Privacy Policy
Last updated: September 28, 2026
This Privacy Policy describes how JobMatch AI (“we”, “our”) collects, uses and protects your information when you use our AI-powered CV analysis service.
1. Data Controller
The data controller is JobMatch AI. For any privacy-related questions, contact us at: jobmatch.app.ai@gmail.com.
2. Data We Collect
Anonymous users (no account)
- CV text and job description you submit to generate an analysis.
- Pseudonymised IP hash (SHA-256 with a secret salt), used solely to prevent abuse of the free quota. We do not store your IP address in plain text.
- The AI-generated analysis result.
Registered users
- Name (optional).
- Email address.
- CV text saved to your profile for future analyses (you can delete it at any time from your profile settings).
- Analysis history (CV, job description and result).
Usage data
- If you accept, we use Google Analytics 4 to collect aggregated usage data (pages visited, actions taken). Google Analytics is not loaded until you give your consent.
Advertising
- We may show Google AdSense ads on the blog, the calculators and below analysis results. We never show ads on the page where you upload your CV or on processing screens. Personalised ads and their cookies are only used with your consent; otherwise Google may show non-personalised ads. Your CV text is never shared with advertisers.
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the CV analysis service | Performance of contract (Art. 6.1.b) |
| Saving your CV to your profile for reuse | Consent (Art. 6.1.a) |
| Abuse prevention via IP hash | Legitimate interest (Art. 6.1.f) |
| Aggregated web analytics | Consent (Art. 6.1.a) |
| Personalised advertising | Consent (Art. 6.1.a) |
4. AI Processing
Your CV text and job description are sent to third-party AI providers to generate the analysis. We currently use OpenAI and/or Anthropic. These providers process data solely to generate the response and do not use your data to train their models (per their API usage policies).
All data is transmitted encrypted (TLS). We recommend not including especially sensitive information (bank account numbers, passwords, medical data) in the CV you submit.
5. Storage and International Transfers
Your data is stored with Supabase (EU infrastructure). Calls to the OpenAI and Anthropic APIs involve a transfer of data to the United States. These transfers are made under appropriate safeguards as provided by applicable law (Standard Contractual Clauses).
6. Data Retention
- Anonymous user analyses: retained for 30 days, then automatically deleted.
- IP hash: retained with the analysis and deleted alongside it.
- Account data and analyses for registered users: retained while your account is active. You can request deletion at any time.
- CV saved to profile: you can delete it from your profile at any time.
7. Your Rights
Under the GDPR you have the right to:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate data.
- Erasure: request deletion of your data.
- Portability: receive your data in a structured format.
- Objection and restriction: object to processing or request its restriction in certain circumstances.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at jobmatch.app.ai@gmail.com. You also have the right to lodge a complaint with your local data protection authority.
8. Cookies
We use three kinds of cookies and similar technologies:
- Technical (necessary): session cookies for authentication and local storage of your consent choice. They don't require consent.
- Analytics: Google Analytics 4 (
_gaand_ga_*cookies). Only enabled if you accept them. - Advertising: Google AdSense, when active. Your consent is managed with Google's consent management platform, certified under the IAB TCF framework. Without consent, no cookies are used to personalise ads.
You can change or withdraw your consent at any time: . You can also read how Google uses data at policies.google.com/technologies/partner-sites.
9. Children
This service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new version on this page with an updated date.
11. Contact
For any privacy queries: jobmatch.app.ai@gmail.com