Beta

Privacy Policy

Last updated: November 29, 2025

1. Data Controller

The controller of your personal data is JobCrafted (hereinafter "Controller", "we"). You can contact the Controller at the email address: .

2. What data we collect

When using our service, we process the following data:

  • Account data: email address, name (optional), profile picture (when logging in via Google)
  • CV data: content of uploaded CV documents that we process for optimization
  • Technical data: IP address, browser type, access time, device information
  • Cookies: essential for service operation and analytical (with your consent)

3. Purposes of data processing

We process your data for the following purposes:

  • Providing CV optimization service (legal basis: contract)
  • User account management (legal basis: contract)
  • Ensuring service security (legal basis: legitimate interest)
  • Statistical analysis and service improvement (legal basis: consent or legitimate interest)
  • Handling inquiries and user communication (legal basis: legitimate interest)

4. Legal bases for processing (GDPR)

We process your data based on:

  • Art. 6(1)(b) GDPR– contract performance (service provision)
  • Art. 6(1)(a) GDPR– your consent (analytical cookies, marketing)
  • Art. 6(1)(f) GDPR– legitimate interest (security, analytics)

5. Data recipients

Your data may be shared with:

  • Hosting and infrastructure service providers (servers in EU/EEA)
  • AI service providers for CV processing (Anthropic, OpenAI) – data is anonymized where possible
  • Authentication service providers (Google – when logging in via Google)
  • Analytics tool providers (with your consent)

6. Data transfers outside the EEA

Some of our providers (e.g., AI services) may process data outside the European Economic Area. In such cases, we apply appropriate safeguards, including standard contractual clauses approved by the European Commission.

7. Data retention period

  • Account data: until account deletion
  • CVs and generated documents: until deleted by user or account deletion
  • Technical data and logs: maximum 12 months
  • Analytical cookies data: according to cookies policy

8. Your rights (GDPR)

You have the following rights:

  • Right of access– you can obtain information about processed data
  • Right to rectification– you can correct inaccurate data
  • Right to erasure ("right to be forgotten")– you can request deletion of your data
  • Right to restriction of processing– you can request processing restriction
  • Right to data portability– you can receive your data in a machine-readable format
  • Right to object– you can object to processing based on legitimate interest
  • Right to withdraw consent– you can withdraw consent at any time

To exercise these rights, contact us at: .

9. Account and data deletion

You can delete your account and all associated data at any time. This option is available in account settings under "Delete account". Deletion is irreversible and includes:

  • Account data (email, name, photo)
  • All uploaded and generated CVs
  • Application and match history
  • All associated files

10. Data security

We apply appropriate technical and organizational measures to protect your data, including:

  • Data transmission encryption (HTTPS/TLS)
  • Secure password storage (bcrypt)
  • Regular security updates
  • Restricted data access

11. Complaints

If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with a supervisory authority – in Poland, this is the President of the Personal Data Protection Office (UODO).

12. Privacy policy changes

We reserve the right to update this policy. We will inform you of significant changes through a notification on the site or by email.

13. Contact

For matters related to personal data protection, you can contact us:

  • Email:
Privacy Policy | JobCrafted