Who we are
JobWise operates the JobWise service. For any question about your data, write to privacy@jobwise.si.
What we process and why
- Account data (name, email, password hash, language, time zone): to provide your account. Basis: contract.
- Resume and profile (the file you upload, the text extracted from it, the profile you confirm, your preferences): to analyse your profile, match jobs and write applications you ask for. Basis: contract. The extracted text is encrypted at rest.
- Mailbox data, only if you connect Gmail or Outlook: we send the messages you approve and read replies to those messages and recent messages from companies you applied to. Other mail is never stored. Message bodies are encrypted and deleted after the retention period. Basis: contract and your consent, which you can withdraw by disconnecting the mailbox.
- Usage and billing data: plan, usage counters, invoices. Basis: contract and legal obligations.
- Professional contact data about recruiters: name, job title, company and business email, collected from job postings published by employers and, on paid plans, from licensed data providers. Basis: legitimate interest in connecting candidates with recruiters for open positions. Every contact record keeps its source. Recruiters can opt out or ask for erasure at any time.
AI processing
When an AI provider is enabled, parts of your resume and of job postings are sent to it (Google Gemini or a model available through OpenRouter) to extract information and draft text. Providers process this data on our behalf. AI output is checked against your confirmed profile before you see it.
Retention
Resume files and profile data are kept while your account exists. Email bodies are deleted after 180 days. Recruiter contact records unused for 365 days are deleted. After you delete your account, your data is erased after 30 days. These periods can be shortened by the administrator.
Your rights
You can access, correct, export and delete your data from Settings, withdraw consent, and object to processing. You can also complain to your data protection authority (for example the CNIL in France or the CNDP in Morocco).
Security
Passwords are hashed with Argon2id, secrets and sensitive text are encrypted with AES-256-GCM, sessions use secure cookies, and access to production data is restricted and logged.