Recipients register
The companies that receive personal data from Jobsucher to help us run the service, by category, as referred to in the Privacy Notice. When we add or change a provider inside one of these categories this page is updated. A new purpose for your data is never introduced here: it is announced first and, where the law requires, needs your consent.
| Category | Recipient | Why | What is sent | Where | Transfer safeguard |
|---|---|---|---|---|---|
| AI and language-model providers | OpenAI (Responses API) | Reading vacancy text, extracting skills, and drafting the CV content you ask for. | Vacancy text and details; the professional profile items used for a CV (work experience, work cases, skills, languages, education, certificates); any free text you wrote in those fields. Your name, email, phone and social links are added to the CV locally and are not sent. | United States (default OpenAI endpoint) | Your explicit consent (GDPR Art. 49(1)(a)); requests are sent with storage of the response object switched off. |
| Payment service providers | Stripe | Taking and renewing payments, saving a card reference for renewals, handling disputes. | Email address, your account identifier, plan and price, payment details you enter on Stripe's own page. We keep only a token, the card brand, the last four digits and the expiry. | Being confirmed | — |
| Email delivery providers | SMTP relay (Google Workspace) | Delivering account, billing and password-reset email, and marketing email you opted into. | Your email address and the content of the message. | Being confirmed | — |
| Hosting and infrastructure providers | DigitalOcean (cloud server hosting and DNS) | Running the service: database, file storage, search index and queues. | Everything stored in your account. | Being confirmed | — |
| Certificate authorities | Let's Encrypt (ISRG) | Issuing the certificate that encrypts the connection to jobsucher.app. | Host names only; no user data. | United States | — |
| Public web sources you ask us to read | LinkedIn (public vacancy pages) | Reading a public vacancy page when you use "LinkedIn import". This is a source of data, not a recipient of your data. | Our server's IP address and the vacancy identifier. Nothing about you. | Provider-dependent | — |
| Web analytics providers | Google Ireland Ltd (Google Analytics 4) | Counting visits and interactions on the public site and, after sign-up, the one sign-up event, to understand what works. | Pseudonymous usage events (pages viewed, clicks), approximate location derived from a truncated IP, browser and device class. Loads only after you press "Allow" in the consent bar; no account data, no CV content. | European Union / United States (Google LLC sub-processing) | EU–US Data Privacy Framework; Google Ads Data Processing Terms. |
| Advertising measurement providers | Meta Platforms Ireland Ltd (Meta Pixel) | Measuring whether our ads on Meta platforms lead to visits and sign-ups, so ad spend can be judged and tuned. | Pseudonymous usage events (page views, clicks on sign-up links, the one sign-up event), browser information, and — if you are logged in to a Meta service — Meta may match the visit to your Meta account under its own policy. Loads only after you press "Allow" in the consent bar; no account data, no CV content. | European Union / United States (Meta Platforms, Inc. sub-processing) | EU–US Data Privacy Framework; Meta Business Tools Terms. |