Privacy Policy: Ask Digby

Last updated: 21 July 2026

Ask Digby is operated by Nadine Friday, trading as Ask Digby ("we", "Digby"). Contact: hello@askdigby.io. We are registered with the UK Information Commissioner's Office, registration number ZC196498.

We built Ask Digby for people who are tired of job boards wasting their time, so this policy is written to be read, not skimmed past. It says what we hold, why, and how to make us delete it.

What we collect, and why

Your CV and your answers. When you paste or upload your CV and answer the intake questions (your direction, what you're reaching for, what you're moving away from, your location, your salary floor, your working constraints), we store them. This is the entire basis of the product. Digby cannot match you to roles without knowing you. Legal basis: performing our contract with you.

Your matches and activity. The roles Digby brings you, his written reasons, which roles you save, apply to, and win, including a salary figure if you choose to share one when you win. This powers your watched list, your application packs, and honest improvement of the matching. Legal basis: performing our contract with you.

Your application packs. When you ask Digby to prepare a pack, we store the tailored CV, cover letter, and prepared answers so you can come back to them. They contain your CV's content by design. Legal basis: performing our contract with you.

Your email address and login. Used to sign you in (via a one-time code) and to send you your daily dig email. Every email carries an unsubscribe link, and we honour it. Legal basis: performing our contract with you; product emails are sent under the UK's rules for existing customers, with opt-out always available.

Payment details. Payments are handled by Stripe. We never see or store your card number. We hold only Stripe's reference identifiers and a record of what was charged. Legal basis: performing our contract with you, and legal obligations (tax and accounting records).

The free listing checker. If you use the free real-check without an account, we store the listing URL you pasted, the verdict, and a scrambled (hashed) form of your IP address used only to prevent abuse. We cannot readily identify you from this. Legal basis: our legitimate interest in running an abuse-resistant free service.

Checking a listing while signed in. The hub has the same listing checker. When you use it while signed into your account, the link you paste and the verdict are linked to your account, so we can keep the checker working fairly and show you what we found. If you delete your account, that link is removed and only the anonymised record described below remains. Legal basis: our legitimate interest in running the service you asked for and keeping it abuse-resistant.

Waitlist interest. If you ask us to tell you when a feature (like Pro) opens, we store the email address you give us for that one purpose, and nothing else. We do not use it for anything you did not ask for, and you can ask us to remove it at any time.

What we deliberately do not collect: no advertising trackers, no analytics profiles sold to anyone, no special-category data (we never ask about health, ethnicity, religion, or similar), and we do not sell or rent personal data to anyone, full stop.

Where your data is processed

To do its work, Ask Digby uses a small number of service providers ("processors") who handle data on our instructions:

• Supabase: our database, where your profile and matches live.
• Google Cloud (Vertex AI / Gemini): the AI that reads your CV and writes Digby's reasoning. Your CV text and the direction you give Digby at intake are sent to Google's Gemini model to produce your reflection, your matches, and your packs. Google processes it to provide the service to us; it is not used to train Google's models under the terms we use.
• Stripe: payments.
• Resend: sending our emails.
• Vercel: hosting the website.

Some of these providers process data in the United States. Where they do, the transfer is protected by recognised UK safeguards (the UK-US Data Bridge and/or standard contractual clauses in each provider's terms).

We never send your personal data to job boards, employers, or data brokers. Job listings flow into Ask Digby; nothing about you flows out.

Automated decision-making

Digby's matching and pack-writing are automated, but no decision with legal or similarly significant effects is made about you by a machine alone. Digby recommends roles and drafts documents. You decide where to apply, and every application is reviewed and sent by you. If you have a question about how a match or a pack was produced, email hello@askdigby.io.

How long we keep it

• Your profile, CV, matches, and packs: for as long as you have an account.
• Payment records: kept after account deletion, as UK tax law requires (typically 6 years), de-linked from your profile.
• Our system's operational log (which records what the AI did, not who you are): kept indefinitely as an anonymised record. Your identity is removed from it on deletion.
• Free checker records (used without an account): the URL, verdict, and hashed IP, kept for abuse prevention and service improvement.
• Checks you run while signed in: linked to your account while it exists; on deletion the link is removed, leaving only the anonymised record above.

Deleting your data

Email hello@askdigby.io from your account's email address and ask to be deleted. We will delete your account within one month (in practice, within days): your CV, profile, matches, saved roles, application packs, and login identity are erased, and your access ends with the account. What remains is described above: payment records the law requires us to keep, and anonymised operational logs that no longer identify you.

One honest side-effect is that deletion also erases your email-suppression record. If you only want to stop receiving emails (rather than delete everything), use the unsubscribe link instead. That preference is kept.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct it, delete it, restrict or object to its use, or to receive it in a portable form. Email hello@askdigby.io for any of these. If you're unhappy with how we've handled your data, you can complain to the ICO (ico.org.uk), though we'd appreciate the chance to fix it first.

Cookies

We use only the cookies needed to keep you signed in. No advertising cookies, no third-party trackers.

Changes

If this policy changes in a way that matters, we'll tell you by email before it takes effect.