Privacy

JobKeit is operated by Ghazal Ebnalnassir. For anything about your data, write to ghazal.ebnalnassir@gmail.com and you will get an answer from a human.

Only what the product needs to do its one job, writing your applications:

• Your account: email address and a password (stored only in protected, hashed form). Needed to sign you in.
• Your career documents and the profile built from them. This is the heart of the product: every letter, fit check, resume and interview prep is grounded in these and nothing else.
• The applications, letters, salary notes and interview preps you build, so your desk remembers your work between visits.

Your consent, given when you create the account and withdrawable at any moment by deleting it (Art. 6(1)(a)) — and, for the parts that simply make the service work, performing the service you asked for (Art. 6(1)(b)). There is no third ground hiding here: nothing is held on "legitimate interest" for marketing, profiling or analysis, because none of that happens.

Withdrawing consent is a button, not an email: Settings, then delete your account. It is immediate, and it needs nobody's approval.

We never ask you for special-category data. A real CV often carries some anyway: a photo that shows your ethnicity, a religious or political employer, a union role, a disability, a health gap explained in a letter. German applications usually include a photo, so this is not an edge case.

Where you choose to include it, you are giving explicit consent for it to be processed for one purpose only, writing your own application (Art. 9(2)(a)). It is never used to score, sort, categorise or judge you, never shown to anyone else, and never sent anywhere but to the AI provider that writes your text. Remove it and it is gone from everything built afterwards: take the photo off your profile, or edit the fact out.

When you build something, the job ad plus the relevant parts of your profile are sent to our AI provider (Anthropic) to generate the text. Anthropic does not use this data to train its models. When an interview prep runs live company research, only the company and interviewer name you typed are sent to our search provider (Tavily), never your documents.

• No selling or renting your data. To anyone. Ever.
• No advertising, no ad networks, no tracking pixels, no analytics trackers.
• No sharing your documents with employers or any third party. You send your applications yourself.
• No inventing facts: the same honesty rule the product is built on.

Exactly one: the session cookie that keeps you signed in. It is strictly necessary for the service, which is why you see no cookie banner here. There is nothing else to consent to, because nothing else is set.

On professional cloud infrastructure: Vercel (hosting) and Upstash (database). All traffic is encrypted in transit. How long things are kept:

• Your account and everything in it: until you delete it. Deleting is immediate and permanent, with no grace period and nothing kept in the background.
• An account nobody signs into: deleted after 24 months without a sign-in, so a career file cannot sit here forgotten for years.
• Your sign-in session: the cookie expires by itself, and signing out ends it at once.
• After you delete: nothing. No archive, no backup copy held for a "retention period", and no analytics record outliving the account, because no analytics are collected in the first place.

Under the GDPR you can see what we hold about you, correct it, take a copy of it, and have it erased. Three of those four are buttons in the product rather than requests to us:

• See and correct it (Art. 15, 16): your profile page holds every fact we have, and all of it is editable.
• Take a copy (Art. 15, 20): Settings, then "Download everything I have here". One machine-readable file another system can read. It never includes your password, and never your own AI key, because both are live credentials rather than facts about you.
• Erase it (Art. 17): Settings, then "Delete my account". You type your own email to confirm, and then your account, profile, applications, letters, resumes, interview preps, uploaded documents and settings are erased permanently. Nobody has to approve it.
• Object, restrict, or complain (Art. 18, 21, 77): write to the address above. You can also complain to your local data-protection authority.

We are the data controller for everything described here. The processors are named above, each used under its own data-processing agreement, and none of them may use your data for its own purposes.

What JobKeit promises, what it does not, and what it asks of you is on the Terms page.

This page is written in plain language and reflects exactly what the product does today. JobKeit takes no payments: there is no checkout and no card field anywhere in it. If anything here ever changes, the change will be visible on this page first.