Privacy and personal data
Free beta · version dated 21 October 2026
Operator and contact
Operator: Kirill Tarde, Portugal. Service and personal data enquiries: luziesto@gmail.com.
Data and purposes
We process your account ID, email and basic sign-in data, uploaded CVs, extracted facts, search criteria, job assessments and your decisions. These support your account, professional profile and job matching. Technical logs support security and troubleshooting.
Legal bases and minimisation
Data necessary for requested features is processed to perform our contract; service security relies on the operator’s legitimate interests, balanced against your rights; legally required records rely on legal obligations. Do not upload identity documents, banking or medical data, or unnecessary information about others. Optional marketing is not currently used.
Processing and providers
Supabase stores accounts, original files and personal results; the current project is in us-east-2 (United States). Vercel hosts the interface and receives technical request data. Google handles sign-in under its own policies. After worker cutover, CV text is analysed on the operator’s Oracle Cloud server in Madrid, Spain, using Ollama/Gemma. During migration, processing may also run on the operator’s computer. The application does not send CV text to hosted model APIs or use it for training.
Transfers and recipients
CVs are not published or automatically sent to employers or job sources. Providers may process data outside the EEA. Before public launch the operator must complete the review of processing agreements and applicable international transfer safeguards; information is available through the contact email.
Retention and deletion
CVs, profiles and decisions are retained until you delete them. Deleting an individual CV preserves earlier profiles and assessments, as explained in the confirmation; account deletion includes these too. Access closes immediately and cleanup runs when the worker is available. Contact the operator if it is delayed.
Backups are not erased instantly. The local backup and log policy is up to 30 days; provider backup retention depends on their contract and plan. A minimal deletion record (UUID and dates, without CVs or email) is retained to prevent restoration. Deletion records must be applied before a restored backup is used.
Your rights
Your account provides data export, CV downloads, editing of criteria and account deletion requests. For access, factual corrections, restriction, objections and other applicable rights, contact the operator. We normally respond within one month and explain any permitted extension. You may complain to Portugal’s CNPD or another competent supervisory authority.
Automated recommendations
Assessments help you compare vacancies and may be wrong. We do not make employers’ hiring decisions or submit applications automatically. You can inspect sources, correct your profile and challenge results through the operator.
Age and security
The beta is intended for people aged 18 or over. Access controls, private storage, encrypted connections and quotas are used; absolute security cannot be guaranteed. Report suspected leaks or unauthorised access to the operator without sending passwords or keys.