How to delete your JOBO account and data, what gets erased, what we keep and why.

You have the right to have your personal data erased whenever you want (the right to erasure, Article 17 of the General Data Protection Regulation). Here we explain how to exercise it, exactly what happens when you do, and the little we are legally required to keep afterwards.

Exercising this right is free of charge.

1. The fastest way: delete it yourself in the app

If you can log in to your account, you do not need to ask us or wait:

We will ask you to type a confirmation word and the deletion runs there and then. There is no queue, no waiting period and no approval from us.

2. If you cannot log in: write to us

If you have lost access, or you only want part of your data erased, write to:

• Write from the email address of your account. That is how we check it is you. Deletion cannot be undone, so we cannot accept a request we are unable to verify.
• If you no longer have access to that address, tell us and we will ask for an identity document. We use it only to verify your identity and destroy it as soon as we have.
• We reply within one month. If the request is particularly complex, the law allows us to extend that period by up to two further months; in that case we would tell you within the first month and explain why.

3. Before you delete, bear this in mind

Deletion is irreversible. There is no recycle bin and no cooling-off period: once it runs, we cannot restore your account or rebuild your data.

• Your open applications are withdrawn. The companies running those processes lose access to your file in JOBO.
• You lose your test results. If you come back to JOBO later, you will have to take them again.
• You stop appearing on the platform immediately.
• You will not be able to apply again to the processes you already took part in. We keep a record that your identity document was submitted to that process, and that record is not deleted with your account. It is what stops closing your account from being a way to retake a test with a fresh result. You can apply to any other process as normal.

If you want a copy of your data, ask us for it before deleting. We prepare it by hand and send it to you. Once the account is deleted there is nothing left to copy.

4. Exactly what happens when you delete your account

Not everything meets the same fate, and we would rather say so plainly. Three different things happen:

• It is erased. Your profile, your CV, any documents you uploaded, your applications, your interview videos, your messages and your login account. They disappear from our systems immediately. We also remove you from the tools we use to send email, so you stop hearing from us.
• It is anonymised. Your assessment results are first turned into aggregate statistics: they are added to everyone else's and stop being linked to you. From then on they are no longer your data — nobody can tell they were yours, not even us — and we keep them to measure and improve how the system evaluates.
• A trace remains without your name. A few internal records keep the row but erase who you were: the technical log of AI evaluations, the record of declared hires, the evaluation-review record, the re-evaluation record and the record of who was authorised over each process. They exist so we can show the system worked as it should, and they are empty of identity.
• Backups. We keep daily backups with a 7-day recovery point. Some trace of you may remain in them during those 7 days; after that it is gone from there too. Those copies are used for nothing other than restoring the service if it goes down.

5. What we keep afterwards, for how long and why

This is the only thing that survives your deletion, with its period and its reason:

• Security and compliance records (that an account existed, that it was deleted, when): 5 years, so we can defend ourselves if someone brings a claim. The period is that of the compensation claim the data subject themselves may bring (Art. 82 GDPR), which follows the 5-year civil limitation period of Art. 1964.2 of the Spanish Civil Code; the GDPR allows the retention under Art. 17.3(e).
• Billing data, if you have been a paying customer: 6 years from the close of the financial year, under accounting and commercial law (Art. 30 of the Spanish Commercial Code). The tax obligation is 4 years (Arts. 66 and 70 of the Spanish General Tax Act) and some capital-goods invoices may require up to 10 years for VAT purposes.
• Technical log of AI evaluations (encrypted fingerprints of what went in and out, with no personal data in the clear): 4 years, and without your name from the moment of deletion. Required by the European AI Regulation for high-risk systems (Art. 12).
• Messages with the company, its team's internal notes on your application and the record of their management actions: up to 2 years from the closing of the process, so the company can justify its selection decision. They are deleted sooner if you exercise your right to erasure.
• Interview video: 7 days from the closing of the process — and sooner, immediately, if you delete your account. After that period the company can no longer play it. The transcript and the evaluation follow the life cycle of the rest of your assessment.
• Results of the reusable tests (cognitive, TRCE, City Survival and English level): 90 days from when you take them, so you do not have to repeat them for every process you apply to. When the period expires they are deleted.
• Record of your cookie choice (without your name: it is unlinked from your account when you delete it): 24 months, so we can prove what you chose and when, as cookie rules require.
• Record of your participation in a process (that your identity document was submitted to that job posting, and when — without your name, your profile or any assessment): for as long as that process exists, so that closing your account is not a way to apply again to the same job with a fresh result. It is the integrity of the selection: the company has to be able to trust that each person took their test once (legitimate interest, Art. 6.1(f) GDPR).
• Blocked data: if any data is subject to a legal retention obligation or is needed to defend against a claim, it is blocked — stored, not used for anything, and erased as soon as that obligation ends.

6. What the company keeps on its own

This matters, and almost nobody explains it.

When you apply to a selection process, the company is the controller of its own process. It may have downloaded your CV, recorded its assessment in its own systems or exported a report. Deleting your JOBO account does not delete what that company holds on its own, and we cannot delete it for them.

What we do do: as soon as you delete your account, the company loses access to your file in JOBO.

If you want the company to delete its copy too, you have to ask them directly. If you do not know how to reach them or they do not reply, write to us and we will give you their contact details as controller.

7. If you are a client company

The rules for your company account are different and are set out in the Data Processing Agreement (DPA), clause 7:

• When the service ends, you have 30 days to download an exportable copy of your data.
• After that period, we erase your data from production systems and operational backups within a maximum of 30 further days, unless a legal retention obligation applies (in which case it is blocked).
• You can delete the account even if active applications remain, and those applications are deleted with it. We keep a record of how many were destroyed, but those people are not notified: if they were waiting for an answer, it is better to resolve open processes first.
• As regards your candidates' data, you are the controller and JOBO acts on your behalf. If a candidate asks you to erase their data, the decision and its execution in your own systems are yours.

8. If you do not want to delete everything

You do not have to close your account to exercise other rights:

• Withdraw your application from a specific process, leaving your account as it is: ask us, naming the process. The company loses access to your file. Bear in mind that, just as when you delete your account, you will not be able to apply again to that same process afterwards.
• Delete only your interview video, leaving the rest untouched: ask us, naming the process. We handle it within one month. The video is deleted; the transcript and the evaluation follow their own life cycle.
• Contest an automated evaluation you consider inaccurate or unfair — ask for human review, give your point of view or ask for its erasure: dedicated channel revision@joboapp.es.
• Restrict processing (Art. 18 GDPR): we keep your data but stop using it.
• Access, rectify, object or request portability of your data: all of them are explained in the Privacy Policy.

9. If you do not use your account, we delete it

If 24 months go by without you logging in, we consider the account inactive and close it, erasing your data. We warn you by email 30 days beforehand, and simply logging in once keeps everything as it is.

10. If you are not satisfied

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es). Before that, if you wish, write to us: we would rather sort it out with you.