Privacy Policy
Version 1.1 · Effective July 1, 2026
This Privacy Policy transparently explains how Gaspar Jobfind.ai ("Jobfind.ai," "we," "us," or "our") collects, uses, stores, and protects your personal data when you use the Jobfind.ai platform.
We comply with applicable data protection legislation, including the Swiss Federal Act on Data Protection (revFADP), the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US privacy laws (including the CCPA/CPRA).
1. Key Principles
- Minimal Data: We only collect data necessary to provide and bill for our Service.
- No Data Sales: We do not sell, rent, or share your personal data with third-party advertisers.
- No Model Training: We do not use your personal content, uploads, or outputs to train public or proprietary AI models.
- Full Control: You can export or delete your personal data at any time.
2. Personal Data We Collect
A. Information Provided Directly by You
- Account Credentials: Name, email address, password hash, and social login metadata (Google, GitHub, or Apple OAuth).
- Billing Information: Payment cards are processed directly by Stripe. We do not store full card numbers on our servers; we only store transaction history, billing country, subscription plan, and invoice history.
- User Content & Profile Data: Resumes, work history, job search criteria, application materials, target role preferences, and uploaded media files.
- Communications: Inquiries, feedback, and support tickets sent via email or web chat.
B. Information Collected Automatically
- Log & Technical Data: IP address, browser type, operating system, system language, referring URL, timestamp, and device identifiers.
- Usage Telemetry: Feature adoption rates, navigation paths, and system performance metrics (latency, error logs).
- Essential Cookies: Strictly necessary cookies and local storage to maintain session state and security settings. We do not use tracking or targeted advertising cookies.
C. Third-Party Authentication
If you choose to sign in via Google, GitHub, or Apple, we receive basic identity information (name, email address, profile photo URL) strictly authorized by your provider settings.
3. How We Process Your Data
We process your personal data for the following lawful legal bases:
| Purpose | Legal Basis (Swiss revFADP / EU GDPR) |
|---|---|
| Service Operation: Generating AI resumes, matching job opportunities, managing your account. | Performance of Contract (Art. 6(1)(b) GDPR) |
| Billing & Payments: Processing subscription payments, tax compliance, sending invoices. | Performance of Contract / Legal Obligation (Art. 6(1)(c) GDPR) |
| Customer Support: Responding to inquiries and fixing reported issues. | Performance of Contract / Legitimate Interests |
| Platform Improvement: Optimizing user experience using anonymized, aggregated analytics. | Legitimate Interests (Art. 6(1)(f) GDPR) |
| Security & Fraud Prevention: Safeguarding system stability and preventing abuse. | Legitimate Interests / Legal Obligation |
4. Subprocessors & AI Providers
We share data with trusted third-party subprocessors strictly necessary to fulfill our obligations. All vendors are bound by strict Data Processing Agreements (DPAs) that comply with Swiss and EU data protection standards.
| Subprocessor | Role / Purpose | Location |
|---|---|---|
| Vercel | Web hosting, edge deployment, and infrastructure | EU |
| Supabase | Managed database, file storage, and user auth | Switzerland (Swiss users); EU (EU users) |
| Stripe | Payment processing and billing operations | EU |
| Vercel Analytics | Privacy-centric usage telemetry (no cookie tracking) | EU |
| Affinda | Document parsing and resume extraction | EU |
| OpenAI | AI text generation and application optimization | EU |
Note on AI Vendors: When processing prompts through OpenAI or Affinda, we transmit only the relevant text payload required for your request. API data privacy agreements with these providers explicitly prohibit them from using your input/output data to train their models.
5. International Data Transfers
Jobfind.ai is hosted and operated from Switzerland. Where data is transferred to subprocessors located outside Switzerland or the EU/EEA (such as in the US), we ensure appropriate safeguards are implemented, such as the EU-U.S. Data Privacy Framework (DPF), standard contractual clauses (SCCs) approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC), or equivalent guarantees.
6. Retention & Deletion Schedule
- Active Accounts: We retain your data as long as your account remains open.
- Account Deletion: Upon account deletion, all active database records are permanently deleted or anonymized within 30 days.
- System Backups: Encrypted database backups are fully overwritten on a rolling cycle within 90 days.
- Financial Records: Invoices and transaction logs are retained for 10 years to fulfill mandatory Swiss statutory tax and commercial record retention obligations (Art. 958f Swiss Code of Obligations).
7. Your Data Protection Rights
Regardless of your location, you hold the following rights regarding your personal data:
- Right to Access & Data Portability: Request a copy of your personal data in a structured, machine-readable format.
- Right to Rectification: Correct inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal records.
- Right to Restrict or Object: Object to or restrict specific processing activities.
- Right to Withdraw Consent: Withdraw consent at any time where processing relies on your consent.
To exercise any of these rights, submit a request to contact@jobfind.ai. If you are located in the EEA or Switzerland and believe your data is being processed unlawfully, you have the right to lodge a complaint with your local data protection authority—for Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
8. Security Measures
We deploy end-to-end organizational and technical measures (TOMs) to secure your data, including TLS encryption in transit, AES-256 encryption at rest, database access isolation, hashed password protection, and strict access controls. In the event of a security breach affecting your personal data, we will notify you and relevant regulatory authorities without undue delay as required by law.
9. Minors
Jobfind.ai is directed exclusively to adults aged 18 and older. We do not knowingly collect personal data from minors. If we discover an account registered by a minor, it will be deleted immediately.
10. Updates to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with an updated "Effective Date." For material changes, we will notify you by email or via a banner notification in the application.
11. Contact Information & Data Controller
Data Controller: Gaspar Jobfind.ai — Location: St. Gallen, Switzerland — Email: contact@jobfind.ai
Questions? Contact us at contact@jobfind.ai.