gives us for the notification, your account, and your choices. See section 3.12. |
| Used Help me apply | The draft we wrote with you. Help me apply never sends it for you. |
| Turned on Apply for me | Your apply profile, what we sent to each employer, screenshots, and their confirmation, kept as your application history while your account is open. A short record of each batch you approved (when, which jobs, a fingerprint of the cover note) is kept for 6 years. See section 3.14. |
| Applied for a job | Your email address, your message, an optional name, and the job. |
| Posted a job | The job, a reply email address or your account, and a business phone number if you give one. The number is shown only after a tap. |
| Recorded a job by voice | Your recording, its text, and the job details picked out of it. The recording is published on the job. |
| Run a company whose job we list as Sourced or imported | The public job details and links to the employer's own site. No named contact person. A business phone number, if the listing has one, is shown only after a tap. See section 3.9. |
3. Find Yourself Here
3.1 You Only Looked Around
You can browse nixers without an account. We do not use advertising cookies. Google Analytics loads only if you accept, as section 3.13 describes. Our fonts are served from nixers itself, not from Google.
- Usage Counts: Section 3.13. Those counts are not linked to your account, and they do not say who you are.
- Server Logs: Our hosting provider, Vercel, keeps server logs for a short period when it serves a page, which can include your IP address. Our own code does not store your IP address.
- Lawful Basis: Legitimate interests, in running a working and secure website.
3.2 You Chatted with the nixers Job Assistant
The assistant on the homepage and at /chat asks what work you want and where, then shows you live jobs on nixers that fit.
- What We Hold: The conversation is kept in your own browser on this device, so it is there when you come back. Starting a new chat clears it. We do not keep a copy of the conversation on our servers. When the assistant replies, what you typed in that chat is sent to our server and to OpenAI, so it can work out the reply and which jobs to look up. We log that a reply ran, and the cost, not the words.
- How It Works: The assistant works out what you asked with OpenAI, then looks up live jobs on nixers with our own search. If OpenAI is unavailable, or you have hit a limit, it falls back to our own rules and does not send that message on. This includes a chat with no account. We send the words you type, and the job titles, employers, places, and pay labels of the listings we look up. We do not send a job's full description, and we do not send your name, email, or CV, unless you have already put those in the chat yourself. If you add a CV in the chat, that is different (section 3.3). The assistant searches jobs listed on nixers. It does not search other websites. If you ask, the assistant can give you a link to a search on jobs.ie, indeed.ie, or irishjobs.ie. We do not send those sites your name, your email, your CV, or your chat. The link contains only the kind of work and the place you asked for. Opening it takes you to that site, and their own privacy notice applies. We do not run the search for you, and we do not copy their jobs onto nixers.
- Nothing Invented: The assistant is built not to make up jobs, employers, experience or qualifications. It only uses what you told it and what is in the listings. If a listing does not say something, like the hours, it says it does not know.
- Sensitive Data: Do not share things you would not tell an employer. You do not need to tell the assistant about your health, religion, immigration status or anything similar to find work. We do not use it for matching. If you turn on Apply for me, it asks whether you have the right to work in Ireland, as a yes or no, because employers' forms ask it (section 3.14).
- Lawful Basis: Contract, to give you the job search you asked for.
3.3 You Uploaded a CV
You can add your CV in the chat with the paperclip icon (PDF, DOC or DOCX, up to 4 MB). You need an account to upload a CV.
- What Happens: We read the text out of the file. Then an AI provider (OpenAI, section 4) pulls out the details that help you find work: the kinds of work you have done, skills, tickets or certificates, where you want to work, and your phone number if it is on the CV. We show you what we pulled out so you can check it. We do not add experience, employers or qualifications you did not give us. You can also paste your details instead of uploading a file, and the same steps apply.
- What We Keep: The CV file itself, in private storage, until you replace or remove it. The text read from it. The profile details you confirm. All of this is deleted within 7 days of you asking us to close your account (section 3.4).
- Matching: If you open your matches, we use your confirmed profile, and OpenAI, to rank live jobs for you. A chat with no account can also send job titles to OpenAI when it ranks a search. Section 3.2 covers the assistant.
- Who Sees It: Only you, and a small number of nixers staff when needed to run the service. Your CV and profile are not shown to employers. When you apply, the employer gets only what you write in your application (section 3.6). If you use Apply for me, the employers you choose get your CV and the details listed in section 3.14, and nobody else does.
- Third-Party Details: CVs carry other people's details (such as a referee's name or phone number). Leave referees off if you prefer.
- Lawful Basis: Contract, to build the profile you asked for and match you to jobs.
3.4 You Made an Account
- What We Hold: Your full name, email address, password, whether you are looking for work or hiring, your area, and anything you choose to add. Your password is stored in a scrambled form that nobody at nixers can read.
- Signing In: You sign in with your email address and password. If you forget your password, we email you a link to reset it.
- Applying Without an Account: If you apply for a job posted on nixers without an account, we create one with your email address so the conversation has somewhere to live. We then email you a link to sign in.
- Agreeing to Our Terms: When you create an account, you tick a box that says "By continuing you agree to our Terms and Privacy Notice". We keep a record of when you agreed.
- Closing Your Account: Closing an account is a manual request by email to hi@nixers.com from your account email address. There is no close-account button. A person actions the request within 7 days, using the closure script, and we delete your profile, CV file and CV text, Help me apply drafts, your apply profile and anything Apply for me still holds (section 3.14), job email settings, your phone alert address and keys, the record of emails we sent you, and your list of applications. Section 3.6 explains what happens to your messages, and section 3.7 to jobs you posted.
- Lawful Basis: Contract, to provide your account.
3.5 You Turned On Job Emails
- Job Alert Emails: If you have an account, you can turn on job emails in Settings, choose "As they are posted" or "Once a day", and pick the kinds of work. They go to your account email only, and are off until you turn them on. We send at most 3 alert emails in a day, and nothing when there is nothing new. Every alert email includes an unsubscribe link. Turning the switch off stops them. Your choices are kept so you can turn them back on, and are deleted within 7 days of you asking us to close your account (section 3.4).
- Other Emails: We also send emails you need for the service: sign-in and password emails, and emails about your applications or job posts. These are not optional while you use those features.
- Lawful Basis: Consent for job alert emails. You turned them on, and you can turn them off at any time. Contract for the service emails. We send no newsletters or marketing.
3.6 You Used Help Me Apply, or Applied for a Job
Help me apply drafts an application or introduction for a job. It uses only what is in your confirmed profile and what you told us. OpenAI may phrase that draft. If it adds anything you did not give us, or if it fails, we show you our fixed template instead.
- nixers Drafts, You Send: We show you the draft. Nothing on the Help me apply page is sent for you. We never send your details to an employer without your OK for that job. If you turn on Apply for me, we can send applications for you, but only to the jobs you approve (section 3.14).
- Drafts We Keep: Your drafts are saved with your account so you do not lose them. They are deleted within 7 days of you asking us to close your account (section 3.4).
- Sourced and Imported Jobs: For these jobs you apply on the employer's own site, or you call or text the employer yourself after you tap to reveal a business number (section 3.9). If you use Apply for me, we can fill in and send the employer's form for you (section 3.14). Otherwise, opening a link sends nothing from us to the employer and is not an application. If you are signed in, we add the job to your Applications list as "Started" so you can track it. What you give the employer is covered by their privacy notice. nixers does not call or text for you.
- Jobs Posted on nixers: If you apply through nixers, your application goes to the person who posted the job and nobody else. We hold your email address, your message, the name you give (if any) and the job. When you apply while signed out, we also link the application to a random browser token (nx_subject, section 8), so we can limit how many applications one browser sends. We email the poster to say they have an application.
- Messages: You and the poster can then message each other on nixers. When you ask us to close your account, the text of your messages is wiped within 7 days (section 3.4). The other person's own messages stay in their inbox.
- Lawful Basis: Contract, to draft and send the application you asked for. Legitimate interests for the application limits, to stop spam.
3.7 You Posted a Job
You can post a job with or without an account. We hold the job (title, description, kind of work, job type, pay, location and venue if you give one) and a reply address so people can answer. Your reply address is never shown on the job. If you enter a business phone number, section 3.9 explains how we show it.
- How Long It Stays Up: A job posted by voice comes off the board after 7 days. A typed job stays up until you take it down or we remove it.
- Posting Without an Account: You get two links. One opens your applications. The other takes the job down. The takedown link hides the job, and deletes your reply address, any business phone number, and any voice recording. A record of the job (title, description, pay and location, with no contact details) is kept for 12 months after the job ends. Keep the links safe.
- Lost Your Takedown Link: Email hi@nixers.com. We will only send a new link to the reply address on the job, after you show us you control that address.
- Agreeing to Our Terms: When you post a job, you tick a box that says "By continuing you agree to our Terms and Privacy Notice". We keep a record of when you agreed.
- Closing an Account: Asking us to close your account does not delete jobs you posted. When we action that request, we remove your name, reply address and any business phone number from them (section 3.4).
- Lawful Basis: Contract, to publish your job and pass on replies. Legitimate interests for a business phone number on the listing (section 3.9).
3.8 You Recorded a Job by Voice
Recording is the default way to post a job. You can choose to type it instead.
- Your Consent First: Before anything is recorded, we show you a short card explaining what happens. We only record if you tap "Record my job". We keep a record of the exact words on the card and when you agreed. If you are signed out, that record is linked to a random browser token (nx_subject, section 8).
- Recording Once: You record your job. We send the recording to OpenAI to turn it into text, pick out the job details (role, place, pay and time), and check the text for harmful content. You check the details before the job goes up.
- Live Conversation: You can also talk the job through with our voice assistant, which is run by ElevenLabs (section 4). It may ask you questions, and your answers are recorded and processed too, to fill in the job. We do not keep a recording or transcript of that conversation on nixers. You then record a short description of the job, which is the recording that is published.
- Published: Only your own recording is published on the job, so people can hear what the job is. Do not say your home address, PPS number or anything you would not put on a poster.
- Removing It: The takedown link deletes your recording along with your reply address. You can also email hi@nixers.com.
- How Long We Keep It: Section 7.
- Lawful Basis: Consent. You can withdraw it by taking the job down.
3.9 Your Company's Job Is Listed as Sourced or Imported
- Sourced Jobs: Our team found these on the employer's own public careers page and listed them so people can find them. They are marked "Sourced". You apply on the employer's site, or by phone, text or in person when the listing says so. We do not take applications for Sourced jobs on nixers.
- Imported Jobs: We also import jobs automatically from public job pages on recruitment systems that employers use. Today most come from Rezoomo. Others come from Oleeo (Dunnes Stores), HireHive (Focus Ireland), Workable (CrewLink) and Oracle (An Post), and we add sources over time. We check them every 6 hours. These jobs show "Apply on" followed by the source, and that link takes you there. An imported job comes off the board when the source stops listing it, or when we cannot reach the source for 7 days.
- What We Hold: The job details, employer name, and links to the employer's site, logo and careers page. No named contact person. We strip email addresses and phone numbers out of imported job text, so a number in the description is not left there.
- Employer Phone Number: Some listings show a business phone number for the employer. The poster entered it, or we took it from the original public job post we index. The apply method (apply_method) is phone or text, and the number is the apply phone (apply_phone). We show it only when a job seeker taps to reveal it, so they can call or text about that job. nixers does not call or text for anyone, and we do not use the number for marketing. The reply email on a job you posted is separate, and is never shown on the job (section 3.7). An employer can ask us to remove the number at hi@nixers.com.
- Takedowns: If you are named in one, or you are the employer and want it removed, email hi@nixers.com and we will take it down within 24 hours of your request. Employers can also stop imports of their jobs at nixers.com/index-opt-out.
- Lawful Basis: Legitimate interests, in helping people find genuine, public job openings in Ireland, and in letting a seeker call or text the employer about that job. We have carried out a balancing assessment of these interests against the rights of the people involved. You can ask us for it at hi@nixers.com.
3.10 Keeping nixers Safe
- Moderation: Voice recordings are checked automatically for harmful content (section 6). You can report a job, and a person reviews reports.
- Limits: We limit how many applications and messages can be sent, and how many voice sessions can be started, in a day. These limits use your account or the browser token.
- Account Actions: We can suspend accounts that break our terms.
- Lawful Basis: Legitimate interests, in keeping people safe from spam, scams and harmful content.
3.11 Lawful Basis at a Glance
- What We Do
- Accounts, sign-in, CV and profile, matching, Help me apply, applications, messages, posting jobs
- Lawful Basis
- Contract
- What We Do
- Apply for me: filling in and sending the applications you approve, and the summary
- Lawful Basis
- Contract
- What We Do
- Apply for me: checks, limits, step log and the record of your approval
- Lawful Basis
- Legitimate interests
- What We Do
- Recording a job by voice and publishing the recording
- Lawful Basis
- Consent
- What We Do
- Job alert emails
- Lawful Basis
- Consent
- What We Do
- Phone alerts for new jobs
- Lawful Basis
- Consent
- What We Do
- Service emails (sign-in, password, application and job post emails)
- Lawful Basis
- Contract
- What We Do
- Sourced and imported job listings
- Lawful Basis
- Legitimate interests
- What We Do
- Employer phone number on a listing
- Lawful Basis
- Legitimate interests
- What We Do
- Moderation, limits, suspensions, server logs
- Lawful Basis
- Legitimate interests
- What We Do
- Google Analytics (section 3.13)
- Lawful Basis
- Consent
- What We Do
- Our own product analytics (section 3.13)
- Lawful Basis
- Legitimate interests
| What We Do | Lawful Basis |
|---|---|
| Accounts, sign-in, CV and profile, matching, Help me apply, applications, messages, posting jobs | Contract |
| Apply for me: filling in and sending the applications you approve, and the summary | Contract |
| Apply for me: checks, limits, step log and the record of your approval | Legitimate interests |
| Recording a job by voice and publishing the recording | Consent |
| Job alert emails | Consent |
| Phone alerts for new jobs | Consent |
| Service emails (sign-in, password, application and job post emails) | Contract |
| Sourced and imported job listings | Legitimate interests |
| Employer phone number on a listing | Legitimate interests |
| Moderation, limits, suspensions, server logs | Legitimate interests |
| Google Analytics (section 3.13) | Consent |
| Our own product analytics (section 3.13) | Legitimate interests |
Where we rely on legitimate interests, you can object (section 9). Our balancing assessments are available on request at hi@nixers.com.
3.12 You Turned On Phone Alerts
Phone alerts are notifications on this device when there is a new job that fits. They are off until you turn them on.
- What We Hold: If you have an account, you can turn them on from the job assistant or from your alert settings. Nothing is stored, and your browser is not asked for permission, until you tap that button. We then store the push address your browser gives us (the subscription endpoint), the two keys that keep the message private (p256dh and auth), your account id, and your alert choices (which kinds of work, and how often).
- What They Are For: Job alert notifications only. We send at most one phone alert a day, and nothing when there is nothing new. We do not use them for newsletters or marketing.
- Who Carries Them: We send the notification from our own servers with the web-push library. Your browser's push service then carries it to this device. That service is Google (Firebase Cloud Messaging, FCM) for Chrome, Mozilla (autopush) for Firefox, or Apple for Safari. They see the notification and the push address, so they can deliver it. They do not get your CV, your chat, or your email address. See section 4.
- How to Turn Them Off: Tap unsubscribe on the notification, or turn phone alerts off in your alert settings. That deletes the address and keys we stored. You can also turn the permission off in your browser. The address and keys are also deleted within 7 days of you asking us to close your account (section 3.4). We keep the record that you agreed, as proof, for the period in section 7. Turning phone alerts off does not close your account.
- Lawful Basis: Consent. Phone alerts are opt-in only. You can withdraw that consent at any time, in the ways above. Withdrawing stops future alerts. It does not undo a notification already sent.
3.13 Analytics
We count how the site is used so we can improve search and the service. We do not use these counts for advertising.
- Google Analytics: We load Google Analytics 4 only after you choose Accept on the cookie banner. Accept and Reject are equal. Nothing from Google loads until you choose, and Reject loads nothing. Google Consent Mode v2 defaults to denied: ad_storage, analytics_storage, ad_user_data and ad_personalization. If you accept, only analytics_storage is granted. The advertising signals stay denied, because we do not run ads. We do not send Google the words you searched for, your email address, or your user id. If you reject after accepting, we delete the Google cookies. Google (Google Ireland Ltd and Google LLC) is the processor (section 4).
- Our Own Counts: We also keep first-party product analytics in our Supabase database in the EU (Frankfurt, eu-central-1). Counts without consent use no cookie or identifier. With consent, we store an anonymous random session id in the nx_sid cookie (section 8). It is set only after Accept, and it is not linked to your account. The events are searches (the words you searched for, after we tidy them and strip personal details such as a phone number or an email address), job views, apply clicks, turning job alerts on or off, signups (that an account was created, without your email address or user id), and usage stats for the job assistant. We do not store your IP address, your email address, or your user id in these events. The events it tags are kept for 13 months.
- Purpose: To improve search and the service.
- Lawful Basis: Google Analytics is consent. You can withdraw that consent at any time from Cookie settings in the footer. Withdrawing stops Google Analytics and deletes the Google cookies. Our own counts use legitimate interests. You can object (section 9).
- How Long: These are three different periods. Google keeps the analytics data for 14 months. That is a setting on the Google Analytics property, and Google signals are off. Our own counts in Supabase are kept for 13 months, then we delete them. The _ga cookies themselves expire after 2 years, which is Google's default. We do not set a different cookie lifetime. Section 8 lists each cookie.
- Do Not Track and Global Privacy Control: If your browser sends either signal, we honour it. We do not record our own product analytics, and we do not load Google Analytics.
3.14 You Turned On Apply for Me
Apply for me fills in employers' application forms and sends them for you. It is off until you turn it on. You need an account.
- What We Use: Your name, email address, phone number, CV, and the apply profile you fill in once: whether you have the right to work in Ireland (yes or no), a permit type only if you choose to give it, your notice period, your availability, and answers you write to common questions. For each batch, a cover note you check. OpenAI may phrase the cover note, under the same rule as Help me apply (section 3.6).
- Your Approval: You tick the jobs you want, up to 5 at a time, and check the cover note and details we will use. Nothing is sent until you tap Send. That tap is your instruction for every job you ticked. We then wait 5 minutes before sending anything, and you can tap Stop during that time. We do not show you each form before it goes.
- What We Send, and Where: For each job you approved, we open the employer's own application form, fill it in from your apply profile and cover note, and send it. It goes to that employer and the hiring system they use for that form (for example HireHive or Teamtailor), and nobody else. The employer, and their hiring system for them, then handle your application under their own privacy notice. We do not send applications through job boards.
- Nothing Invented: We only put in what is in your apply profile and your cover note. If a form asks something we have no answer for, we do not guess. We do not send that application, and we mark it "Needs you - not sent". We never answer questions about health, disability, diversity monitoring or criminal records for you, and we never tick marketing boxes. If a form needs you to accept the employer's own terms or privacy notice to apply, we tick that box for you.
- Sites We Do Not Get Around: If a site needs your own login, shows a "prove you're human" check, or does not allow automated applications (in its terms or its robots.txt file), we stop and mark it "Needs you - not sent". We never use your passwords for other sites.
- Under 18: If you are under 18, or have not told us you are 18 or over, we do not send applications for jobs that need you to be 18 or over, such as bar or alcohol service, security, driving or late-night work. We mark them "Needs you - not sent" and say why. You can still apply for them yourself.
- How It Runs: A short-lived browser on Vercel, run in Dublin, fills in and sends each form. It gets your details and CV for that one application, and is deleted when it finishes. Vercel is a US company (section 5). To work out which detail goes in which box, we send OpenAI the form's questions and the names of the details we hold (like "phone"), not your answers.
- Proof: After each batch we show you, and email you, a summary: what we sent to each employer, and their confirmation or reference number if they showed one. We keep a screenshot of the filled form, a screenshot and text of the employer's confirmation page, and a copy of what we sent, in your applications list as your application history, while your account is open. We delete them within 7 days of you asking us to close your account. You can ask us to delete them sooner at hi@nixers.com.
- Record of What You Approved: For each batch, we keep a short record: your account, when you tapped Send, which jobs you ticked, and a fingerprint (a hash) of the cover note. It holds no application content: no cover note text, answers or CV. We keep it for 6 years, as proof of what you asked us to send.
- Checks and Limits: Before each send, we check every detail against your apply profile, check the job is still open, and check we have not sent it before. We send at most 5 jobs in a batch, 10 a day, and 2 to the same employer in a week. We keep a log of each step (which site, which step, whether it worked), without your answers or contact details in it. We can pause Apply for me for everyone, or for one site.
- Turning It Off: Turn it off any time in Settings. That stops anything not yet sent, including a batch still in its 5 minutes. An application already sent stays with the employer. To withdraw it, contact the employer. We show you how in the summary.
- Employers: An employer can ask us not to apply to their jobs automatically, at nixers.com/index-opt-out or hi@nixers.com.
- Lawful Basis: Contract, to send the applications you ask for. Legitimate interests for the checks, limits, log and the record of your approval, to stop mistakes and spam and to show what you asked us to send. You can object to those (section 9).
4. Who Else Handles Your Information
We use a small number of outside services. Each acts on our instructions under a signed data processing agreement.
- Who
- Supabase
- What They Do
- Our database, file storage (CVs and voice recordings) and sign-in
- What They See
- Everything we store
- Where
- EU (Frankfurt)
- Who
- Vercel
- What They Do
- Runs the website and our server code
- What They See
- Requests to the site, the data our code handles, and server logs
- Where
- US (Washington DC)
- Who
- Vercel (Sandbox)
- What They Do
- Runs the short-lived browser that fills in and sends Apply for me forms
- What They See
- The employer's form, and your details and CV for that one application. Deleted when the run ends
- Where
- Run in the EU (Dublin). Vercel is a US company
- Who
- Resend
- What They Do
- Sends our emails
- What They See
- Your email address and the email content
- Where
- Sent from the EU (Ireland). Resend is a US company
- Who
- OpenAI
- What They Do
- Reads CVs and pasted profiles, ranks your matches, replies in the job assistant, and may phrase Help me apply drafts and Apply for me cover notes, reads the questions on an employer's form to match them to the details you saved (not your answers), turns voice recordings into text and job details, and checks recordings for harmful content
- What They See
- CV and profile text, the words you type to the job assistant, job titles and the other listing details in section 3.2, the questions on employers' application forms, voice recordings and their text
- Where
- US
- Who
- ElevenLabs
- What They Do
- Runs the live voice conversation when you post a job by voice
- What They See
- Your voice and answers during that conversation
- Where
- US
- Who
- Google (Firebase Cloud Messaging, FCM)
- What They Do
- Carries phone alerts to Chrome and browsers that use it
- What They See
- The notification and the push address your browser gave us
- Where
- US
- Who
- Mozilla (autopush)
- What They Do
- Carries phone alerts to Firefox
- What They See
- The notification and the push address your browser gave us
- Where
- US
- Who
- Apple
- What They Do
- Carries phone alerts to Safari
- What They See
- The notification and the push address your browser gave us
- Where
- US
- Who
- Google (Google Ireland Ltd and Google LLC)
- What They Do
- Google Analytics 4, only after you accept cookies
- What They See
- Page views and site events. Not the words you searched for, your email address, or your user id. Advertising signals stay denied
- Where
- Google Ireland Ltd in Ireland. Google LLC in the US
| Who | What They Do | What They See | Where |
|---|---|---|---|
| Supabase | Our database, file storage (CVs and voice recordings) and sign-in | Everything we store | EU (Frankfurt) |
| Vercel | Runs the website and our server code | Requests to the site, the data our code handles, and server logs | US (Washington DC) |
| Vercel (Sandbox) | Runs the short-lived browser that fills in and sends Apply for me forms | The employer's form, and your details and CV for that one application. Deleted when the run ends | Run in the EU (Dublin). Vercel is a US company |
| Resend | Sends our emails | Your email address and the email content | Sent from the EU (Ireland). Resend is a US company |
| OpenAI | Reads CVs and pasted profiles, ranks your matches, replies in the job assistant, and may phrase Help me apply drafts and Apply for me cover notes, reads the questions on an employer's form to match them to the details you saved (not your answers), turns voice recordings into text and job details, and checks recordings for harmful content | CV and profile text, the words you type to the job assistant, job titles and the other listing details in section 3.2, the questions on employers' application forms, voice recordings and their text | US |
| ElevenLabs | Runs the live voice conversation when you post a job by voice | Your voice and answers during that conversation | US |
| Google (Firebase Cloud Messaging, FCM) | Carries phone alerts to Chrome and browsers that use it | The notification and the push address your browser gave us | US |
| Mozilla (autopush) | Carries phone alerts to Firefox | The notification and the push address your browser gave us | US |
| Apple | Carries phone alerts to Safari | The notification and the push address your browser gave us | US |
| Google (Google Ireland Ltd and Google LLC) | Google Analytics 4, only after you accept cookies | Page views and site events. Not the words you searched for, your email address, or your user id. Advertising signals stay denied | Google Ireland Ltd in Ireland. Google LLC in the US |
Employers and Hiring Systems: When Apply for me sends an application, the employer you chose receives it, through their own site or the hiring system they use (such as HireHive, Teamtailor, Workable or Recruitee). They are not our processors. The employer decides what happens to your application, under their own privacy notice.
AI Training: OpenAI's API terms say that data sent through its API is not used to train its models by default. We use OpenAI through its API.
5. Sending Information Outside the EU
Our database and files are stored in the EU (Frankfurt), and our emails are sent from Ireland. Our website code runs in the US (Vercel, Washington DC), so information you send through the site is processed there. The browser that fills in and sends Apply for me forms runs in the EU (Vercel, Dublin), but the request that starts it may pass through our US servers, and Vercel, a US company, may access it from the US under the same safeguards. OpenAI and ElevenLabs are in the US. Phone alerts are carried by Google, Mozilla or Apple, which are in the US (section 4). Google Analytics is handled by Google Ireland Ltd and by Google LLC in the US (section 4). When your information goes to Vercel, Resend, OpenAI, ElevenLabs, Google, Mozilla or Apple, it is protected by Standard Contractual Clauses (and the EU-US Data Privacy Framework where the provider is certified). Each of these safeguards is part of our agreement with that provider.
Supabase stores our data in the EU (Frankfurt). You can ask us for a copy of the safeguards at hi@nixers.com.
6. Automated Decisions
The assistant and your matches rank and filter jobs automatically, using what you told us, your profile, and the listings. The assistant's replies are written with OpenAI and checked against those listings. This decides which jobs you see first. It does not decide whether you get a job: employers decide that. Apply for me may suggest similar jobs to apply for, but only sends to the jobs you tick, and it fills in forms from the details you gave us. It does not decide anything about you.
Voice recordings are checked automatically for harmful content. If a recording is flagged, the job is hidden. Whenever we hide your content or suspend your account, we email you the reason and how to appeal. To appeal, email hi@nixers.com. A person reviews every appeal, and we reply within 14 days. Typed jobs are not checked automatically. A person reviews reports about them.
7. How Long We Keep Things
The general rule: we keep your information while your account is open. Closing an account is a manual request by email to hi@nixers.com, actioned within 7 days using the closure script. We delete your information within those 7 days. The exceptions are set out in the table below.
- What
- Chat conversation
- How Long
- In your own browser until you start a new chat or clear your browser data. We do not keep a copy. OpenAI processes the message to produce the reply and does not use API data to train its models by default (section 4).
- What
- CV file and text read from it
- How Long
- Until you replace or remove it, or within 7 days of you asking us to close your account.
- What
- Confirmed profile details
- How Long
- While your account is open. Deleted within 7 days of you asking us to close it.
- What
- Help me apply drafts
- How Long
- While your account is open. Deleted within 7 days of you asking us to close it.
- What
- Job email settings
- How Long
- While your account is open, even when switched off. Deleted within 7 days of you asking us to close it.
- What
- Record of emails sent to you
- How Long
- Deleted within 7 days of you asking us to close your account.
- What
- Applications list
- How Long
- Deleted within 7 days of you asking us to close your account.
- What
- Apply profile (right to work, notice period, saved answers)
- How Long
- While your account is open, or until you remove it. Deleted within 7 days of you asking us to close your account.
- What
- Apply for me screenshots, confirmation text and the copy of what we sent
- How Long
- Your application history. While your account is open. Deleted within 7 days of you asking us to close it, or sooner if you ask.
- What
- Apply for me status, employer, job, date and reference number
- How Long
- Part of your applications list. While your account is open. Deleted within 7 days of you asking us to close it.
- What
- Apply for me step log (no answers or contact details)
- How Long
- 12 months, then deleted. Deleted within 7 days of you asking us to close your account.
- What
- Record that you turned Apply for me on, and of each batch you approved (your account, when, which jobs, and a fingerprint of the cover note; no application content)
- How Long
- 6 years, as proof of what you asked us to send. This applies even after we close your account.
- What
- Your messages
- How Long
- Text wiped within 7 days of you asking us to close your account. The other person's own messages stay.
- What
- Account
- How Long
- Until you ask us to close it, by email to hi@nixers.com.
- What
- A posted job on the board
- How Long
- Voice posts: 7 days. Typed posts and Sourced jobs: until taken down. Imported jobs: until the source stops listing them.
- What
- Job record after it comes off the board
- How Long
- 12 months after the job ends, then deleted. Your name is removed sooner if you ask us to close your account.
- What
- Reply address given when posting without an account
- How Long
- Deleted when you use the takedown link, or 12 months after the job ends, whichever comes first.
- What
- Voice recording, its text and the job details from it
- How Long
- Deleted when you use the takedown link. Otherwise deleted 90 days after the job comes off the board, or 30 days after it is hidden by moderation.
- What
- Phone alert address and keys
- How Long
- Deleted when you turn phone alerts off, or within 7 days of you asking us to close your account.
- What
- Records of your consent (such as for voice recording or phone alerts), of turning on Apply for me, and of your agreement to our terms
- How Long
- 6 years from when you gave it, as proof of what you agreed to. This applies even after we close your account, and even after you turn phone alerts off.
- What
- Our own product analytics in Supabase (section 3.13)
- How Long
- 13 months, then deleted.
- What
- Google Analytics data
- How Long
- 14 months. This is the Google Analytics property setting. Google signals are off.
- What
- Google Analytics cookies (_ga and _ga_756R5GDWDJ)
- How Long
- 2 years, Google's default, or sooner if you reject or withdraw consent (section 8). The cookie lifetime is not the 14 months above.
- What
- Server logs
- How Long
- Kept for a short period by our hosting provider.
| What | How Long |
|---|---|
| Chat conversation | In your own browser until you start a new chat or clear your browser data. We do not keep a copy. OpenAI processes the message to produce the reply and does not use API data to train its models by default (section 4). |
| CV file and text read from it | Until you replace or remove it, or within 7 days of you asking us to close your account. |
| Confirmed profile details | While your account is open. Deleted within 7 days of you asking us to close it. |
| Help me apply drafts | While your account is open. Deleted within 7 days of you asking us to close it. |
| Job email settings | While your account is open, even when switched off. Deleted within 7 days of you asking us to close it. |
| Record of emails sent to you | Deleted within 7 days of you asking us to close your account. |
| Applications list | Deleted within 7 days of you asking us to close your account. |
| Apply profile (right to work, notice period, saved answers) | While your account is open, or until you remove it. Deleted within 7 days of you asking us to close your account. |
| Apply for me screenshots, confirmation text and the copy of what we sent | Your application history. While your account is open. Deleted within 7 days of you asking us to close it, or sooner if you ask. |
| Apply for me status, employer, job, date and reference number | Part of your applications list. While your account is open. Deleted within 7 days of you asking us to close it. |
| Apply for me step log (no answers or contact details) | 12 months, then deleted. Deleted within 7 days of you asking us to close your account. |
| Record that you turned Apply for me on, and of each batch you approved (your account, when, which jobs, and a fingerprint of the cover note; no application content) | 6 years, as proof of what you asked us to send. This applies even after we close your account. |
| Your messages | Text wiped within 7 days of you asking us to close your account. The other person's own messages stay. |
| Account | Until you ask us to close it, by email to hi@nixers.com. |
| A posted job on the board | Voice posts: 7 days. Typed posts and Sourced jobs: until taken down. Imported jobs: until the source stops listing them. |
| Job record after it comes off the board | 12 months after the job ends, then deleted. Your name is removed sooner if you ask us to close your account. |
| Reply address given when posting without an account | Deleted when you use the takedown link, or 12 months after the job ends, whichever comes first. |
| Voice recording, its text and the job details from it | Deleted when you use the takedown link. Otherwise deleted 90 days after the job comes off the board, or 30 days after it is hidden by moderation. |
| Phone alert address and keys | Deleted when you turn phone alerts off, or within 7 days of you asking us to close your account. |
| Records of your consent (such as for voice recording or phone alerts), of turning on Apply for me, and of your agreement to our terms | 6 years from when you gave it, as proof of what you agreed to. This applies even after we close your account, and even after you turn phone alerts off. |
| Our own product analytics in Supabase (section 3.13) | 13 months, then deleted. |
| Google Analytics data | 14 months. This is the Google Analytics property setting. Google signals are off. |
| Google Analytics cookies (_ga and _ga_756R5GDWDJ) | 2 years, Google's default, or sooner if you reject or withdraw consent (section 8). The cookie lifetime is not the 14 months above. |
| Server logs | Kept for a short period by our hosting provider. |
8. Cookies and Browser Storage
We use a small number of cookies. None are for advertising. Google Analytics cookies and the nx_sid cookie are set only if you accept (section 3.13). Counts without consent use no cookie or identifier. With consent, our own counts use nx_sid, an anonymous session id that is not linked to your account. That cookie is set only after Accept. The events it tags are kept for 13 months (section 7). The cookie itself expires after 30 days. You can change that choice from Cookie settings in the footer. Strictly necessary cookies are set so the site can sign you in and remember the choice you already made.
The times in this list are how long the cookie stays in the browser. They are not how long the data is kept. Google keeps the analytics data for 14 months (Google signals are off). We keep our own counts in Supabase for 13 months. Both of those are in section 7. The _ga cookies expire after 2 years, which is Google's default. We do not set a different cookie lifetime.
- Cookie
- _ga
- What It Is For
- Google Analytics. Recognises this browser so page views can be counted. Set only after Accept. The cookie lasts 2 years. The data Google holds from it is kept for 14 months (section 7).
- How Long
- 2 years
- Party
- Cookie
- _ga_756R5GDWDJ
- What It Is For
- Google Analytics. Keeps one visit together for our measurement id. Set only after Accept. Same split as _ga: the cookie lasts 2 years, and the data is kept for 14 months (section 7).
- How Long
- 2 years
- Party
- Cookie
- nixers_consent
- What It Is For
- Stores Accept or Reject. Strictly necessary, so we remember the choice and do not ask on every page.
- How Long
- 12 months
- Party
- nixers (first party)
- Cookie
- nx_sid
- What It Is For
- Anonymous session id for our own counts (section 3.13). Set only after Accept. Not linked to your account. The events it tags are kept for 13 months (section 7).
- How Long
- 30 days
- Party
- nixers (first party)
- Cookie
- sb-<project>-auth-token
- What It Is For
- Keeps you signed in. The name starts with sb-, then the project id, then -auth-token. If the value is long it is split into sb-<project>-auth-token.0, .1 and so on. Strictly necessary.
- How Long
- Up to 400 days, renewed while you use the site. Removed when you sign out.
- Party
- nixers (first party)
- Cookie
- sb-<project>-auth-token-code-verifier
- What It Is For
- Completes sign-in from an email link. Strictly necessary.
- How Long
- Removed once sign-in completes
- Party
- nixers (first party)
- Cookie
- nx_email_change
- What It Is For
- Remembers that you asked to change your email address
- How Long
- 1 hour
- Party
- nixers (first party)
- Cookie
- nx_guest
- What It Is For
- Remembers you chose to browse without an account
- How Long
- 30 days
- Party
- nixers (first party)
- Cookie
- nx_subject
- What It Is For
- A random token, with no name attached. It links consent given while signed out to your browser, and limits how many applications and voice sessions one browser can start
- How Long
- 180 days
- Party
- nixers (first party)
- Cookie
- nx_preview
- What It Is For
- Lets staff see the site while it is behind the holding page. Only set while the holding page is on
- How Long
- 30 days
- Party
- nixers (first party)
- Cookie
- nx_agent_spend
- What It Is For
- Caps how much one chat can spend. Holds a session id and a spend figure, not your name
- How Long
- 12 hours
- Party
- nixers (first party)
- Cookie
- nx_goal_magic
- What It Is For
- Remembers that a job-alert sign-in link was just sent
- How Long
- 30 minutes
- Party
- nixers (first party)
| Cookie | What It Is For | How Long | Party |
|---|---|---|---|
| _ga | Google Analytics. Recognises this browser so page views can be counted. Set only after Accept. The cookie lasts 2 years. The data Google holds from it is kept for 14 months (section 7). | 2 years | |
| _ga_756R5GDWDJ | Google Analytics. Keeps one visit together for our measurement id. Set only after Accept. Same split as _ga: the cookie lasts 2 years, and the data is kept for 14 months (section 7). | 2 years | |
| nixers_consent | Stores Accept or Reject. Strictly necessary, so we remember the choice and do not ask on every page. | 12 months | nixers (first party) |
| nx_sid | Anonymous session id for our own counts (section 3.13). Set only after Accept. Not linked to your account. The events it tags are kept for 13 months (section 7). | 30 days | nixers (first party) |
| sb-<project>-auth-token | Keeps you signed in. The name starts with sb-, then the project id, then -auth-token. If the value is long it is split into sb-<project>-auth-token.0, .1 and so on. Strictly necessary. | Up to 400 days, renewed while you use the site. Removed when you sign out. | nixers (first party) |
| sb-<project>-auth-token-code-verifier | Completes sign-in from an email link. Strictly necessary. | Removed once sign-in completes | nixers (first party) |
| nx_email_change | Remembers that you asked to change your email address | 1 hour | nixers (first party) |
| nx_guest | Remembers you chose to browse without an account | 30 days | nixers (first party) |
| nx_subject | A random token, with no name attached. It links consent given while signed out to your browser, and limits how many applications and voice sessions one browser can start | 180 days | nixers (first party) |
| nx_preview | Lets staff see the site while it is behind the holding page. Only set while the holding page is on | 30 days | nixers (first party) |
| nx_agent_spend | Caps how much one chat can spend. Holds a session id and a spend figure, not your name | 12 hours | nixers (first party) |
| nx_goal_magic | Remembers that a job-alert sign-in link was just sent | 30 minutes | nixers (first party) |
We also keep a few things in your browser's own storage, not in cookies. These are your chat conversation, the jobs you saved, and which jobs and links you have already opened. The cookie choice itself is the nixers_consent cookie, not a separate saved flag. If you turn on phone alerts, your browser also keeps the push subscription until you turn them off or clear this site's data. They stay on your device until you clear them. We do not keep a copy of the chat, saved jobs or opened links. We do keep a copy of the phone alert address and keys, as section 3.12 describes. While the assistant is replying, the chat you send is processed as described in section 3.2.
9. Your Rights
You can ask us to show you what we hold about you, correct it, delete it, limit how we use it, or give you a copy to take elsewhere. You can object to anything we do based on legitimate interests (section 3.11). Where we rely on your consent, you can withdraw it at any time. Withdrawing does not undo what we did before. You can turn Apply for me off at any time in Settings. That stops anything not yet sent. We cannot recall an application already sent. For that, contact the employer, who holds it under their own notice and must answer your rights requests about it.
To make a request, email hi@nixers.com. We reply within one month. If a request is complex, we may need up to two more months, and we will tell you if so.
10. Children
nixers is for people aged 16 and over. If we learn that someone under 16 has an account, we will close it.
11. Complaints
If you are unhappy with how we handled your information, tell us first at hi@nixers.com. You can also complain to the Data Protection Commission, Ireland's regulator:
Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
Website: dataprotection.ie
12. Changes
We may update this notice. If a change is material, signed-in users will be asked to review and accept the updated version the next time they log in, before continuing. The Last updated date shows the current version.
Last updated: 4 October 2026