Privacy Policy

1. What we collect

Account: email and name (via Google OAuth). Profile: sector, desired salary, location, languages, experience, optional photo. CV: the PDF you upload or the data to generate one. Usage: sent applications, statuses, stats. Minimal technical: language, essential session cookies, and a device fingerprint for anti-abuse only (one trial per person).

2. How we use it

Provide the service: find offers, build your CV, send applications at your pace, show your dashboard. Improve the product with aggregate stats. Essential comms: employer responses, daily summary (if enabled), billing notices. We never sell your data or use it for third-party ads.

3. Where it lives & who sees it

Supabase (EU hosting) for account, profile, applications. Stripe for payments (they handle the card; we never see it). Google OAuth for sign-in only. JobsPipe (your own key) only to read listings. Email/push providers only for notifications you enable.

4. Cookies

Essential: session + language (you cannot log in without them). Optional analytics only if you click "Accept all". Change your mind anytime by clearing browser cookies or emailing us.

5. Your rights (GDPR)

Access, rectification, portability, objection, erasure. Export anytime from Settings → My data. Delete your account and everything (profile, CV, applications, settings, keys) from Settings → Danger zone, or email noiramaster@gmail.com — done within 30 days max.

Legal bases: contract (service), consent (optional analytics/notifications), limited legitimate interest (anti-abuse).

6. Retention & security

We keep data while your account exists. On deletion we erase everything except what the law requires (e.g. invoices). Encryption in transit and at rest, encrypted API keys, restricted access.

7. Contact & complaints

Controller: Noira Master · noiramaster@gmail.com. You may complain to your data-protection authority (in Spain, the AEPD).