Privacy
What Covers collects, who can see it, how long we keep it, and how to take it back. Written to be read, not to be survived.
Last updated 13 September 2026. Privacy · Terms
The short version
You are hidden from employers until you say otherwise. Applying for a job never changes that. Your phone number and email are never in a search listing, and every single time a venue is shown them we write down who, when and on what basis.
You can download everything we hold about you, and delete your account, from your profile. Both take one click and neither goes through us.
What we collect
To sign you in: your email address. There is no password — we send a link.
If you build a profile: your name, phone number, the role you do, years in the trade, the area you are in, the zones you would travel to, the kitchens you know, the least you would move for, when you are available, and your self-declared right to work in the UK. A CV, if you upload one.
When you apply: which job, anything you wrote in the message box, and the CV you attached. Afterwards, each change the venue makes to your application, so you can see it and so we can measure whether they replied at all.
If you are hiring: your company’s Companies House record, the details you give us about your venues, and what you post.
Your right-to-work answer is for matching only. Covers does not perform the employer’s statutory right-to-work check and nothing here should be read as doing so.
Who can see it, and when
Hidden is the default. If you have never chosen a visibility setting you are not in employer searches at all — not “not decided yet, so show them”. The absence of a choice is read as no.
Anonymous puts your role, experience, areas, availability and what you are looking for in front of venues. Your name, your current employer and your town are not in that listing and cannot be bought — they are not in the record a venue reads, rather than being hidden by a setting.
Full adds your name and where you work now, and lets a verified venue spend one of its credits to be shown your email and phone. Step back from full and every venue holding that access loses it immediately.
Applying is separate. A venue you apply to can see your application, your CV and your contact details, because you sent it to them. That does not expire when you change your visibility: an employer cannot un-read an application, and we are not going to pretend otherwise. Withdrawing ends the process, not the memory.
Every release of a contact detail writes an audit record. You can see which venues hold access to yours on your profile page.
Your CV
CV files are held in private storage. They are not on a public address, they cannot be reached by guessing a URL, and no employer can list them. When a venue you applied to opens yours, the server checks their entitlement, records the access, and issues a link that stops working after sixty seconds.
How long we keep it
Applications anonymise after 24 months. The application itself stays — the venue’s record of who they hired, and the evidence behind the response rate we publish about them — but the link to you, your message and the attached CV are removed from it. After that it is no longer about an identifiable person.
Your account lasts until you delete it. Deleting it removes your profile, your CV files, your saved jobs and your sign-in, and anonymises your applications by the same rule as above. It is immediate and it cannot be undone.
We keep audit records of significant actions — a contact detail being released, a company being verified — with the person’s identifier removed once they have gone. The record of what happened survives; the record of who it was about does not.
Cookies
Covers sets cookies for one purpose: keeping you signed in. There is no analytics cookie, no advertising pixel and no third-party tracker on this site, which is why you have not been asked to accept anything. We count things like “a job was viewed” on our own servers, without identifying the browser that did it.
Who else is involved
Your data is stored with Supabase in the UK/EU (London region) and served through Vercel. Email is sent through Resend. Company checks use the free Companies House public data API. We do not sell data, we do not share it with advertisers, and we do not pass candidate details to recruitment agencies — agencies are not allowed on Covers at all.
Your rights
You can get a copy of everything we hold, correct it, delete it, or object to how we use it. The first two and the third are buttons on your profile rather than a request form. If you want to complain about how we have handled your data you can do that to us, and you can also complain to the Information Commissioner’s Office at ico.org.uk.
We process your data to provide the service you asked for, and — for the response rates we publish about venues — because a hiring market where people are ignored without consequence is the problem this product exists to fix.
Being charged
Never, for anything to do with finding work. Not for an account, a profile, a CV, a search, an application, being findable, or a message. Charging a work-seeker for work-finding services is unlawful under the Employment Agencies Act 1973, and on Covers it is also impossible: there is no payment or quota column on any table that touches those features, and there is a test that fails the build if one is ever added.
Getting in touch
Email hello@byter.com. If you are asking us to delete something, tell us the email address you signed up with.