Privacy Policy

Controller

Nenad Franjic, reachable at info@job-badger.com — see the Imprint for full details.

What information we collect

When you use the free tools on this site, we collect what you submit: a job posting URL, your email address, and career details you provide (current role, years of experience, optional salary expectation, work-location preference, and the career text you provide — typed, pasted (e.g. from your LinkedIn profile), or extracted from a CV you upload. Uploaded CV files are parsed in memory and never stored; only the extracted text you can see and edit is processed. There is no account.

When you reserve a spot for the premium service, we collect the posting URL, your email, and any optional note you add.

Technical data: our infrastructure processes your IP address to protect the service against abuse (rate limiting) and in short-lived server logs. Generated letters are kept so you can use your one free revision and so we can enforce the daily free limits.

Your finished letters are also kept in your own browser(session storage) so a page refresh doesn't lose them; that copy never leaves your device and disappears when you close the tab.

How we use your information

• To generate the application materials you requested
• To find and show you matching job postings
• To notify you about your reservation when the premium service opens
• To operate and improve the service

We do not sell, rent, or share your personal information with third parties for their marketing purposes. No newsletter is sent unless you separately ask for one.

Legal basis for processing (GDPR Art. 6)

If you are located in the European Economic Area, we process your data under:

• Performance of a contract / pre-contractual steps — processing your fit-check, application-prep, or job-search request to deliver the result you asked for.
• Consent — you actively accept this policy and the terms via a checkbox before any form is processed; you can withdraw consent at any time by requesting deletion.
• Legitimate interest — retaining submissions to operate the service, enforce fair-use limits, prevent abuse, and (with your reservation) contact you when the paid service opens.

AI processing of your data

To generate your application materials, the career details you submit (including text extracted from an uploaded CV) and the job posting text are sent to an AI model provider — currently OpenAI(United States). We may route requests through Vercel's AI Gateway and may add other model providers (such as Anthropic) in the future; this policy will be updated when that happens. API data at these providers is not used to train their models under their API terms. The model is instructed to use only the facts you provide and never to invent achievements, numbers, or employers — still, review any AI-generated draft before you send it; you decide what to submit and where.

Job searches are different: when we query job boards and aggregators on your behalf, we send only your search keywords and location— never your name, email, CV text, or any other personal detail. One exception: your keywords may be machine-translated into the search location's language by the same AI provider to find local-language postings.

Data storage and security

Submissions are stored in a Postgres database (Neon, via Vercel's Marketplace, currently hosted in the United States under EU Standard Contractual Clauses; a migration to an EU region is planned) and may additionally reach us by email (Resend). Connections use TLS encryption in transit.

Fit-check and job-search submissions that do not lead to further engagement are deleted no later than 30 days after processing, unless you convert to a customer.

Third-party services

We use the following services, each with its own privacy policy:

• Vercel — website hosting and privacy-friendly, cookieless visitor analytics (aggregate page counts; no cross-site tracking, no persistent identifiers)
• Neon — database storage (US region, SCCs; EU migration planned)
• Resend — email delivery
• OpenAI (or another configured AI provider, possibly routed via Vercel AI Gateway) — generating application drafts and translating search keywords
• Public job boards and aggregators (e.g. EURES, national employment services, company career APIs) — queried with your search keywords and location only

International transfers

Some providers above process data in the United States (Vercel, Neon, OpenAI). These transfers rely on EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. We plan to move primary data storage to an EU region.

Children

The service is intended for people of working age and is not directed at children under 16. We do not knowingly collect data from children.

California residents (CCPA/CPRA)

We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. California residents have the rights to know, delete, and correct — exercise them via the contact below.

Cookies

This site sets no cookies at all — no analytics cookies, no advertising cookies, no tracking. Visitor statistics are collected cookielessly and in aggregate only. That is why you see no cookie banner: there is nothing to consent to.

Your rights

You have the right to access, correct, delete, restrict, or port your data, and to object to its processing (GDPR Art. 15–21), as well as the right to lodge a complaint with a supervisory authority. A plain email is enough — contact info@job-badger.com.