Privacy Policy
Last updated: 2026-10-06
This policy explains how BewerbMate handles your personal data when you use the Service. We only collect the data needed to provide the Service. We do not sell your personal data and do not use it for advertising.
1. Data controller
BewerbMate. For privacy questions, contact juliandejob@yeah.net.
2. What data we collect
| Category | Details |
|---|---|
| Account data | Email address, password (stored encrypted), interface language preference |
| Job search profile | Job direction, years of experience, language levels, preferred locations, skills, background description, and the resume text you paste in |
| Usage data | Application status of jobs, generated cover letters, email notification settings |
| Payment data | Order number, amount, plan purchased and payment status. Card and other payment details are handled by the payment provider; we do not store them |
| Technical data | Cookies that keep you logged in, IP address and browser information in server logs |
| Usage analytics | Pages you visit, clicks and key actions (such as submitting a job direction, applying to a job or paying), and session recordings of how the website is used, to find problems and improve the product. Everything typed into input fields (resume, chat, email and so on) is masked in recordings and never captured. Analytics are linked only to your account ID, never to your email address |
| Support messages | What you submit via Help & feedback, plus the page and browser you submitted it from |
Please do not include sensitive information unrelated to your job search (such as health data, religious beliefs or ID numbers) in your resume or background description.
3. Purposes and legal bases
- Providing the Service: creating your account, matching jobs, generating cover letters and resume suggestions, sending daily job emails, and processing payments and refunds (Art. 6(1)(b) GDPR, performance of a contract).
- Security and improvement: troubleshooting, preventing abuse and measuring overall usage (Art. 6(1)(f) GDPR, legitimate interests).
- Legal obligations: for example, keeping transaction records (Art. 6(1)(c) GDPR).
4. AI processing
To produce matches, cover letters and resume suggestions, we send your resume text, background description and the relevant job descriptions to our AI model provider (OpenAI). We use the models through their API and do not use your data to train models of our own. Match scores are for your information only and are not automated decisions with legal effect on you.
5. Recipients
We only share the data necessary with processors that help us run the Service:
- Supabase: database and authentication
- Vercel: website hosting
- OpenAI: AI text processing
- Resend: sending emails
- PostHog: usage analytics and session recordings (data stored on EU servers in Frankfurt, Germany)
- Payment provider: processing payments and refunds
Some processors are located outside the EU/EEA (for example in the United States). Such transfers rely on the European Commission’s Standard Contractual Clauses or other safeguards recognised under the GDPR.
Job data comes from publicly posted job listings; collecting it does not involve your personal data.
6. Cookies
We only use cookies that are needed to keep you logged in and a cookie that remembers your chosen interface language. We do not use advertising or cross-site tracking cookies.
Usage analytics (PostHog) use no cookies and store no identifier on your device; the identifier only lives in your browser’s memory while the website is open and is gone when you close it. If you do not want to be included in analytics, you can object at any time using the contact details below, or use a browser ad blocker.
7. Retention
- Account and job search profile data: kept until you delete your account. We delete it within 30 days of receiving your request.
- Payment records: kept for the period required by tax and accounting law.
- Server logs: usually no longer than 30 days.
- Usage analytics: up to 12 months; session recordings: up to 30 days.
8. Your rights
Under the GDPR, you have the right to:
- access the data we hold about you and get a copy;
- correct inaccurate data (most information can be edited directly in Settings);
- ask us to delete your data or restrict its processing;
- receive your data in a common format (data portability);
- object to processing based on legitimate interests;
- turn off the daily email at any time in Settings.
To exercise these rights, log in and submit a request via Help & feedback. We will reply within 30 days. If you cannot log in, use the contact email in section 1. You also have the right to lodge a complaint with the data protection authority where you live.
9. Security
Data is transmitted over encrypted connections (HTTPS), and database access is isolated per user. No system is perfectly secure; if a data breach affects you, we will notify you as required by law.
10. Minors
The Service is intended for adult job seekers and is not directed at anyone under 18.
11. Changes to this policy
We may update this policy. We will announce material changes in advance on the website or by email and update the date at the top of this page.