JobScamScore is owned and operated by Niche Outcomes Limited ("we," "our," or "us"), a company incorporated in Samoa. JobScamScore is a trading name of Niche Outcomes Limited. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job scam detection service (the "Service").
Our role. When you use JobScamScore directly through this website, Niche Outcomes Limited is the data controller. Where the Service is instead made available to you inside another company's product, under a partnership or bundled offering, that company is the controller and we act as a processor on its documented instructions under a separate written agreement. This policy describes the first case.
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
What we strip, and what we do not. Before your text is sent anywhere or stored, we automatically remove payment card numbers, bank account and IBAN numbers, sort codes, and national identifiers such as social security or National Insurance numbers. These are replaced with a placeholder, so the analysis can still tell that such details were requested without us holding the values.
We do not remove names, email addresses, phone numbers or company details, because those are exactly what the scam check examines. Whether a recruiter's address matches the company's real domain is one of the strongest fraud signals we have, and stripping it would stop the Service working rather than make it safer. This means anything else in the text you paste, including your own contact details and any private correspondence, is sent to the AI provider named in Section 4 and stored with your scan. Please remove anything you would rather we did not process before you submit it.
We use the collected information for the following purposes:
Marketing email. When you create an account we enrol you by default into a short sequence of onboarding and product emails. You can opt out at any time using the unsubscribe link in any of those messages, or by contacting us. We do not sell your address or pass it to third-party advertisers.
The following is our complete list of subprocessors: third parties that receive personal data as part of operating the Service. We keep this list current. If you spot something we use that is not named here, please tell us.
To verify that a job really exists we may query the public job-board endpoints of Greenhouse, Lever and Workable. Only a company identifier travels in those requests. No personal data of yours is sent, so we do not treat them as subprocessors.
We do not sell your personal information. We may share your information only in the following circumstances:
We implement appropriate technical and organizational measures to protect your personal information, including:
What we do not have. We are a small independent product. We do not hold SOC 2, ISO 27001 or any equivalent third-party attestation, and we have not commissioned an external penetration test. Our security review to date has been internal. We would rather tell you that than imply a level of assurance we cannot evidence.
We use Sentry to detect and diagnose faults. You should know what this captures, because it is more than a plain error log:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
Depending on your location, you may have the following rights regarding your personal information:
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of the sale of personal information (we do not sell personal information).
Rights that exist only on paper are not rights, so here are the working routes:
One honest limitation. Scans run without signing in are stored with no link to any person, so we cannot locate them in order to export or erase them. If that matters to you, sign in before scanning.
We retain your personal information for as long as necessary to:
Retention Periods:
You may delete your account at any time, which deletes your account record and your scan history, subject to legal retention requirements. See Section 7 for how.
One limitation you should know about. Scans run without signing in are stored with no link to any person. Because there is nothing connecting such a record to you, we cannot find it in order to delete it on request. If you want a scan to be deletable, run it while signed in.
This section is for recruiters, hiring managers and company representatives whose details appear in job postings that other people submit to us. You will not have given us this information yourself, and you may never have heard of us. Data protection law requires us to explain what we do, so here it is plainly.
When a user submits a job posting, it often contains a contact name, email address or phone number. To detect scam networks, which typically reuse the same contact details across many fake postings, we keep a record of those details along with the companies they have appeared alongside, when we first and last saw them, and a reputation score derived from the postings they appear in. Our lawful basis is legitimate interests: specifically, protecting job seekers from recruitment fraud, which is a serious and widespread harm. We have weighed that against the privacy interests of the people recorded.
A record in this database can influence how future postings associated with the same contact details are scored, and can contribute to a posting being assessed as higher risk. No decision with legal or similarly significant effect is made automatically about you. Our published pages are reviewed by a person before anything appears publicly, and we do not publish a directory of scored individuals.
You have the right to ask what we hold about you, to have inaccurate information corrected, to object to this processing, and in certain circumstances to have your information erased. Because we hold contact details rather than accounts, the quickest route is to email us from the address in question, or to tell us the name, email address or phone number you are asking about.
Contact privacy@jobscamscore.com. We aim to respond within 30 days. If you believe a posting has been wrongly associated with you, tell us and we will review it: we would rather correct a record than defend one.
Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.
Niche Outcomes Limited is incorporated in Samoa. Several of the subprocessors listed in Section 4 are established in the United States, and others in the United Kingdom and Europe. Your information is therefore transferred outside the United Kingdom and the European Economic Area whenever you use the Service, and it is processed by companies in more than one country.
We are being specific here because the position matters. We rely on each vendor's own published data processing terms, which in several cases incorporate Standard Contractual Clauses. We have not yet executed our own separate transfer agreements, such as an International Data Transfer Agreement or a UK Addendum, with each vendor, and we have not completed a formal transfer risk assessment. That work is in progress. We would rather describe our actual position than assert safeguards we cannot produce on request.
If this matters to your decision to use the Service, please contact us before submitting anything, and please do not submit content you would not want processed in the United States.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: