Your data, and what we do with it.

Who we are

Offa is operated by Bobi.car Limited, registered in England and Wales, company number 15966931, registered office 124-128 City Road, London, England EC1V 2NX. We are the data controller for the personal data described on this page, and we are registered with the Information Commissioner’s Office under ZB828752.

What we collect

Your account. Your name, the email address you sign in with, and the @offa.meaddress you choose. If you subscribe, we hold a Stripe customer reference — we never see or store your card details.

Your professional history. Any CV, cover letter or LinkedIn export you upload, and the employment history, education, skills and locations we extract from them. Documents you upload are kept so you can reuse them.

What you tell us you want.Your brief — roles, salary, distance, the employers you are interested in — and your answers to the career questionnaire, including the personality and interest scores it produces.

Your Offa mailbox. Mail sent from and received at your @offa.me address, including replies from employers.

Special category data. We do not ask for information about your health, disability, ethnicity, religion or sexuality. A CV occasionally contains some anyway. If it does, we process it only as part of the document you gave us, on the basis of your explicit consent in providing it, and you can delete the document at any time.

Usage. Which pages you visit, how long you spend on them, which buttons and links you press, how far down a page you scroll, and any errors the site shows you. We neverrecord what you type — not your CV, not your messages to Offa, not anything you enter in a form. Where a page shows your own documents or a named contact, we record which control you used and not what it said. For the questionnaire you can take without an account, we store a hashed version of your IP address to enforce daily limits. We cannot recover your IP address from it, and we never store your IP address anywhere else.

Before you have an account

You can take the career questionnaire and upload a CV without signing up. A file you upload is held for one hour, along with the text read out of it, and then deleted automatically if you have not created an account. We hold it for that hour for one reason: if you do create an account, we can build your profile and CV from the real document rather than from a summary of it. Create an account and the file moves to your account, where you can read or delete it at any time.

The results of the questionnaire exist only in your browser until you choose to create an account, at which point they are saved to it. If you never sign up, we keep the email address you asked us to send results to, and nothing else about you.

We do record the pagesan anonymous visit passed through, and the buttons it pressed, so we can see where people give up on the questionnaire and fix it. That record is not linked to a name, an email address or a device — we cannot tell that two visits came from the same person, and we do not try to.

Why we are allowed to

• To perform our contract with you— running your account, finding and scoring roles, drafting documents, sending what you approve, and taking payment.
• Our legitimate interests— keeping the service secure, preventing abuse, and understanding how the product is used so we can improve it. We have weighed these against your interests and use the least data that works.
• Your consent— for anything in a document you upload that goes beyond ordinary professional history. You can withdraw it by deleting the document.
• Legal obligation— tax and accounting records where we are required to keep them.

What we send to employers

Nothing goes to an employer without you seeing it first.Applications and speculative approaches are drafted for you, shown to you, and sent only when you approve them. They are sent under your own name and your own Offa address — we do not introduce you to employers on our own account, and we take no fee from any employer.

Who else processes it

We use these providers to run the service. They act on our instructions and may not use your data for their own purposes.

• Supabase — database and sign-in. Hosted in the EU (London).
• Vercel — hosting the website itself.
• Resend — sending and receiving email, including your @offa.me mailbox.
• Anthropic — the AI that reads your CV, scores roles and drafts documents. Your data is not used to train their models.
• Stripe — payments. Stripe is the controller of your card data, not us.
• Apollo — business contact details for people at employers you are approaching. This is data about those people, not about you.
• Reed, Adzuna and JSearch — job advert sources. We read adverts from them; we do not send them anything about you.

We do not sell your data, and we do not share it with advertisers or with recruiters who have not been approached by you.

Where it goes

Your account data is held in the UK and EU. Some providers above process data in the United States; where they do, transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

How long we keep it

For as long as you have an account, and for twelve months after you close it, so you can change your mind. Delete your account and we delete your documents, profile, brief and mailbox contents. Records we are legally required to keep — invoices, principally — are kept for six years. Waitlist entries are deleted once the waitlist closes or on request, whichever is sooner.

What you can ask us to do

Under UK GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it to another provider, or object to processing based on our legitimate interests. Ask at privacy@offa.me and we will answer within one month.

If we get it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, but it is your right either way.

Cookies

We set the cookies needed to keep you signed in and, for a short window, to remember an anonymous questionnaire so it can be attached to your account. There is no advertising or third-party tracking on this site, which is why you have not been asked to accept anything.

How we measure the product. We keep the usage record described above so we can see where Offa is confusing or broken and fix it. It is our own record on our own servers: nothing is sent to an analytics company, and we store nothing on your device to do it— no analytics cookie, no browser storage. We keep the detailed record for 90 days and a summary of it after that. We do this on our legitimate interests, and you can tell us to stop at privacy@offa.me. It will not affect your account.