Privacy Policy

This policy explains what personal data WerkHunt processes, why, and the rights you have under the EU General Data Protection Regulation (GDPR). We collect the minimum we need to run the service. We never share or sell your personal data to third parties unless you explicitly opt in : that sharing is off by default, it is a separate choice from signing up, and you can switch it off again at any time (see Sharing with partner employers below).

Controller

Birand Bilgin Özer
Naumburger Str. 2, 12057 Berlin, Germany
Email : birand@werkhunt.com

What we collect

• Account : your email address, used to sign you in with a one-time magic link (no password is stored).
• Profile you enter : your experience, target roles and locations, languages, skills, and any CV or notes you upload, used to match and score jobs for you. If you tell us how you heard about WerkHunt, we keep that answer too.
• Activity : the jobs you save, skip, or track, and the fit scores we compute for you. When you open a job post through WerkHunt we also note that you opened it, your answer when we ask whether you applied, and which drafts you download, so we can ask at the right moment and see where the apply step gets stuck.
• Your CV compared with a job : when you open the CV panel for a job, we keep the result of comparing that ad with your CV and profile : the ad's key terms, which of them your CV or profile already shows (with the few words that show it), your latest job title, and a one-line note on your summary. We keep it so opening the same job again does not repeat the work. Deleting a CV deletes these results.
• What you add while applying : skills and tools you tick on a job and choose to save to your profile, and the short answers you write when you tell us you do meet a requirement. They are your own statements, we use them in your drafts and future comparisons, and you can remove each one in your profile under Added while applying.
• Sign-in security log : each time you sign in or out we record your IP address, your browser and device string, and the coarse location (city and country) your connection resolves to. This is so you and we can tell whether someone else got into your account. It is the sign-in event only, not your browsing, and you can see your own log in Settings under Recent activity. It is deleted automatically after 90 days.
• Device and browser: when you're signed in, we note the kind of device you use (phone, tablet or computer), its operating system and browser by name only (for example Android and Chrome, no version numbers), whether you opened us inside another app, and when and roughly how often we've seen them. This note holds nothing else about the device and no IP address. It helps us see which screens and browsers need work, it's kept with your account and deleted with it.
• Emails we send you : your sign-in magic link, and your job alert digest and strong-match alerts, each if you have it switched on. There is also one reminder, sent once and never again, if you create an account and the profile is still empty : without a profile there is nothing to match you against, and that mail says so. These go out through Resend (see Processors we use).
• Error reports : when something breaks, the product sends technical detail about the failure to our error-monitoring service : which page or action failed, the error itself, and your browser and device type. It never includes your CV, your profile, your IP address or your email address, and we use it only to find and fix bugs.

We run no advertising trackers and collect no payment data. We use one product-analytics tool, PostHog, and only after you accept the cookie banner : see Cookies and analytics below.

Why we process it (legal basis)

• To provide the service you asked for : matching, scoring, and tracking jobs (Art. 6 (1)(b) GDPR, performance of a contract).
• To keep the service secure and working (Art. 6 (1)(f), our legitimate interest in a safe, functioning product). This covers the sign-in security log and error monitoring : both exist to keep your account yours and the product working, and neither is ever used for marketing or to build a profile of you.
• To send you the emails the service is built on : your sign-in link, the job alerts you asked for, the weekly digest and the strong-match alert, and the one reminder that your profile is still empty (Art. 6 (1)(b), performance of a contract). Each of the alerts has its own switch in Settings ; the empty-profile reminder has no switch because it is sent once and then never again. We send no marketing email unless you opt in to news and updates in Settings. That switch is off by default.
• To understand how the product is used and improve it : which steps people complete or drop at. In the signed-in product we measure this from your own activity, and from the device and browser note above (Art. 6 (1)(f)) ; on the public site we use consent-based analytics that run only if you accept the cookie banner (Art. 6 (1)(a) ; see Cookies and analytics).
• Only if you opt in : to share your profile with partner employers so they can reach you (Art. 6 (1)(a), your consent ; and Art. 9 (2)(a), explicit consent, for any special-category data a CV may reveal). You can withdraw this at any time.

Sharing with partner employers (optional, off by default)

WerkHunt is candidate-first. By default, the profile and documents you enter are used only to find and score jobs for you : they are never shown, shared, or sold to anyone else.

You can choose to change that. In your account Settings there is a single switch, off by default, that lets partner employers or recruiters we work with receive your profile so they can contact you directly. If you never turn it on, nothing about you is ever shared or sold. If you turn it on, you can turn it off again at any time, which stops any further sharing.

• Legal basis : your explicit consent (Art. 6 (1)(a) GDPR). If what you choose to share contains special categories of data (for example health, religion, ethnicity, or trade-union membership that a CV can imply), we rely on your explicit consent for those too (Art. 9 (2)(a)).
• What could be shared : the profile fields and documents you have entered, so an employer can assess you and reach out. We will name the categories of recipients before any sharing begins.
• Recipients are independent controllers : once an employer receives your data at your request, they process it under their own privacy policy, and you can exercise your rights with them as well as with us.
• Nothing is shared today. We are putting the control in place first. Sharing will only begin once real partner and data-processing agreements are in place, and only for accounts that have opted in.
• Withdrawing is as easy as giving it : the same switch. Withdrawal does not undo sharing that already happened, but it stops anything further.

Keeping the free tier fair (abuse detection)

To stop one person opening many free accounts to reset the free limits, we run an automated check when you sign up and when you upload a CV :

• we compare a one-way fingerprint (hash) of your uploaded CV's text, and a normalized form of your sign-up email, against other accounts. We never expose one person's CV or data to another account : only these fingerprints are compared.
• if an account looks like a duplicate of an earlier one, its AI features are paused. The account is not deleted or banned, and moving to a paid plan lifts the pause automatically.

The legal basis is our legitimate interest in preventing fraud and abuse of a free service (Art. 6 (1)(f) GDPR ; Recital 47 recognises fraud prevention as a legitimate interest). Because this is an automated check, you have the right to contest it and ask for a human to review it : email us and we will look at your case (Art. 22 GDPR).

Processors we use

We share data only with the providers that run the service on our behalf, under data-processing agreements :

• Supabase : database and authentication (storage of your account and profile). Hosting region : European Union (Frankfurt, Germany : AWS eu-central-1).
• Vercel : application hosting and delivery.
• Anthropic (Anthropic Ireland, Limited) : the AI that reads job ads for you. Four things go to it. First, on every scan, the part of your profile that decides fit — your work authorization, languages, education, experience and the notes you wrote about yourself — together with the job ad, so it can score the match and write the verdict you read. This happens automatically, on a schedule, without you clicking anything. Second, when you upload a CV, open the CV panel for a job, or ask for a cover letter or a tailored CV, your CV, the rest of your profile and what you added while applying go too, with that job ad. Third, when you write or change your About me, that text goes to it once so it can suggest a clearer version ; nothing changes in your profile unless you accept it. Fourth, when you add target roles, or open your matches while one of your roles still needs a level, your work history, education and CV text go to it with those role names, so it can tell you where you stand for each role. If you've told us you have no experience in your target fields yet, nothing goes to it for this, and your roles start at Entry. Anthropic does not train its models on any of it and deletes it within 30 days.
• PostHog (EU-hosted) : product analytics, to see how the site is used and where people get stuck. Loaded only if you accept the cookie banner ; if you reject, nothing is sent to PostHog.
• Resend : sending the emails the product owes you. Your sign-in magic link and, each if you have it switched on, your job alert digest and your strong-match alerts. Resend receives your email address and the content of the message, and nothing else about your profile.
• Sentry (Functional Software, error monitoring, data stored in the EU, Frankfurt) : receives the error reports described above when something breaks : which page or action failed, the error, and your browser and device type. No CV or profile content, no IP address, no email address, not used for analytics and never to build a profile of you. Kept for up to 90 days.

Where a processor is outside the EU/EEA, transfers rely on the appropriate safeguards, in particular the EU Standard Contractual Clauses.

How we protect your data

Your data is encrypted in transit (HTTPS). It lives in Supabase's managed PostgreSQL in Frankfurt, which is encrypted at rest by the provider. We sign you in with one-time magic links, so no password is ever stored. Access is restricted by row-level security, so one account cannot read another's data, and only the minimum number of people can reach production systems. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data (Art. 32 GDPR).

Backups : two things hold a copy of the database besides the live service. Supabase, which hosts it, takes its own backup every day and keeps each one for about a week. We also take a copy of our own, at most once a day, held by GitHub as a private build artifact that deletes itself after 14 days. Nothing else holds a copy of your data. The machine that collects job ads for us keeps its own nightly copy of the job bank, and that copy contains job ads only : no profiles, no CVs, no fit results, nothing belonging to an account.

How long we keep it

We keep your account and profile for as long as you use the service. Tracked applications fade after 30 days of silence and clear by 60. Sign-in security events are purged automatically after 90 days, and so is the record of which job posts you opened and whether you said you applied. CV comparisons are kept until you delete the CV they read, or your account. What you add while applying is kept until you remove it in your profile, or delete your account.

Delete your account yourself in Settings → Danger zone. It is immediate and permanent in the live service : your account, profile, CV and results are gone the moment you confirm. The backup copies, ours and our host's, are the one exception, and they expire on their own within 14 days. If you would rather we did it, email birand@werkhunt.com and we will do it within one month.

Children

WerkHunt is for people in the job market and is not directed at children. You must be at least 16 (the age of digital consent in Germany) to use it. We do not knowingly collect data from anyone under 16 ; if we learn that we have, we will delete it.

Cookies and analytics

We use one essential cookie to keep you signed in : it requires no consent, and we run no advertising cookies. Your browser also keeps a few small notes for the site (for example which job post you just opened, so we can ask about it when you come back) ; they stay on your device.

For analytics we use PostHog (EU-hosted) to understand how the site is used and where people get stuck. It is off by default : PostHog captures nothing and sets no analytics cookies unless you accept the cookie banner. If you reject, the site works exactly the same, and you can change your choice any time via Cookie settings in the footer, or in Settings once you're signed in. Legal basis : your consent (Art. 6 (1)(a) GDPR ; § 25 (1) TDDDG).

Your rights

Under the GDPR you have the right to :

• access the data we hold about you, and receive a copy (portability) ;
• correct inaccurate data, or complete incomplete data ;
• have your data erased, and restrict or object to processing ;
• lodge a complaint with a supervisory authority (in Berlin : the Berliner Beauftragte für Datenschutz und Informationsfreiheit).

To exercise any of these, email birand@werkhunt.com.

Changes

We will update this policy as the service grows (for example, when paid features or new processors go live) and revise the date above.