Privacy Policy

Last updated: November 29, 2025

1. Data Controller

The controller of your personal data is JobCrafted (hereinafter "Controller", "we"). You can contact the Controller at the email address: .

2. What data we collect

When using our service, we process the following data:

Account data: email address, name (optional), profile picture (when logging in via Google)
CV data: content of uploaded CV documents that we process for optimization
Technical data: IP address, browser type, access time, device information
Cookies: essential for service operation and analytical (with your consent)

3. Purposes of data processing

We process your data for the following purposes:

Providing CV optimization service (legal basis: contract)
User account management (legal basis: contract)
Ensuring service security (legal basis: legitimate interest)
Statistical analysis and service improvement (legal basis: consent or legitimate interest)
Handling inquiries and user communication (legal basis: legitimate interest)

4. Legal bases for processing (GDPR)

We process your data based on:

Art. 6(1)(b) GDPR– contract performance (service provision)
Art. 6(1)(a) GDPR– your consent (analytical cookies, marketing)
Art. 6(1)(f) GDPR– legitimate interest (security, analytics)

5. Data recipients

Your data may be shared with:

Hosting and infrastructure service providers (servers in EU/EEA)
AI service providers for CV processing (Anthropic, OpenAI) – data is anonymized where possible
Authentication service providers (Google – when logging in via Google)
Analytics tool providers (with your consent)

6. Data transfers outside the EEA

Some of our providers (e.g., AI services) may process data outside the European Economic Area. In such cases, we apply appropriate safeguards, including standard contractual clauses approved by the European Commission.

7. Data retention period

Account data: until account deletion
CVs and generated documents: until deleted by user or account deletion
Technical data and logs: maximum 12 months
Analytical cookies data: according to cookies policy

8. Your rights (GDPR)

You have the following rights:

Right of access– you can obtain information about processed data
Right to rectification– you can correct inaccurate data
Right to erasure ("right to be forgotten")– you can request deletion of your data
Right to restriction of processing– you can request processing restriction
Right to data portability– you can receive your data in a machine-readable format
Right to object– you can object to processing based on legitimate interest
Right to withdraw consent– you can withdraw consent at any time

To exercise these rights, contact us at: .

9. Account and data deletion

You can delete your account and all associated data at any time. This option is available in account settings under "Delete account". Deletion is irreversible and includes:

Account data (email, name, photo)
All uploaded and generated CVs
Application and match history
All associated files

10. Data security

We apply appropriate technical and organizational measures to protect your data, including:

Data transmission encryption (HTTPS/TLS)
Secure password storage (bcrypt)
Regular security updates
Restricted data access

11. Complaints

If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with a supervisory authority – in Poland, this is the President of the Personal Data Protection Office (UODO).

12. Privacy policy changes

We reserve the right to update this policy. We will inform you of significant changes through a notification on the site or by email.

13. Contact

For matters related to personal data protection, you can contact us:

Email:

2. What data we collect

When using our service, we process the following data:

Account data: email address, name (optional), profile picture (when logging in via Google)

CV data: content of uploaded CV documents that we process for optimization

Technical data: IP address, browser type, access time, device information

Cookies: essential for service operation and analytical (with your consent)

3. Purposes of data processing

We process your data for the following purposes:

Providing CV optimization service (legal basis: contract)

User account management (legal basis: contract)

Ensuring service security (legal basis: legitimate interest)

Statistical analysis and service improvement (legal basis: consent or legitimate interest)

Handling inquiries and user communication (legal basis: legitimate interest)

5. Data recipients

Your data may be shared with:

Hosting and infrastructure service providers (servers in EU/EEA)

AI service providers for CV processing (Anthropic, OpenAI) – data is anonymized where possible

Authentication service providers (Google – when logging in via Google)

Analytics tool providers (with your consent)

8. Your rights (GDPR)

You have the following rights:

Right of access– you can obtain information about processed data

Right to rectification– you can correct inaccurate data

Right to erasure ("right to be forgotten")– you can request deletion of your data

Right to restriction of processing– you can request processing restriction

Right to data portability– you can receive your data in a machine-readable format

Right to object– you can object to processing based on legitimate interest

Right to withdraw consent– you can withdraw consent at any time

To exercise these rights, contact us at: .