Jobcraft AI

Jobcraft AI is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, and share your personal data when you use our website and services. Please read this policy carefully and contact us if you have any questions.

Data Controller Information

Jobcraft AI is the data controller of your personal data. This means that we are responsible for deciding how and why we process your personal data. You can contact us at:

Jobcraft AI

Lagemorgenlaan 7, 5223HV, 's-Hertogenbosch

contact@jobcraftai.net

Types of Data Collected

We collect the following types of personal data from you when you use our website and services:

• User profile data: This includes your name, email address, and any other information you provide to create a user profile on our website. We use this data to identify you as a user and to provide you with access to our services.
• Cover letter data: This includes your education, personal characteristics, skills, job experience, and any other information you provide to generate a cover letter using our Generative AI service. We use this data to create a personalized cover letter for you based on your preferences and data.
• Technical data: This includes your IP address, browser type, device type, and other information that we automatically collect when you visit our website. We use this data to monitor and improve our website performance and security.

Purpose of Data Collection

We collect and process your personal data for the following purposes:

• To provide you with our Generative AI service: We use your user profile data and cover letter data to generate a personalized cover letter for you based on your preferences and data.
• To communicate with you: We use your user profile data to send you service-related emails, such as confirmation, verification, or password reset emails. We may also use your user profile data to send you marketing emails, such as newsletters, promotions, or surveys, if you have given us your consent to do so.
• To improve our website and services: We use your technical data to analyze how you use our website and services, and to identify and fix any issues or errors.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: We process your personal data based on your consent when you create a user profile, provide your cover letter data, or opt-in to receive marketing emails from us. You can withdraw your consent at any time by contacting us or by using the unsubscribe link in our emails.
• Performance of a contract: We process your personal data based on the contract we have with you when you use our Generative AI service. This means that we need your personal data to provide you with the service you have requested.
• Legitimate interests: We process your personal data based on our legitimate interests to improve our website and services, and to protect our business and users from fraud, abuse, or illegal activities.

Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, or as required by law. We will delete or anonymize your personal data when it is no longer needed, or when you request us to do so.

Data Subject Rights

You have the following rights under the GDPR/AVG regarding your personal data:

• Right to access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request that we delete your personal data, unless we have a legal obligation or a legitimate interest to keep it.
• Right to restriction of processing: You have the right to request that we limit the processing of your personal data, if you have a valid reason to do so, such as disputing its accuracy or objecting to its processing.
• Right to data portability: You have the right to request that we transfer your personal data to another data controller, if technically feasible.
• Right to object to processing: You have the right to object to the processing of your personal data, if we are processing it based on our legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us using the contact details provided above. We will respond to your request within one month, unless we need more time or have a valid reason to refuse it. We may ask you to verify your identity before fulfilling your request.

Data Sharing

We do not sell, rent, or trade your personal data with any third parties. We may share your personal data with the following parties, only when necessary and in accordance with this privacy policy:

• Third-party service providers: We may use third-party service providers to help us operate our website and services, such as hosting, analytics, email, or security providers. We only share your personal data with these providers to the extent necessary for them to perform their services for us, and we require them to comply with our privacy policy and applicable laws.
• Anthropic: We use the Claude-models of Anthropic to generate the cover letters. These models run on a server in the European Union within our AWS environment. We only share your cover letter data with Anthropic to the extent necessary for them to provide us with their Generative AI service, and we require them to comply with our privacy policy and applicable laws.
• Legal authorities: We may disclose your personal data to legal authorities if we are required to do so by law, or if we believe that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

Data Security Measures

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encrypting your personal data in transit and at rest.
• Using secure servers and firewalls to store and process your personal data.
• Limiting the access to your personal data to authorized personnel only.
• Training our staff on data protection and privacy practices.

However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal data. If you have any questions or concerns about the security of your personal data, please contact us.

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority in your country or region. You can find the contact details of the supervisory authority in The Netherlands here: https://autoriteitpersoonsgegevens.nl/en/contact-dutch-dpa/contact-us

Consent Mechanism

We use the following consent mechanism to obtain your consent before processing your personal data:

• Explicit consent: We ask you to tick a checkbox to agree to this privacy policy before you submit your user profile data or cover letter data on our website. We also ask you to tick a separate checkbox to agree to receive marketing emails from us, if you wish to do so. You can change your preferences or withdraw your consent at any time by contacting us or by using the unsubscribe link in our emails.
• Granular consent: We process your personal data for different purposes, as explained in this privacy policy. We obtain separate consents for each purpose, and we do not use your personal data for any other purpose than the one you have consented to. You can object to any of these purposes at any time by contacting us.