Privacy Policy

1. Data controller

[LEGAL BUSINESS NAME — CONFIGURATION REQUIRED], trading as JobMatch Ireland, is the data controller for the personal data described in this notice. You can contact us about privacy at support@jobmatchireland.ie.

2. What we collect

• Account data: your email address, the name you give us, your password (stored only as a salted hash by our authentication provider) and your sign-in timestamps.
• CV content: the CV files you upload (PDF, DOCX or legacy DOC) and the text extracted from them. A CV commonly contains your name, contact details, employment history, education and qualifications.
• Job descriptions: the job advert text you paste in for comparison.
• Analysis results: the match score, matching skills, missing keywords, experience gaps, recommendations, draft cover letter and interview questions generated for you.
• Subscription and usage data: your plan, credit usage, billing period, subscription status and payment events.
• Support data: the messages, contact details and reference numbers relating to requests you send us.
• Technical data: security, access and error logs, including IP address and browser information, used to keep the service secure and working.

We do not ask for special category data. Please do not upload documents containing data you do not want processed, and never send passwords or full card numbers to support.

3. Why we process it, and our legal basis

• To provide the analysis you request — performance of our contract with you (Article 6(1)(b)).
• To create and secure your account, and to prevent fraud and abuse — contract and our legitimate interests (Article 6(1)(b) and (f)).
• To take payment and keep accounting records — contract and legal obligation (Article 6(1)(b) and (c)).
• To answer your support requests — contract and legitimate interests.
• To send optional marketing emails — your consent, which you can withdraw at any time (Article 6(1)(a)).

4. AI processing

JobMatch uses AI-assisted technology to analyse your CV against a job description and provide career-related suggestions. AI-generated results are provided for informational and career-support purposes and should be reviewed by you before use.

To produce your analysis, the text of your CV and the job description you supply are sent to our AI processing provider for the sole purpose of generating that analysis. Results are returned to your account. No automated decision with legal or similarly significant effect is made about you — the output is guidance you review and decide how to use.

5. Who we share data with

We do not sell your personal data. We use a small number of processors who act only on our instructions:

• Our cloud database, file storage and authentication provider, which hosts your account, CVs and analyses.
• Our AI processing provider, which generates your analysis from the text you supply.
• Stripe, which processes card payments and subscriptions. Stripe receives your billing details directly — we never see or store your card number.
• Our email delivery provider, used to send account emails such as verification and password resets.

Where a provider processes data outside the European Economic Area, that transfer is made under an appropriate GDPR transfer mechanism, such as the European Commission's standard contractual clauses.

6. How long we keep it

• Account data: Kept while your account is active. After you request deletion, personal data is permanently deleted or anonymised within 30 days, except where we must keep it for legal, tax, fraud-prevention, security or dispute-resolution reasons.
• CVs, job descriptions and analyses: Your CVs, job descriptions and analysis results are kept while your account is active, and are deleted with your account.
• Billing and payment records: Billing and payment records are kept for 6 years where required by Irish tax and accounting obligations.
• Security and audit logs: Security, access and audit logs are kept for 12 months, and longer only where reasonably necessary for a security incident, fraud investigation, legal claim or regulatory requirement.
• Marketing consent records: Marketing consent records are kept while consent is active. If you withdraw consent we stop marketing and keep only the minimum suppression record needed to make sure you are not contacted again.

We apply data minimisation, purpose limitation and storage limitation: we do not keep personal data indefinitely, and you can delete individual CVs and analyses yourself at any time from your dashboard.

7. Your rights

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — delete your account and personal content. You can do this yourself in Account settings, or ask us.
• Restriction and objection — ask us to limit or stop certain processing.
• Portability — receive your data in a structured, commonly used format.
• Withdraw consent — turn off marketing emails at any time in Account settings.

Email support@jobmatchireland.ie or use our support form. We respond within one month, as required by GDPR.

8. Complaints

If you are unhappy with how we handle your data you can complain to the Data Protection Commission (Ireland).

Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland
Phone: +353 (0)1 761 1700
https://www.dataprotection.ie

9. Security

Your data is stored in an access-controlled database with row-level security, so your CVs and analyses are readable only by your own signed-in account. Uploaded files are held in private storage. Traffic is encrypted in transit. Access to production data is limited to what is necessary to run the service.

10. Children

The service is not intended for anyone under 18. We do not knowingly create accounts for people below that age.

11. Cookies

See our Cookie Policy for details of the storage we use and how to change your choices.

12. Changes

If we change this notice we will update the date at the top of the page and, where the change is significant, tell you by email or in the app.