Privacy Policy

Last updated: 5 July 2026. This policy explains how Jobgetty ("we", "us") processes your personal data under the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023).

1. Controller and contact

The controller responsible for processing your personal data is Jobgetty. For any privacy question, request or complaint, contact us at privacy@jobgetty.ch.

If you are located in Switzerland, the nFADP applies to your data; if you are in the EU/EEA or UK, the GDPR / UK GDPR apply. Where both apply, we align to the stricter standard.

2. What data we process

  • Account data: email address, hashed password, language preference, sign-in timestamps.
  • Profile & CV content: the CVs, cover letters, job descriptions, application notes and interview material you upload or generate.
  • Uploaded files: PDF/Word CVs and profile photos, stored in a private per-user bucket.
  • Technical data: IP address, browser/user-agent, error logs, needed to operate the service securely.
  • Payment data (if you subscribe): handled by our payment processor; we only receive a transaction reference, not your card details.

3. Purposes and legal bases

  • Providing the service (contract performance — Art. 6(1)(b) GDPR; Art. 31(2)(a) nFADP).
  • Account security, fraud prevention, abuse monitoring (legitimate interest — Art. 6(1)(f) GDPR).
  • Complying with legal obligations (Art. 6(1)(c) GDPR).
  • Sending optional product updates (consent — Art. 6(1)(a) GDPR; withdrawable any time).

4. AI processing of your documents

When you generate a tailored CV, cover letter or interview questions, the relevant text is sent to our AI provider strictly to produce your requested output. We do not sell your data and we do not permit the AI provider to use your content for training. Generated output is stored in your account so you can retrieve it later — you can delete it at any time.

5. Processors and international transfers

We rely on a small set of processors bound by data-processing agreements: hosting & database (EU region), authentication, email delivery, error monitoring, and the AI provider. When data is transferred outside Switzerland or the EEA, we rely on the EU Standard Contractual Clauses together with the Swiss addendum, or on an adequacy decision recognised by the FDPIC.

6. Retention

Account and content data are kept for as long as your account is active. If you delete an item it is moved to a trash bin and permanently erased after 30 days. If you delete your account, all associated data is erased within 30 days, except where we must retain limited records to comply with legal obligations (e.g. accounting).

7. Security

Traffic is served exclusively over HTTPS. Passwords are hashed and checked against known-leaked-password lists on signup. Every database row is protected by row-level security so only you can read or modify your own data. File uploads are stored in a private per-user bucket.

8. Your rights

Under the GDPR and nFADP you have the right to access, rectify, erase, restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw it at any time. To exercise any right, email privacy@jobgetty.ch.

You may lodge a complaint with your local supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your national DPA.

9. Cookies and local storage

We use strictly-necessary cookies and browser storage to keep you signed in and to remember your preferences (language, UI theme). We do not use advertising cookies or cross-site tracking.

10. Children

Jobgetty is not directed at children under 16. We do not knowingly process personal data of children.

11. Changes to this policy

We may update this policy to reflect changes to the service or the law. Material changes will be announced in-app. The "Last updated" date at the top of this page always reflects the current version.