Privacy Policy

Effective date: August 6, 2026

This Privacy Policy explains how we handle personal data when you use Job Search Guide (the "Service"). We take your privacy seriously and process your data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and Czech data-protection law.

1. Who is responsible for your data

The controller of your personal data is Net Image, s.r.o., a company registered in the Czech Republic. You can contact us about anything in this policy at support@jobsearch.guide.

2. What data we collect

Account details: your name, email address, and login credentials, or the basic profile information provided by Google if you choose to sign in with it.
Content you create: the resumes, cover letters, work history, education, skills, and contact details you enter while using the builder and related tools.
Job-search records: the companies, roles, statuses, and notes you save while tracking applications.
Networking contacts: the names, contact details, and notes you add to your personal networking list.
Billing data: when you subscribe, Dodo Payments sells you the subscription as our merchant of record: it handles your card details, charges any VAT or sales tax, and appears on your statement. We receive only limited information such as your plan, payment status, and billing country, and we never see or store full card numbers. Dodo Payments keeps its own payment and invoice records for as long as tax and accounting law requires, including after you delete your account.
Technical data: information collected automatically as you use the Service, such as your IP address, browser and device type, pages viewed, actions taken, and access times.

3. Why we use your data and our legal bases

We process personal data in order to:

provide and maintain the Service and the features you use - on the basis of performance of our contract with you;
run AI-assisted features you request, such as drafting or tailoring application materials - also on the basis of performance of our contract;
send service messages such as verification, password resets, and billing notices - on the basis of performance of our contract;
keep the Service secure and prevent fraud and abuse, and improve how it works - on the basis of our legitimate interests;
send optional product updates where you have given consent, which you can withdraw at any time; and
meet our legal obligations, for example accounting and tax requirements.

4. AI processing

When you use an AI-assisted feature, the content you submit - which may include your resume, cover letter drafts, saved job descriptions, and interview answers - is sent to an AI provider that generates the response on our behalf:

OpenRouter is our primary AI processor. It routes each request to the model provider best suited to it.
Cloudflare Workers AI is used as a fallback for resume parsing when the primary provider does not return a result, so the text of an uploaded resume may be processed there.

We do not allow your data to be used to train their models, and the content is processed only to return a result to you, not retained by the provider for unrelated purposes.

5. Who we share data with

We do not sell your personal data. We share it only with the service providers we rely on to run the Service, and only as needed:

Hosting and storage: Supabase (database and authentication) and Cloudflare (edge hosting, storage, and page rendering);
Payments: Dodo Payments, our merchant of record for subscriptions;
AI processing: the providers listed in section 4;
Email: Emailit, for transactional messages such as support replies and billing notices; and Acumbamail, which we use for two things: a short series of onboarding emails sent to every new account to help you get started (we send these on the basis of our legitimate interest in helping you use the Service, and every one of them contains an unsubscribe link), and the separate, optional product-update mailing list you can subscribe to and leave at any time;
Email verification: Debounce, used only to check that the email address you sign up with can receive mail;
Sign-in: Google, if you choose to sign in with a Google account.

When you create an account with an email address and password, we send that address to Debounce to check that it can receive mail, so that a mistyped address does not lock you out of your account. We use the answer only for that check and do not store it. We do not do this when you sign in with Google.

We may also disclose data where the law requires it, or to a court or public authority, and we may transfer data as part of a corporate transaction such as a merger or sale, with appropriate safeguards.

6. International transfers

Some of our processors are located outside the European Economic Area. Where we transfer your data abroad, we rely on safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data keeps an equivalent level of protection.

7. Your rights under the GDPR

Subject to the conditions in the GDPR, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to certain processing;
receive your data in a portable format and have it transferred; and
withdraw any consent you have given, without affecting earlier processing.

To exercise any of these rights, email us at support@jobsearch.guide. You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), or with the authority in your EU country of residence.

8. How long we keep your data

We keep your data for as long as your account is active. If you delete your account, we delete the associated personal data within about 30 days, except where we must keep certain records longer to meet legal obligations or to prevent fraud and abuse. Payment and invoice records are held by Dodo Payments, our merchant of record, for as long as tax and accounting law requires.

9. How we protect your data

We apply appropriate technical and organisational measures to keep your data safe, including encryption in transit (TLS), encryption of databases at rest, row-level access controls, and regular security reviews. No system can be guaranteed completely secure, but we work to protect your data in line with current good practice.

10. Cookies

We use only the cookies needed to sign you in and keep your session working. We do not use third-party advertising or analytics cookies, and we do not sell tracking data.

11. Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. If a change is material, we will give you reasonable notice by email or through the Service. Continuing to use the Service after the change takes effect means you accept the updated policy.

13. How to reach us

For any privacy question or request, contact Net Image, s.r.o. (Czech Republic) at support@jobsearch.guide.