Privacy policy

The data controller for the personal data described here is [PLACEHOLDER — owner’s legal name], at [PLACEHOLDER — registered address], reachable at [PLACEHOLDER — contact email address].

We have not appointed a Data Protection Officer; we are not required to, because we do not carry out large-scale monitoring or large-scale processing of special-category data.

Everything below is data you type into the signup or profile form, or data the service generates about your use of it. We do not buy personal data, we do not enrich your profile from third-party sources, and we do not scrape you — we scrape job ads.

Account

• Email address — the only required field. It is your identifier and the delivery address for everything we send.
• Consent and confirmation timestamps — when you signed up, when you confirmed your address, and when (if ever) you unsubscribed. We keep these to prove that consent was given.
• Delivery settings — your mode (active, watch-only, or paused) and whether instant alerts are switched on.

Job-search profile (all optional)

• Role keywords and seniority level.
• Cities you would work in, and your remote-work preference.
• Your skills — including which ones you mark as core versus familiar.
• What you want next (more of the same, a step up, or a shift toward a named area) and your quiet preferences: company size, and any industries or consultancies you would rather not hear about.
• If you use the “paste your CV” helper: the pasted text is processed once, by the same EU-safe personal-data provider as the rest of your profile (section 5), purely to pre-fill the form in front of you. It is not stored — only the form values you then submit are.
• Whether you need visa sponsorship. We treat this field with particular care, because in practice it discloses something about your immigration status and therefore, indirectly, about your nationality. It exists for one reason: to stop us sending you jobs you cannot legally take. It is never sold, never shared for advertising, and — see section 5 — it is one of the reasons the personal side of our processing is deliberately kept away from certain AI providers.
• Whether you want English-language roles only, and your preferred language for the emails.
• Your salary expectation, in SEK per month.
• Free text you write about yourself, and (in watch mode) free text about what a step up would look like for you. This is free-form, so it contains whatever you choose to put in it. Please do not put health data, political opinions, union membership or similar special-category information in these boxes — we do not need it and we do not want it.
• A numerical embedding of your profile — a 384-number vector derived from your own text, used to find similar job ads by meaning rather than keyword. It is computed on our own server by a local model (all-MiniLM-L6-v2); no third party is involved in producing it.

Generated by using the service

• Matches — which job ads we selected for you, the match score, and the short generated text explaining why it fits, including any draft outreach message and any red flags we spotted.
• Digest records — when a digest was sent, which jobs were in it, and whether it succeeded, was skipped for lack of good matches, or failed.
• Feedback — the one-tap outcome buttons in our emails and on your account page (applied, dismissed, got an interview, hired) and, for dismissals, the optional reason you pick.
• Email log — one row per send attempt: the address, the kind of email, the subject, which provider we used, the provider’s message ID, whether it succeeded, any error, and the rendered body of the email itself. The body is kept so we can see exactly what you received when you tell us something went wrong. It is deleted on a much shorter clock than the rest — see section 6.
• Login sessions — we store only a SHA-256 hash of each magic-link token and each session token, plus its expiry and whether it has been used or revoked. The usable value of the token exists only in the link in your inbox and in the cookie in your browser.

Technical data

• IP address, for abuse prevention. Our signup and login endpoints are rate-limited per IP; that counter lives in the server’s memory only, covers a rolling window of about an hour, and is lost whenever the process restarts. Our web server also writes standard access logs, which include the requesting IP address, to the server’s log stream. Retention of those logs is [PLACEHOLDER — server log retention — owner to confirm].
• Page views, so we can see which pages people find useful. For each page you open we record the path (never the query string), the site you arrived from (its domain only, never the page), the country your connection resolves to, a coarse device class, browser and operating system, and how long the page was open in front of you. We do not store your IP address: visitors are counted using a one-way hash of the IP and browser string under a key that changes every day, so the same browser is one visitor for one day and cannot be recognised the next. If you are signed in, the page views made in that browser are linked to your account, and they are deleted with it. Nothing is stored on your device to do any of this — no cookie, no local storage — and no third party is involved: the counter is our own code on our own server. You can switch it off from the notice bar or the footer of any page — that choice is remembered on your device and nothing is sent while it is off. The country is worked out on that server against a downloaded copy of the free IP-to-country database published by DB-IP (db-ip.com, used under CC BY 4.0) — no request about you is sent to them or to anyone else.
• Operational run records about our own background jobs. These contain no reference to any user and are not personal data.
• Daily aggregate statistics — counts of leads sent, applications, interviews and dismissals across all users. These are counts only, with no user reference, and are not personal data.

Our page-view counting is the only measurement on this site. There is no advertising, no tracking pixel, no fingerprinting, no third-party embed and no analytics product: the numbers never leave our server, and no profile of you is built or sold. Two ways to switch it off: the Turn off page counting link in the footer of every page, or Global Privacy Control in your browser, which does the same thing here and on every other site that honours it. Either one means we send nothing at all.

This site sets one cookie, and only after you sign in. If you have never signed in, browsing the site, reading these policies and signing up for the digest all happen without a single cookie being written. There is no advertising cookie, no tracking pixel and no third-party embed, which is why you were never asked to accept anything.

Both are httpOnly, so no script on the page can read them, and both are marked Secure in production, so they only ever travel over HTTPS. nl_session uses SameSite=Lax and nl_admin the stricter SameSite=Strict; neither is sent with requests originating from other websites in a way that would let anyone follow you across sites.

One entry may also be written to your browser’s local storage, and it holds a choice you made rather than anything about you:nl_analytics_off, written only if you switch page counting off. While it is there, this site sends nothing at all about your visit. It is not an identifier, it is never sent to our server, and it stays on the device that made the choice. Clearing your browser data removes it — the only consequence is that counting resumes unless you switch it off again.

Your consent — Article 6(1)(a) GDPR — for the service itself: storing your profile, matching it against job ads, and emailing you the results.

Consent is collected by double opt-in, which is also what Swedish marketing law (marknadsföringslagen 2008:486, § 19) requires before anyone may send marketing email to a natural person. Concretely: when you submit the signup form we record the moment of consent and send you one confirmation email, and nothing else. That link is valid for 48 hours. Until you click it, your address is confirmed for nothing and no digest, alert or other email will ever be sent to it. Clicking it records your confirmation and starts the service.

You can withdraw consent at any time, and withdrawing is exactly as easy as giving it: the one-click unsubscribe link at the bottom of every email we send, or the delete button on your manage page. Withdrawal does not affect the lawfulness of processing before you withdrew.

Legitimate interests — Article 6(1)(f) GDPR — for a narrow set of things consent does not sensibly cover: rate-limiting and access logs to keep the service from being abused, the email log we need to diagnose delivery failures and to demonstrate that we honoured your consent and unsubscribe choices, and the page-view counting described above, which tells us which pages are worth keeping. Our interest is running a working, non-abusable service that improves; the impact on you is small — no IP address is stored, no identifier is written to your device, and the records expire — and you may object to any of it (see section 8).

Legal obligation — Article 6(1)(c) GDPR — where we have to keep something to comply with the law, for example records demonstrating compliance with the GDPR itself.

We do not rely on consent as a condition of anything else, we do not bundle consents, and we never process your data for automated decisions producing legal or similarly significant effects. Our matching is automated, but its only output is a suggestion in an email that you are free to ignore.

• Finding job ads that fit you, and ranking them. Your profile is compared against ads both numerically (embeddings, computed on our own server) and by a language model that writes the short “why this fits you” text and the draft outreach message.
• Sending you the daily digest, occasional instant alerts for an exceptional match, the monthly market note if you are in watch mode, and transactional email (confirmation, sign-in links, manage links).
• Not sending you the same job twice, and not sending you a digest at all when nothing cleared the bar.
• Improving the quality of what we pick, using your feedback taps.
• Security, abuse prevention, and debugging delivery problems.

We do not sell your personal data. We do not share it with employers or recruiters. We never apply for a job on your behalf and we never give your details to a company whose ad we show you — if you contact them, you contact them yourself.

We keep this list as short as we can. Each of these is a processor acting on our instructions under a data processing agreement.

We name recipients here by category. If you want the actual list of companies, ask us at any time (section 9) and we will provide it — you have that right.

The two-tier split is the important part. Our AI processing is deliberately divided into two stages that cannot mix:

• The public stage reads job advertisements — text that was already published on the open internet — to work out things like the language of the ad, the seniority, and whether it mentions visa sponsorship. It contains nothing about you. This is where the cheaper provider is used.
• The personal stage is the only place your profile is sent to a language model. It is restricted in code to an allow-list of providers with a suitable data protection posture. Requests are pinned to a single vetted upstream, provider fallback is switched off, and the request explicitly denies use of the data for training or collection. Sending personal-stage data to the cheap provider is not a setting we could turn on by mistake — the application refuses to start if it is configured that way.

That split exists precisely because the personal stage carries fields like your sponsorship need. We may in future move the personal stage to an EU-based model provider or to a direct contract with the model vendor; either change makes the boundary stricter, not looser, and we will update this page if the list of recipients changes.

Where we get job ads from — Arbetsförmedlingen’s Platsbanken via the JobTech Development open API, and the public career pages and applicant-tracking systems of employers — is a one-way street. We read from them. We never send them anything about you.

Beyond the table above we disclose personal data only if we are legally compelled to, for example by a valid order from a competent authority.

We do not currently delete accounts automatically for inactivity. If you stop using the service, unsubscribe or delete your data — those are one click each. Backups: [PLACEHOLDER — backup retention and where deleted data ages out of backups — owner to confirm once off-site backups are live].

Our server and database are in the European Union. Some of our processors are outside the EU/EEA:

• Our email delivery provider and our AI matching provider (the personal AI stage) are United States companies. Transfers rely on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.
• Our AI job-ad reading provider processes data outside the EU/EEA as well, but receives only public job-advertisement text and no personal data at all, so no transfer of your personal data takes place.

You can ask us for a copy of the safeguards that apply to any of these transfers.

Under the GDPR you have the right to:

• Access your data and get a copy of it.
• Rectify anything inaccurate. Your profile is directly editable at any time on your manage page or in your account.
• Erase your data. There is a delete button on the manage page and in your account; it performs an immediate hard delete of your account, profile, matches, digest records, feedback, sessions, email log and the page views recorded while you were signed in. Nothing is soft-deleted, archived or retained “for analytics”.
• Restrict or object to processing — including our legitimate-interest processing. Pausing your account stops all matching and email without deleting anything.
• Portability — receive the data you gave us in a structured, machine-readable format. Ask us and we will send it.
• Withdraw consent at any time, using the unsubscribe link in the footer of every email we send, or from your manage page. Unsubscribing stops every kind of email: digests, instant alerts, and the monthly note.
• Complain to a supervisory authority.

Access, portability and any request you cannot complete yourself: email [PLACEHOLDER — contact email address]. We answer within one month, as the GDPR requires, and we do not charge for it. We may need to verify that the request comes from the mailbox that owns the account.

The Swedish supervisory authority is Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy@imy.se, +46 8 657 61 00. If you live or work in another EU/EEA country you may complain to your local authority instead.

The site is served over HTTPS only. Session and admin cookies are httpOnly and marked Secure in production, so page scripts cannot read them. We never store passwords for user accounts — sign-in is by emailed magic link — and the tokens behind those links are stored only as one-way hashes. The administration panel is separately password-protected with a second factor and is invisible to anyone who is not signed into it. Access to the server and database is limited to the operator.

No system is perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify IMY within 72 hours and, where the risk is high, notify you directly.

This service is meant for people looking for professional work and is not directed at children. Do not sign up if you are under 16.

If we change what we collect, who processes it, or how long we keep it, we will update this page and change the date at the top. For changes that materially affect you, we will tell you by email before they take effect, and where the law requires it we will ask for fresh consent rather than assume it.