Privacy Policy
Last updated: April 2026
This privacy policy explains how DSC Ltd, trading as The Pure Signal (“we”, “us”, “our”), collects, uses, stores, and shares your personal data when you use the Pure Signal platform (“the Service”) at app.thepuresignal.com.
We are the data controller for the purposes of UK data protection law. If you have questions about this policy, contact us at [email protected].
1. What data we collect
Account information: Your name, email address, and country when you create an account.
Profile and CV data: Information you upload or enter, including CVs, career history, job preferences, requirements, skills, and other professional information.
Job and recruitment data: Job descriptions, candidate assessments, hiring preferences, and feedback you submit through the Service.
Usage data: How you interact with the Service, including pages visited, features used, session duration, device type, browser type, and IP address.
Communications: Any messages you send to us via email or through the Service.
Payment data: If you make a payment, your billing details are processed by Stripe. We do not store your full card details.
2. How we use your data
We use your data to:
- Provide and operate the Service, including CV analysis, job matching, integrity profiling, and job description tooling.
- Generate AI-powered analysis, scores, and recommendations.
- Match candidates with relevant roles and provide recruiters with candidate assessments.
- Send you transactional emails (account confirmation, notifications, alerts, onboarding information).
- Understand how the Service is used so we can improve it.
- Collect product feedback.
- Process payments.
- Comply with legal obligations.
We will never sell your personal data to third parties.
3. Legal basis for processing
We process your data under the following legal bases:
- Contract performance: Processing necessary to provide the Service you have signed up for, including account management, CV analysis, job matching, and communications.
- Legitimate interest: Usage analytics and product improvement, where our interest in improving the Service does not override your rights.
- Consent: Where you choose to share your profile with recruiters by applying for a role, or where you opt in to non-essential cookies.
- Legal obligation: Where we are required to retain or disclose data by law.
4. Sharing your data with other users
We will never share your information with other users of the Service without your express permission.
If you are a candidate and you choose to apply for a role, relevant profile information will be shared with the recruiter for that role. You will always be informed of what is being shared before it happens, and you must actively consent.
Recruiters’ job descriptions and company information may be visible to candidates browsing or matched with those roles.
5. Third-party processors
We use the following third-party services to operate the Service. These processors handle your data on our behalf and under our instructions:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| OpenRouter | AI model routing | CV content, job descriptions, profile data (for analysis) | US / EU |
| Google Gemini (via OpenRouter) | AI analysis | As above | US / EU |
| OpenAI (via OpenRouter) | AI analysis | As above | US / EU |
| Anthropic (via OpenRouter) | AI analysis | As above | US / EU |
| Google Workspace | Internal email and administration | Email address, name (when you contact us) | EU / US |
| PostHog | Usage analytics, product feedback | Usage data, device info, IP address | EU |
| Postmark | Transactional email delivery | Email address, name | US |
| Stripe | Payment processing | Billing details, email address | US |
We only share the minimum data necessary for each processor to perform its function.
6. International transfers
Some of our processors are based in or transfer data to the United States. Where data is transferred outside the UK, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) and the processor’s compliance with applicable data protection frameworks.
7. Data retention
We retain your personal data for as long as your account is active.
If you delete your account or request deletion, we will delete your personal data immediately. This includes your profile, CV data, assessment results, and any other content you have provided.
Anonymised usage data that cannot be linked back to you may be retained for analytical purposes.
We may retain limited data where required by law (for example, financial transaction records for tax purposes).
8. Cookies
We use the following types of cookies:
- Essential cookies: Required for the Service to function, including session management and authentication. These cannot be disabled.
- Preference cookies: Store your settings and preferences (such as audience selection and display options).
- Analytics cookies: Used by PostHog to understand how the Service is used. These help us improve the product.
You can manage your cookie preferences through the Service. Essential cookies are always active. Analytics cookies can be declined.
9. Your rights
Under UK data protection law, you have the right to:
- Access your personal data and receive a copy of it.
- Rectify inaccurate or incomplete data.
- Erase your data (right to be forgotten). We will action this immediately.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interest.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Security
We take reasonable technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and secure hosting within the EU.
No system is completely secure. If we become aware of a data breach that affects your rights, we will notify you and the Information Commissioner’s Office (ICO) in accordance with our legal obligations.
11. Children
The Service is not intended for anyone under the age of 18. We do not knowingly collect data from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it immediately.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you via the email address associated with your account. Your continued use of the Service after notification constitutes acceptance of the updated policy.
13. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
We would appreciate the opportunity to address your concern directly first. Please contact us at [email protected].
14. Contact
DSC Ltd, trading as The Pure Signal. Email: [email protected]
DSC Ltd, trading as The Pure Signal.