Who we are
JobsPuzzle ("we") is operated by Zinc Dynamics, Limassol, Cyprus, which is the data controller for the personal data described here. Privacy requests: support@jobspuzzle.com.
What we collect
- Account email. If you enter them: your name, phone, city and LinkedIn - used to address and sign your applications.
- Worker mode also: photo, WhatsApp number, skills, languages and availability.
- CV file contents (Pro mode only) - parsed text used to generate cover letters.
- Application history - which jobs you queued, drafted, sent, or skipped, and the cover letters and tailored CVs we generate for you. These are kept so you can re-read them on your Past Letters page, so we can attach one to a draft email when you ask, and so the next letter is not a copy of your last one. They are yours, never shown to anyone else, and deleted with your account.
- Search queries you type (truncated and rotated every 90 days).
- Which device type you last used the app on - simply "iOS", "Android", or "web", plus the app/OS version. This is a single label on your own account, used only to know which versions to support. No advertising ID, no device fingerprint, no location, no IP address.
- Which of our own adverts or links you first arrived through - a single short word such as "fb", taken from the link you clicked (for example
jobspuzzle.com/?ref=fb). It is recorded once, when you create your account, so we can tell whether our own posts bring anyone here. We do not store the website that referred you, your browsing history, an IP address, or any identifier from another company.
AI processing
To generate cover letters, CV suggestions, tailored CVs, interview prep, and match scores, the relevant text (your CV text and the job posting) is sent to third-party AI providers for processing. Depending on availability at the time, this may be any of: Groq, Google (Gemini), Mistral, Cloudflare, OpenRouter, or Amazon Web Services (Bedrock). Their servers are mainly in the United States; the Amazon Bedrock requests are processed in the EU (Ireland). We send only the text the feature needs — never your password, and never your full account record — and none of these providers may use your data to train their models or for advertising. Technical error logs (Sentry) may record your browser type and the page where an error happened - used only to fix bugs.
Legal bases (GDPR)
- Contract: processing your CV, profile, and applications to provide the service you signed up for.
- Consent: the optional choices below (keeping data for matches, sharing with employers, job-alert emails, connected Gmail). You can withdraw each one anytime in the app.
- Legitimate interest: rate-limiting, abuse prevention, and keeping the service secure.
What we don't sell
We never sell your data to advertisers or data brokers. Your CV and profile are shared only (a) with the job source you choose to apply to, and (b) with hiring companies IF you explicitly opted in to "share my profile with employers" below - helping you get hired is what that sharing is for, and you can switch it off anytime.
Optional consents (you choose, changeable anytime)
Inside the app we ask two explicit, optional questions - each defaults to whatever you pick and can be changed later:
- Keep my data for job matches: if you say yes, we keep your CV and preferences to email you new matching opportunities.
- Share my profile with employers: if you say yes, your profile (CV details, roles, city/country) joins a talent pool that hiring companies can search, to help you get hired. If you say no - or switch it off later - your profile leaves that pool immediately and is never shown to any company.
Your data rights
- Export: download everything we store about you as one file - Profile page → "Download my data".
- Deletion: delete your account and all data anytime (below).
- Correction: edit your profile, CV, and preferences anytime in the dashboard.
- Withdraw consent: change any optional consent anytime (Profile page / the consent settings) - withdrawing has no effect on the rest of the service.
- Complain: you can lodge a complaint with your data protection authority - in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy).
Product usage counts (no content, no tracking)
To improve the app we count, on our own servers, how often features are used on your account — for example "3 cover letters generated today" or "2 jobs applied". These are numbers only: we do not record which company or job you applied to in these counts, and never the content of your letters or CVs. The device-type label and the one-off "where you arrived from" word described above are kept the same way. No cookies, no third-party analytics, nothing leaves our EU database, and the counts are deleted with your account.
We do not use Google Analytics, Firebase Analytics, or any other third-party analytics or advertising SDK, and we do not use advertising identifiers (IDFA/GAID). Nothing you do in JobsPuzzle is linked to your activity in other companies' apps or websites.
Connected Gmail (optional)
If you connect your Gmail, we store a token that lets us create draft emails in your own Gmail account with your CV attached. We never send emails on your behalf, never read your inbox, and never share the token. Disconnect anytime by revoking access at myaccount.google.com → Security → Third-party access.
JobsPuzzle's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Third-party job sources
JobsPuzzle aggregates publicly-visible job listings from third-party boards (Bayt, GulfTalent, Naukrigulf, Bazaraki, Kariera, and others). We do not store your applications on those boards - you apply by tapping a button that opens their site (or, in Worker mode, opens WhatsApp / phone / email).
Storage
Account data lives on Supabase (EU region). Worker profile photos are stored in a private bucket; URLs are signed per-request and expire after one hour. AI generation requests are processed in the United States (see "AI processing"); everything else stays in the EU. Data is kept while your account is active and removed within 30 days of account deletion.
Service providers we use
Supabase (database & storage, EU) · Vercel (hosting) · AI text generation: Groq, Google Gemini, Mistral, Cloudflare, OpenRouter (US) and Amazon Web Services / Bedrock (EU, Ireland) · Resend (transactional email) · Google (only if you connect Gmail) · Apple (only if you sign in with Apple) · Sentry (error monitoring) · Stripe (card payments and subscriptions bought on the website; Stripe receives your email and card details — we never see or store your card number) · RevenueCat with Apple or Google (subscription purchases made in the mobile app).
Each of these providers receives only the data its function needs, and each is contractually required to provide the same or equal protection of your data as described in this policy. None of them — including any parent, subsidiary or related entity with access — may use your data for their own purposes, for advertising, or to train their models. We have no other data-sharing relationships: JobsPuzzle uses no advertising networks, no analytics SDKs, and no data brokers.
Deletion
How long we keep things: your data is kept while your account is active. Delete your account at any time from inside the app — Dashboard → Profile → Delete account (or the public delete-account page). No email, no form, no waiting for us to action it.
Deleting your account removes your profile, CV files and parsed text, applications and the cover letters and tailored CVs attached to them, saved and blocked jobs, job preferences, usage counts, connected-Gmail token, push subscriptions, worker profile and uploaded photo — within 30 days, and in practice immediately. Backups roll off within 30 days.
To withdraw consent instead of deleting: turn off "keep my data for job matches" or "share my profile with employers" on your Profile page at any time. Turning off employer sharing removes your profile from the talent pool immediately. Withdrawing consent does not affect the rest of the service, and you can change your mind later.
To ask a question about your data, or to request deletion by email instead, write to support@jobspuzzle.com.
Contact
Questions: support@jobspuzzle.com