jobzeeker matches your CV against companies' own hiring portals across the world's most liveable cities. Doing so means processing your CV (personal data that can include sensitive details you choose to include), so we explain clearly below what we collect, why, who we share it with, how long we keep it, and the rights you have.
Who we are
jobzeeker is operated by lalec (lalec.ch), a sole proprietorship based in Switzerland, which is the controller of your personal data (“we”, “us”). For any privacy question or request, contact privacy@jobzeeker.io.
The law that applies
We process personal data under the Swiss Federal Act on Data Protection (revFADP). If you are in the European Economic Area or the United Kingdom, the EU/UK GDPR also applies, and its rights and legal bases apply to you in addition to your rights under Swiss law.
What we collect
| Category | What it is | Why |
|---|---|---|
| Account | Your email address, via email sign-up or Google Sign-In. | To create your account, sign you in, and contact you about your passes. |
| Your CV | The PDF you upload and the profile we extract from it (experience, skills, location preferences). A CV may contain special-category data you choose to include. | Only to produce your matches and, if you use Apply for me, your cover letters and application answers. Processed for your request and returned to your browser: not stored on our servers (see Data retention). Never sold, never posted, never used to profile you elsewhere. |
| Your application details | If you use Apply for me: your name, an optional title you pick, email, phone, your address (street, postal code, city, region and country), a profile link, your work permit and your notice period. | To write your letter and answers and fill in application forms. Kept on your device, not on our servers (see “Apply for me”). |
| Application forms | If you use our browser extension: the questions on an employer's application form you ask it to fill (their labels, field types and choices), not anything already typed in it. | To work out what to put in each field. Used for that request only and not kept. |
| Match results | The roles and cities we match to your profile. We keep two records of a match run, both containing no part of your CV. Your finished results are saved to your account for 7 days, so that if your connection drops before they reach you, you get them back instead of losing the scan. Separately, a note of which job listings a run returned, the city and how long it took is kept for 90 days; that one is not linked to your account: your CV appears in it only as a one-way hash. | To show you your results and to give them back to you if they do not arrive, and (from the 90-day note) to check whether a change we ship makes matching better or worse. |
| Order & payment | Your pass and payment status, and your email address, which Stripe uses to send your receipt. Card details go directly to Stripe: we never see or store your card number. | To process your purchase, send your receipt, and handle support and refunds. |
| Pass reminder | Your email address and the date your pass ends. Once, 3 days before the pass ends, we email you a link to buy another month and ask you to review jobzeeker on Trustpilot. The request is the same for everyone and the link sends nothing about you to Trustpilot. We keep a note on your account that the reminder was sent, so you get one per pass. It is the only email of this kind, and it goes through Cloudflare. | To tell you your pass is ending, because passes do not renew by themselves. |
| Usage & device | Your device/browser type and IP address, from your requests. | To run and secure the service. |
| Analytics | How you use the site: pages, clicks, and funnel events (sign-up, CV upload, match, checkout, purchase, and the Apply for me steps), your device/browser, and a city-level location derived from your IP. Tied to a pseudonymous Google Analytics identifier and, when signed in, a pseudonymous user id, never your email or CV. Collected only if you accept analytics cookies. | To measure and improve the product (see “Analytics” below). |
How your CV is processed by AI
To read your CV and rank matches, your CV and extracted profile are processed by Google Cloud Vertex AI acting as our processor, solely to produce your matches. Google does not use this data to train its foundation models, and we do not use your CV to train any model of our own.
If you use Apply for me, Vertex AI also writes your cover letter and your application answers. For a letter it receives your name, your CV text and the job posting. For answers, or to fill a form, it also receives your other application details and the form's questions. It never sees your letter or the text of your written answers: when a form asks for one, our server puts yours in. The result comes back to you and we do not keep it.
When you upload a CV and Apply for me is on, Vertex AI also reads your CV text a second time to copy out the contact details it states: name, email, phone, your address (street, postal code, city, region and country), a profile link, and a work permit or notice period if the CV says so. They come straight back to your browser to fill in “Your details”. We do not store them or write them to our logs.
Apply for me
Apply for me helps you apply to a match. We write a cover letter, prepare answers to common application questions, and our browser extension can fill in the employer's form. You always send the application yourself.
- What stays on your device. Your application details are saved in this browser so you fill them in once. Your CV file stays in the page while it is open. When you click Autofill, the page hands your details, your CV, the job, your letter and your written answers to the extension, which keeps them in its own storage on your device until your next Autofill replaces them or you remove the extension. With them goes a sign-in token that stops working after one hour, so the extension can ask us for answers.
- What is sent to us. Each time you ask for a letter, for answers or for a form to be filled, your browser or the extension sends us what that request needs: your details, your CV text and, to fill a form, your letter, your written answers and the form's questions. We read the job posting from our own database. We pass what the AI needs to Google Cloud Vertex AI (see above), send you the result, and do not keep it.
- What we keep. Only the times of your requests from the last 24 hours, on your account, so we can apply your pass's daily allowances and fair-use limits, and, if you have no pass, a yes or no for whether you have used your one free cover letter. We do not keep your details, your CV, your letter, your answers or the form's questions.
- The extension. It works only on the page you open, and only when you click Fill this form. It reads the form's questions, not what is already typed in it. It accepts information only from jobzeeker's own site, sends nothing to analytics, fills what it can and never submits. What it handles is used only to fill the form you asked it to fill. We do not sell it, use it for advertising or credit decisions, or let anyone read it unless you ask us for support or the law requires it.
- The employer. We never send your application. You check the filled-in form and submit it yourself. The employer then receives what you submit and handles it as a separate controller, under its own privacy policy. As with anything you type on a website, the employer's page can see what is in its form before you submit.
- Analytics. If you accepted analytics, we count when you open Apply for me, get a letter or answers, or hand a form to the extension. These events carry only which job and which pass, nothing you typed.
Legal bases
- Contract: to create your account and produce the matches, letters and application answers you ask for.
- Consent: where your CV contains special-category data, you provide it voluntarily and can remove it at any time; you may withdraw consent without affecting processing already carried out.
- Consent: for analytics cookies, which we set only after you accept them in our cookie banner. You can withdraw at any time (see “Cookies” below).
- Legitimate interests: to secure the service, prevent abuse, and improve it.
Sharing and sub-processors
We do not sell your personal data. We share it only with the providers needed to run jobzeeker:
| Provider | Purpose |
|---|---|
| Google (Cloud, Firebase, Analytics) | Authentication, database, AI matching and writing your letters and answers, storage, hosting, and analytics. |
| Cloudflare | Email, including the pass-ending reminder. |
| Stripe | Payment processing. |
We may also disclose data where required by law or to protect our users' rights and safety.
International transfers
Our providers may process data outside Switzerland and the EEA. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and recognised Swiss transfer mechanisms.
Data retention
- We do not store your CV or extracted profile on our servers. Your CV is processed to produce your matches and returned to your browser; re-running a match sends it again from your device.
- Your finished match results (the roles we found, with the reason each one matched) are saved to your account for 7 days. A match takes a while to run, and this is what lets us hand the finished results back to you if your connection drops before they arrive, rather than making you run the scan again. They are visible only to you, and they are deleted automatically after 7 days. They do not contain your CV or the profile we read from it.
- We also keep a separate note of which job listings a run returned, together with usage metrics such as processing counts and timings. That note is keyed by a one-way hash of your CV (never its content, and never your name, email or account id), and we use it only to tell whether a change we ship makes matching better or worse. It is deleted automatically after 90 days.
- When you upload a CV, and if you use Apply for me, we keep only the times of your requests from the last 24 hours on your account, to apply daily allowances and fair-use limits, and drop older ones as new requests come in. Your application details, letters, answers and the forms you fill are not stored on our servers.
- Your account record (your email, your pass status, whether you have used your free cover letter and whether we sent your pass-ending reminder) is kept while your account is active. You can ask us to delete your account and associated data at any time by emailing privacy@jobzeeker.io, and we will do so within 30 days.
- Payment and order records are kept as long as tax and accounting law requires.
Your rights
Subject to applicable law, you can request access to, correction of, deletion of, or a copy of your data; restrict or object to certain processing; and withdraw any consent at any time (without affecting processing already carried out). Email privacy@jobzeeker.io to exercise any of these. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA/UK, your local authority.
Security
Your data is stored in private, access-controlled storage and transmitted over encrypted connections, with access tied to your authenticated account. No system is perfectly secure, but we apply measures appropriate to the sensitivity of the data.
Analytics
Analytics runs only if you accept it. Until you accept the banner we show every visitor on their first visit, Google Analytics is set to “denied”, its script is never loaded, no request is sent and no cookie is set. If you reject it, all of this stays true permanently. The rest of this section applies only after you accept.
We use Google Analytics 4 to understand how the product is used and improve it. It processes the pages and features you use, key funnel events (sign-up, CV upload, match, checkout, purchase), your device and browser, and a city-level location Google derives from your IP address. All of this is keyed to a pseudonymous analytics identifier, plus a pseudonymous user id when you are signed in. To measure purchases and refunds reliably, our server sends those two events to Google directly with the transaction amount and currency. We never send your email address or your CV to Google.
Our analytics is measurement-only: no Google Signals, no ads personalisation, and no advertising or cross-site tracking cookies. You can opt out with Google's opt-out browser add-on, or block analytics cookies in your browser settings.
Cookies
Strictly-necessary cookies keep you signed in and secure payments; these are always set. Analytics cookies (_ga, _ga_<id>) are set only if you accept them in the banner. We use no advertising or cross-site tracking cookies.
Your choice is stored in your browser under jobzeeker_consent, so you are not asked again on that browser. To change it, clear this site's cookies and site data. The banner reappears on your next visit.
If you use Apply for me, your application details are saved in this browser under jz.applicant.v1, and the extension keeps its copy in its own storage. Both exist only for the feature you asked for and are never used to track you. To remove them, clear this site's data and remove the extension.
Children
jobzeeker is not directed at children. You must be at least 16 to use it.
Changes
We may update this policy from time to time; the “Last updated” date above reflects the current version, and we will flag material changes where appropriate.
Contact
Questions or requests: privacy@jobzeeker.io.
This policy names the third-party providers we use to run the service; if that list changes we will update it here. lalec is a sole proprietorship registered in Switzerland. For formal correspondence, contact us at the email above.