Privacy policy
ClaimThisJob is operated by Code 418 (trade names Aardvark Hosting and Lux Loupe), KvK 68957157, Mariahof 3, 5056 SG Berkel-Enschot, The Netherlands. We are the controller of your personal data and are registered in the Dutch Commercial Register (KvK 68957157). Contact: [email protected].
What we hold and for how long
| Data | Why | Kept | Legal basis |
|---|---|---|---|
| Account email | Sign-in links | Until you erase your account; erasure replaces it with an anonymous placeholder | contract |
| Resume file | Submitted to employers on the applications you authorise (encrypted) | Until you erase your account | contract |
| Screening answers | Filling in employer application forms (encrypted) | Until you erase your account | contract |
| Job links, companies and titles | The applications you ask us to make | Your link to them is removed at erasure; the shared job posting record (link, company, title) is kept without any link to you | contract |
| Application screenshots | Proof that an application was submitted (encrypted) | Until you erase your account | contract |
| Messages about a job | Your answers to operator questions and operator notes on an application; not encrypted at rest | Until you erase your account | contract |
| Payment records (credit ledger) | Accounting and Dutch tax obligations; after erasure they are kept without your email. Stripe, as payment processor, keeps its own records under its policy | Kept for 7 years as required by Dutch tax law | legal obligation |
| Email fingerprint (keyed hash) | Prevents repeat free credits after erasure | Kept indefinitely | legitimate interest |
| Audit log | Recording which operator accessed which data, for security and accountability | 2 years | legitimate interest |
| Sign-in links | One-time sign-in | 15 minutes | contract |
| Encrypted backups | Restoring the service after a failure; a copy of the data above, encrypted before it leaves our servers | 70 days, then rotated out | legitimate interest |
Providing this data is needed to deliver the service; without it we cannot apply for you.
How we protect it
- Your resume, screening answers and application screenshots are encrypted at rest. Messages about a job (your answers to operator questions and operator notes) are not.
- Applications are made by human operators. They see only the data needed for the application they are working on, and each access is recorded in our audit log.
- We never send email as you or from your address. The only email we send is your sign-in link.
- We use no analytics, advertising or tracking scripts, so there is no cookie banner. We set only the cookies needed to keep you signed in.
- We do not sell your data and do not share it for advertising.
- Hosting: EU: servers we rent in Germany (netcup).
Who processes data for us
- Stripe: Payments and tax calculation (EU (Stripe Payments Europe Ltd, Ireland); headquartered in US).
- Scaleway Transactional Email: Sending sign-in emails (EU; headquartered in France).
- netcup GmbH: Server hosting (Germany; headquartered in Germany).
- Backblaze B2: Encrypted backups (EU (Amsterdam region); headquartered in US).
- Cloudflare: DNS and proxying of web traffic (Worldwide edge network; headquartered in US).
- Telegram: Internal operational alerts to our team; no names, email addresses or application content; only internal reference numbers (Worldwide; headquartered in UAE).
International transfers
Some processors are headquartered outside the European Economic Area. Transfers outside the EEA rely on the EU-US Data Privacy Framework where the processor is certified, and otherwise on Standard Contractual Clauses.
Your rights (GDPR)
You have the right to access, correct, export and erase your data, to restrict or object to processing, and to complain to the Dutch Autoriteit Persoonsgegevens.
- Export: download your data from your account in the app.
- Erase: delete your account from your account in the app. Erasing your account deletes your resume, screening answers, screenshots and sign-in data, and replaces your email with an anonymous placeholder. Your job entries are unlinked from you; the shared job posting record (link, company, title) stays. A keyed fingerprint of your email is kept only to prevent repeat free credits. Payment records are kept without your email. Unused credits are lost when you erase your account; if you want a refund for unused credits, contact support before deleting. An active Priority plan ends immediately. This cannot be undone. Erased data can remain in our encrypted backups for up to 70 days, until those backups rotate out.
- Payment records are kept without your email for 7 years, as Dutch tax law requires.
Questions or requests: [email protected].