jobvance← Back

Privacy policy

In accordance with Art. 13 and 14 DSGVO we inform you here about the processing of your personal data.

1. Controller

FS Labs - Digital Solutions & Consulting
Owner: Florian Stadler
Dr.-Otto-Bössner-Weg 1, 85521 Ottobrunn
E-mail: kontakt@jobvance.me

2. Data collected and purposes of processing

2.1 Account data

Data: First and last name, e-mail address, postal code, city (optional), phone number (optional).
Purpose: Account creation, login via magic link, communication regarding your account.
Legal basis: Art. 6 para. 1 lit. b DSGVO (performance of contract).
Retention period: Until deletion of your account; thereafter 3 years for tax obligations.

2.2 Payment data

Data: Payment status, purchased package, amount, Stripe session ID. Credit card or bank details are processed exclusively by Stripe and are not stored on our servers.
Purpose: Processing the purchase and managing your quota.
Legal basis: Art. 6 para. 1 lit. b DSGVO.
Retention period: 10 years (statutory retention obligation).

2.3 CV and application data

Data: CV data entered or uploaded by you (work experience, education, skills, etc.), job postings, tailored CVs, cover letters, interview preparation.
Purpose: Providing the AI-assisted application support.
Legal basis: Art. 6 para. 1 lit. b DSGVO.
Retention period: For as long as your account is active; can be deleted immediately upon request.

2.4 Usage data / logs

Data: IP address (pseudonymised), timestamps, endpoints accessed, error logs.
Purpose: Operation, security, and fault diagnosis.
Legal basis: Art. 6 para. 1 lit. f DSGVO (legitimate interest in secure operation).
Retention period: 30 days.

2.5 Waitlist data

Data: E-mail address.
Purpose: Notification upon platform launch.
Legal basis: Art. 6 para. 1 lit. a DSGVO (consent by signing up to the waitlist).
Retention period: Until launch or deletable at any time upon request. Data is processed via the Tally service (see section 3).

3. Disclosure to third parties / processors

We use the following service providers as processors pursuant to Art. 28 DSGVO:

| Provider | Purpose | Location / data transfer | |---|---|---| | Stripe, Inc. | Payment processing | USA – SCCs pursuant to Art. 46 DSGVO | | Anthropic, PBC | AI processing (Claude API) | USA – SCCs pursuant to Art. 46 DSGVO | | Resend, Inc. | E-mail delivery | USA – SCCs pursuant to Art. 46 DSGVO | | Tally, Inc. | Waitlist form | USA – SCCs pursuant to Art. 46 DSGVO | | Supabase Inc. | Database & file storage | EU (Frankfurt, eu-central-1) | | Railway Corp. | Application hosting (API, worker) | EU (Amsterdam) | | Tavily AI | Web research for company analysis | USA – SCCs pursuant to Art. 46 DSGVO |

Standard contractual clauses (SCCs) pursuant to Art. 46 para. 2 lit. c DSGVO are in place with all US-based providers. Your CV data is transferred to Anthropic solely for processing the specific request; permanent storage by Anthropic does not take place pursuant to contractual agreement.

4. Your rights

You have the following rights under DSGVO, which you may assert by e-mail to kontakt@jobvance.me:

  • Access (Art. 15 DSGVO) – which data we process about you
  • Rectification (Art. 16 DSGVO) – correction of inaccurate data
  • Erasure (Art. 17 DSGVO) – deletion of your data, provided no statutory retention obligation applies
  • Restriction (Art. 18 DSGVO) – restriction of processing
  • Data portability (Art. 20 DSGVO) – receipt of your data in a common format
  • Objection (Art. 21 DSGVO) – objection to processing based on legitimate interests

Note on account deletion: When you delete your account in the profile section, we anonymise your user record and irrevocably remove all CV, application, and attachment data. Your purchase/receipt data (Stripe transactions), however, is retained in anonymised form because we are obliged under §257 HGB to store accounting records and business correspondence for the statutory retention period (generally 10 years). This retention is the legal basis for restricting your right to erasure pursuant to Art. 17 para. 3 lit. b DSGVO.

5. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority depends on your place of residence. A list of German authorities can be found at: bfdi.bund.de.

6. Cookies and local storage

We do not use tracking cookies. For authentication purposes we store your JWT access token in your browser's localStorage. This storage remains local on your device and is not transmitted to any third parties.

7. Changes to this policy

We reserve the right to update this privacy policy when our services or legal requirements change. The current version is available at jobvance.me/privacy. Last updated: May 2026.