Legal

Privacy notice

Last updated 31 October 2026

This privacy notice tells you what to expect us to do with your personal information.

1. Contact details

poby is operated by Creator Camp Ltd, a company registered in England and Wales (company number 17108492), whose registered office is at Suite Ra01, 195-197 Wood Street, London, E17 3NU, United Kingdom.

Email: contact@creatorcamp.ai

2. What information we collect, use, and why

We collect or use the following information to provide our service, including access to job listings:

Names and contact details
Account information, including saved searches
Website usage information, such as pages visited (counted without cookies)

We collect or use the following information for the operation of user accounts:

Names and contact details
Account information, including registration details
Marketing preferences

We collect or use the following information for service updates or marketing purposes:

Names and contact details
IP addresses
Website and app user journey information
Records of consent, where appropriate

We collect or use the following information to keep the service secure and stop automated scraping:

How many job pages and apply links each account opens, counted per minute
Records of any temporary limits placed on an account

We collect or use the following information to comply with legal requirements:

Name
Contact information

We collect or use the following information for dealing with queries, complaints or claims:

Names and contact details
Account information
User account records
Correspondence

We do not collect or use any special category data (such as health, racial or ethnic origin, or religious belief information).

3. Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. Which lawful basis we rely on may affect your data protection rights, which are:

Right of access — you can ask us for copies of your personal information.
Right to rectification — you can ask us to correct or delete information you think is inaccurate or incomplete.
Right to erasure — you can ask us to delete your personal information.
Right to restriction of processing — you can ask us to limit how we use your personal information.
Right to object to processing — you can object to us using your personal information.
Right to data portability — you can ask us to transfer the information you gave us to another organisation, or to you.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

If you make a request, we'll respond without undue delay and within one month. To make a data protection rights request, contact us using the details above.

Our lawful bases

To provide our service: Contract — we need this information to enter into and carry out our contract with you.
For the operation of user accounts: Contract — we need this information to enter into and carry out our contract with you.
For service updates or marketing purposes: Consent for marketing emails, which you can withdraw at any time in your account settings; and Legitimate interests for essential service communications. Our legitimate interest is: we use users' name and email address to send essential service communications, such as changes to the service or these terms, and other updates relevant to their account. This is necessary to keep people who have signed up for our job-listing service properly informed about the service they are using. We only use contact details users have already provided when creating an account, the processing is limited to what is needed for this purpose, and it does not include promotional marketing content, which we only send separately with consent. People using our service would reasonably expect to receive this kind of communication, the volume and content is proportionate and low-risk, and users can close their account at any time, which stops these communications. We have concluded that this limited, expected use does not unfairly impact users' privacy and is outweighed by the benefit of keeping them informed about the service they use.
For website analytics: Legitimate interests. Our legitimate interest is: understanding which pages are useful so we can improve the website. We use Vercel Web Analytics, which counts page visits without cookies and without identifying you.
To keep the service secure and stop automated scraping: Legitimate interests. Our legitimate interest is: protecting the service and the job listings from automated tools that copy them in bulk. We only count how many pages each account opens over short periods, keep those counts for two days, and only limit an account's access temporarily if it goes well beyond normal use. People using a job site would reasonably expect it to guard against abuse, and the data is minimal and short-lived.
To comply with legal requirements: Legal obligation — we need this information to comply with the law.
For dealing with queries, complaints or claims: Legitimate interests. Our legitimate interest is: we use users' name, contact details and account information to respond to queries, complaints or claims about our service. This is necessary so that we can investigate and resolve issues raised by users and provide support. We only use information that is relevant to the query or complaint raised, and only for as long as needed to resolve it and keep a reasonable record afterwards. People who contact us with a query or complaint would reasonably expect us to use their information to respond to them. This benefits both the person, who gets their issue resolved, and us, in maintaining accurate records and improving our service, without causing any undue risk or harm to the individual involved.

For more information on our use of legitimate interests as a lawful basis, contact us using the details above.

4. Where we get personal information from

Directly from you
From Google, if you choose to sign in with Google (your name, email address and profile picture)

5. How long we keep information

We keep personal information for as long as your account is active. If you delete your account, we delete your personal data promptly, except where we're required to keep certain records for longer. Records of your marketing consent choices are kept for as long as necessary to demonstrate compliance with data protection law, even after you opt out or delete your account. Where we no longer need personal information for these purposes, we securely delete or anonymise it.

Saved searches are kept until you remove them or delete your account.
Page-view counts used to stop scraping are deleted automatically after two days.

7. Sharing information outside the UK

Where necessary, we transfer personal information outside of the UK. When we do, we make sure appropriate safeguards are in place.

Vercel Inc., our data processor (cloud application hosting and web analytics) — country: United States. Safeguard: the International Data Transfer Agreement (IDTA).

8. Cookies and analytics

Cookies are small files stored on your device. We only use cookies that are strictly necessary for poby to work, so we don't need to ask for your consent and there's no cookie banner.

Sign-in cookies (set by Supabase) keep you signed in to your account. They last until you sign out or your session expires.

To count page visits we use Vercel Web Analytics and Vercel Speed Insights. They don't use cookies, don't store anything on your device and don't identify you.

9. How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us: Email contact@creatorcamp.ai.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk/make-a-complaint

← Back to poby