1. Data Controller
Job-Agent is a product of PC Solutions (pc-solutions.eu), the data controller under GDPR. For data protection enquiries contact: privacy@pc-solutions.eu. privacy@pc-solutions.eu
2. Data We Collect
We collect the minimum necessary to deliver the service:
- Account data — email address and hashed password.
- CV content — uploaded to build your Memory Core (themes, roles, key numbers).
- Job descriptions — pasted by you; used to run gap analysis.
- Interviewer text — pasted by you; used to generate prep briefs.
- Usage data — token counts per pipeline stage, document exports, timestamps.
- Billing data — handled by Stripe; we store only your subscription tier and expiry.
3. Legal Basis
Processing is based on contract performance (Article 6(1)(b) GDPR) — we process your data to deliver the service you signed up for. Billing data is also processed for legal obligation (Article 6(1)(c)) where required by tax law.
4. How We Use Your Data
Your Memory Core and CV content are used exclusively to generate tailored resumes, cover letters, and interview prep briefs for you. We do not use your data to train AI models, share it with third parties for marketing, or process it for any purpose outside the service.
5. Data Retention
Your data is retained for the duration of your account. On account deletion, all personal data — Memory Core, applications, documents, prep briefs — is deleted within 30 days.
Anonymised usage aggregates (no PII) are retained indefinitely for operational monitoring purposes.
6. Subprocessors
All subprocessors are EU-based. We do not use US AI providers.
No data is transferred outside the EU, except via Stripe Inc. which processes payment data under Standard Contractual Clauses (SCC).
| Processor | Purpose | Location |
|---|---|---|
| Scaleway SAS | Hosting, PostgreSQL, Object Storage, LLM inference (Generative APIs) | Paris, France |
| Scaleway Transactional Email (TEM) | Auth emails, password reset, billing receipts | Paris, France |
| Stripe Inc. | Payment processing | EU entity + Standard Contractual Clauses |
7. Your Rights (GDPR)
As an EU data subject you have the right to:
- Access — request a copy of all personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — delete your account and all associated data.
- Portability — export your Memory Core, applications, and documents.
- Restriction — limit processing in certain circumstances.
- Object — object to processing based on legitimate interests.
To exercise any right, email privacy@pc-solutions.eu. We respond within 30 days. You also have the right to lodge a complaint with your national data protection authority. privacy@pc-solutions.eu.
8. Security
Passwords are bcrypt-hashed. All data is transmitted over TLS 1.2+. CV files in object storage use private buckets with signed URLs (15-minute expiry). Memory Core JSON is never written to application logs.
9. Contact
Data controller: PC Solutions · privacy@pc-solutions.eu privacy@pc-solutions.eu
10. Cookies & Browser Storage
We do not set any HTTP cookies. We use browser localStorage — which is never transmitted to our servers — for three strictly necessary purposes only. No analytics, no advertising, no third-party trackers.
| Storage key | Purpose | Duration |
|---|---|---|
| ja_token | Keeps you signed in (JWT auth token) | Session — cleared on sign-out or token expiry |
| ja_locale | Stores your language preference | Persistent |
| ja_cookie_consent | Records acknowledgement of this notice | Persistent |