Privacy Policy

JobCap (“we”) runs jobcap.app, a service that generates tailored resumes and cover letters and helps you fill in job application forms. JobCap is the data controller for the personal data described here. The service is operated by Peer Ahamad Shaik — see the imprint for full details. For anything privacy-related, write to info@jobcap.app.

Account data. Your email address and name, collected when you sign up and sign in.

Resume and profile data. The work history, education, skills, contact details, and any other information you enter or upload. This is personal data, and processing it is the core of the service — we use it to generate your application documents. We also store the original résumé file you upload, in the EU, so you can re-download it and we can re-read it without asking you to upload it again.

Generated documents. The tailored resumes and cover letters we create for you are stored in your account so you can review, download, and reuse them.

Payment data. Payments are handled by Stripe. Your card details go directly to Stripe — we never see or store them. We keep a record of what you bought (bundle, amount in EUR, date) for accounting.

Technical data. A session cookie to keep you signed in, and short-lived server logs for security and debugging. We do not run advertising or cross-site tracking.

Sign-in and device data. When you use the app we record your IP address, your browser/device (user-agent), and an approximate location (city and country derived from your IP), together with the time. We use this only to keep your account secure and detect abuse — never for advertising. See section 7 for how long we keep it.

We process your account, profile, and document data to provide the service you signed up for (Art. 6(1)(b) GDPR — performance of a contract). Payment records are kept to meet legal bookkeeping obligations (Art. 6(1)(c)). Security logging relies on our legitimate interest in keeping the service safe (Art. 6(1)(f)).

We do not sell your data and we do not use it for advertising.

To generate your documents we send the relevant parts of your profile and the job posting to our AI provider, OpenRouter, which routes the request to the large language models that draft your resume and cover letter (currently DeepSeek and Z.ai’s GLM). We send only what the generation needs; the results are stored in your JobCap account and are not published anywhere. These models are run by providers that may be located outside the EU/EEA, so your text may be processed outside the EU.

Your account, profile, the original résumé you upload, and your generated documents are stored with Supabase in the EU (region eu-north-1, Stockholm, Sweden). Stripe (payments) and our AI provider (OpenRouter, and the model providers it routes to) may process data outside the EU/EEA; for Stripe this is covered by EU-approved safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

We use cookies only to keep you signed in (your authentication session). There are no advertising, analytics, or third-party tracking cookies, so there is no cookie banner to click through.

We keep your account, profile, uploaded résumé, and generated documents for as long as your account exists. When your account is deleted, this data is deleted too. Sign-in and device logs (IP, device, approximate location) are kept for up to 90 days for security and then automatically deleted — and are also removed when your account is deleted. Payment records are kept for as long as tax and accounting law requires, then deleted.

Under the GDPR you can ask for access to your data, have it corrected or deleted, restrict or object to processing, and receive a copy in a portable format. You can also complain to a data protection supervisory authority.

Self-service export and deletion are not built into the product yet. Until they are, we fulfil every request by email: write to info@jobcap.app and we will respond within one month, as the GDPR requires.

If we change this policy in a way that matters, we will post the new version here and update the date at the top before the change takes effect.