Privacy Policy

Last updated: 25 April 2026.

What we collect

  • Account data: email address and password hash (Supabase Auth).
  • Saved jobs: the listings you choose to track, their status, and any notes you add.
  • Search history: keywords, locations, and filters you have used.
  • Resume text: only if you paste a CV into the matcher and explicitly save it.
  • Usage analytics: aggregated, IP-masked search counts and a privacy-friendly Plausible visit ping. No third-party advertising trackers.

What we do with it

We use this data only to operate Jobzyl: showing you relevant jobs, syncing across your devices, scoring CV matches, and improving the service. We do not sell or share personal data with advertisers.

Where it is stored

All data lives in our Supabase (PostgreSQL) project, hosted in the EU. The application is served from AWS (Frankfurt, eu-central-1).

Cookies and local storage

We use localStorage to remember your search preferences and tracked jobs offline. Supabase Auth uses a secure session token in localStorage. We do not set any third-party advertising cookies.

Your rights (GDPR)

  • Access & export: use the “Export my data” button on your account page to download everything we hold about you in JSON.
  • Deletion: use the “Delete account” button on the same page. This wipes all your data immediately and irreversibly.
  • Correction: edit your profile from the account page or contact us.
  • Complaint: you may complain to your local data-protection authority.

Retention

Scraped public job listings are kept for up to 60 days then automatically deleted. Your account data is kept for as long as your account exists.

Contact

For privacy questions, email support@jobzyl.com.