Privacy policy

Draft — to be reviewed by counsel before public launch. Last updated: 3 November 2026.

Who is responsible

JobbSeek is operated by [legal name of the company or founder], [registered address], Morocco, [trade register / ICE number]. We are the data controller. Contact: privacy@[jobbseek-domain] (replace before launch). Moroccan data protection authority (CNDP): declaration / authorization no. [to be obtained before launch]. EU/UK representative: [name and address, if appointed].

What we process

Without an account, in your browser only: your email address, your profile choices, your CV, the jobs and recruiter emails you add to the Apply Queue and the documents we generate. We do not receive your email address unless it is written in your CV.

With an account (optional): when you sign in with your email or Google, we store your account (email, name, profile photo from Google), the profile you fill in (headline, phone, profile link, target role and location, the platforms you use) and your saved work (CV, letters, applications) so you can use it on any device. This data is hosted by Supabase in the European Union (Frankfurt, Germany) and protected so that only you can access it. You can delete your saved work at any time with "Delete data", and your whole account with "Delete my account" on your account page.

On our servers, temporarily: the CV file you upload (read to extract its text, then discarded), and the CV text, job description, company and role you send when you ask for a document.

Technical data: your IP address, used in memory for a few minutes to limit abuse, and standard hosting logs (IP address, date, page requested) kept for up to [30] days by our host [hosting provider, country].

We do not ask for passwords, ID numbers or payment details during the beta.

Sensitive information in CVs

A CV can reveal sensitive information (photo, date of birth, health or disability, religion, nationality, marital status). We do not need it and we recommend removing it before upload. If you leave it in, we process it only with your explicit consent, given by ticking the box before upload.

Why we use it and on what legal basis

• To provide the service you ask for (reading your CV, generating documents): performance of our contract with you, and your explicit consent for any sensitive information and for AI processing.
• To keep the service secure and prevent abuse: our legitimate interest.

We do not use your data for advertising, we do not sell or share it for cross-context behavioural advertising, and we do not use it to train AI models. We do not make decisions about you that have legal or similar effects, and we never score or rank you for employers.

Who receives it

Only the service providers that run JobbSeek for us, under data processing terms: Hugging Face, Inc. (AI routing) and the inference provider it uses for our requests, [name of the pinned provider]; Supabase, Inc. (accounts and database, hosted in the EU); Google (only if you choose "Continue with Google"); and our host [hosting provider]. AI providers process your text to return a result and, according to our agreements, do not keep it or use it for training [to be confirmed with each provider before launch].

International transfers

These providers may process your data outside your country, including in the United States. For users in the EU/UK we rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework where the provider is certified. For transfers from Morocco we rely on the authorization of the CNDP or on your explicit consent, as allowed by Law 09-08.

How long we keep it

In your browser: until you click "Delete my data" or clear your browser storage. On our servers: only for the time needed to process each request (CV text) and up to [30] days for technical logs. On a shared or public computer, delete your data before leaving.

AI-generated content

Your rewritten CV, letters and LinkedIn texts are generated by AI. They can contain mistakes or placeholders such as [X%]: always check them before sending.

Your rights

Depending on where you live (EU GDPR, UK GDPR, Moroccan Law 09-08, US state laws, India DPDP Act, Brazil LGPD and others), you can ask to access, correct, delete or receive your data, object to or restrict its use and withdraw your consent at any time, without affecting earlier processing. Most of your data is only in your browser, so you can view and delete it yourself with "Delete my data". For anything else, write to privacy@[jobbseek-domain]; we answer within one month. You can also complain to your data protection authority, for example the CNDP in Morocco (www.cndp.ma) or the authority of your EU country.

Age

JobbSeek is for people aged 16 or older. If the law of your country requires a parent's consent at your age (for example under 18 in India), do not use JobbSeek without it.

Cookies and storage

We do not use cookies, analytics or advertising trackers. We use your browser's local storage only to save your work, which is necessary for the service you request. If we ever add analytics, we will ask for your consent first.

Job platforms

JobbSeek is not affiliated with LinkedIn, Indeed, Glassdoor or any job platform. We never log in to your accounts and never submit applications on your behalf — you stay in control of every application. When you open a job link, the platform's own privacy policy applies.

Changes

We will show the date of the last update at the top of this page and tell you in the app about important changes.