Last updated: 11 July 2026
My Job Goblin is operated by Charlie Fay, trading as My Job Goblin, based in Barcelona, Spain. We are the data controller for information you provide when using My Job Goblin. Contact: hello@myjobgoblin.com
Our lawful basis for processing your personal data is Contract (Article 6(1)(b) UK GDPR) - processing is necessary to provide the service you signed up for. Where we have a legal obligation (e.g. tax record-keeping), we rely on Legal Obligation (Article 6(1)(c)).
When you add customers and send quotes or invoices through Job Goblin, you are acting as the data controller for your customers' personal data (names, addresses, emails). You are responsible for having a lawful basis to process that data and for complying with UK GDPR in your customer relationships.
If you choose to connect your Google account, My Job Goblin requests access to your Google Calendar and your email address. We use this access solely to: create, update, and delete calendar events for the jobs and site visits you schedule in the app; read attendee responses to those invitations; check your calendars' free/busy availability (busy time periods only, not the details of individual events) so we can avoid scheduling a job when you are already booked; and list the calendars in your account so you can choose which one to sync in Settings. We store only the OAuth refresh token needed to maintain the connection and your Google account email address; beyond the features described above we do not read or store the contents of your calendar events, and we never use Google user data for advertising or AI model training. You can disconnect at any time from Settings, or revoke access at myaccount.google.com/permissions, which immediately ends our access. My Job Goblin's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Microsoft (Outlook) and Apple (iCloud) calendar connections are handled the same way: event write access only, tokens stored server-side, disconnect at any time from Settings.
All data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting provider. Access is restricted by row-level security so each account can only reach its own data, and two-factor authentication is available. Sensitive credentials - including Google, Microsoft and Apple calendar OAuth tokens and HMRC tokens - are held server-side in an encrypted secrets vault and are never exposed to your browser or shared with third parties. Google user data specifically is accessed only by our server to manage your calendar events, check availability, and list your calendars as described above; it is never stored beyond the connection token and your account email, never sold or transferred, and never used for advertising or AI model training.
We retain your data for as long as your account is active. If you delete your account, your data is deleted within 30 days, except where we are required by law to retain it (e.g. financial records for 6 years under UK tax law).
To exercise any of these rights, email hello@myjobgoblin.com. We will respond within 30 days.
My Job Goblin uses essential cookies for authentication and session management, and first-party product-analytics cookies (PostHog) to understand app usage. We do not use advertising cookies, cross-site tracking, or session recordings. You can opt out of product analytics at any time in Settings.
We will notify you by email of any material changes to this policy. Continued use of My Job Goblin after changes are notified constitutes acceptance.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.