Privacy Policy

1. Information We Collect

When you use Jobalix, we collect the following types of information:

• Account Information: Name, email address, and authentication data from Google, LinkedIn, or Apple
• CV Data: Your uploaded CV, including professional history, skills, education, and experience
• Job Preferences: Industries, locations, job titles, work modes, and other search criteria you specify
• Usage Data: Job interactions (likes, dislikes, applications), search history, and feature usage
• Payment Information: Processed securely by Stripe; we store only subscription status and customer ID
• Technical Data: IP address, browser type, device information, and log data

2. How We Use Your Information

We use your information to:

• Provide personalized job recommendations based on your CV and preferences
• Process your subscription and manage billing
• Send email notifications about new job matches
• Improve our AI matching algorithms and Service features
• Communicate with you about your account, updates, and support requests
• Detect and prevent fraud, abuse, and security issues
• Analyze usage patterns to improve the Service
• Measure advertising effectiveness and optimize marketing campaigns

We process your data on the following legal bases:

• Contract: Providing the Service, job matching, notifications, and billing
• Consent: Product analytics (PostHog) and advertising measurement (Meta Pixel)
• Legitimate interest: Error monitoring, security, anonymous visitor statistics, and product update emails
• Legal obligation: Retaining invoices and accounting records

3. Data Processing and AI

We use AI services (including Google's Gemini) to analyze your CV and match you with relevant jobs. Your CV data is processed to extract skills, experience, and qualifications. Job matching scores are generated using AI to compare your profile with job requirements.

We do not sell your CV or personal data to third parties. AI processing is performed solely to provide you with the Service.

4. Data Sharing and Third Parties

We share your data with:

• Stripe: For payment processing (see Stripe's Privacy Policy)
• Google Cloud: For AI processing and service infrastructure
• Authentication Providers: Google, LinkedIn, and Apple for OAuth sign-in
• Render: For hosting the Service (Frankfurt, Germany)
• Neon: For hosting our database (Frankfurt, Germany)
• MailerLite: For product updates and service emails to registered users. You can unsubscribe at any time via the link in every email
• Email Service: Mailgun for transactional emails
• Google Maps: For location autocomplete in your job preferences
• Umami: For anonymous, cookieless visitor statistics
• PostHog: For product analytics (only with your consent)
• Meta (Facebook): For advertising measurement and conversion tracking (only with your consent)
• Sentry: For error monitoring and application stability

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Your email address remains on our MailerLite mailing list after account deletion until you unsubscribe, which you can do at any time via the link in every email.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails
• Objection and restriction: Object to processing based on legitimate interest, or request that we restrict processing
• Withdraw consent: Withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal
• Complaint: Lodge a complaint with a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country

You can exercise these rights through your account settings or by contacting us (see section 12).

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS), secure database storage, and access controls. However, no method of transmission over the internet is 100% secure.

8. Cookies and Tracking

We use cookies and similar technologies for authentication, security, and — with your consent — analytics and advertising measurement.

Essential cookies (always active) include session cookies required for sign-in and error monitoring cookies that help us maintain service reliability.

Analytics and advertising cookies(only if you click "Accept" on our cookie banner) include:

• PostHog: Product analytics to understand how users interact with our Service
• Meta Pixel: Advertising measurement cookies (such as _fbp and _fbc) used to measure ad performance and attribute conversions

When you first visit Jobalix, a small banner at the bottom of the page lets you choose "Accept" (analytics and ads) or "Essential only" (no analytics or advertising tracking). Your choice is stored in your browser. To change your choice later, clear site data for jobalix.com in your browser settings, or contact support.

You can also control cookies through your browser settings, but disabling essential cookies may limit Service functionality.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. Some of our providers (e.g. Google, Stripe, PostHog, Meta, Sentry, and MailerLite) may process data in the USA. Such transfers are based on the EU-U.S. and Swiss-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

10. Children's Privacy

Jobalix is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

The controller responsible for processing your data is:

Thomann Innovationsberatung, Dominik Thomann
Kellerweg 63, 8055 Zürich, Switzerland
Email: dominik@jobalix.com

If you have questions about this Privacy Policy or how we handle your data, or want to exercise your rights, please contact us by email or through the support system in your account dashboard.