Privacy Policy
Last updated: July 2026
1. Controller
Fackler IT-Solutions
Florian Fackler
Tellstrasse 32
4600 Olten
Switzerland
UID: CHE-269.516.266
VAT: CHE-269.516.266 MWST
Email: gruezi@jobsuchi.ch
2. General
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations, in particular the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO).
3. Data Collected
We collect and process the following personal data:
- Master data: Name, email address, postal address, date of birth, nationality
- Professional data: CV, education, work experience, skills, certificates
- Application data: Job descriptions, created application documents, application status
- Usage data: Login times, pages visited, interactions with the platform
- Payment data: Subscription status, invoice amounts (payment processing via Stripe)
4. Purpose of Data Processing
Your data is processed for the following purposes:
- Creating and managing your user account
- Analyzing your CV and generating application documents
- Enriching your profile with company information and character traits
- Providing the application tracker and calendar subscription
- Processing payments and subscriptions
- Improving our services
5. AI Processing
For creating application documents (CV tailoring, cover letters, motivation letters) and CV analysis (CV wizard, CV scan), we use AI services. Your data is anonymized before being transmitted to the AI. No personal data (name, address, email) is sent to the AI.
The prompts generated for AI processing are stored in pseudonymised form for up to 90 days to improve the quality of the generated content. They are then deleted automatically.
6. Disclosure to Third Parties
Your data is only disclosed to third parties to the extent necessary for contract performance. A detailed list of all subprocessors with location, purpose, and privacy guarantee can be found on our subprocessor page.
- Infomaniak: Hosting (servers, database, object storage) and AI processing in Switzerland
- AlpineAI: AI processing (LLM), Switzerland
- InnoGPT: AI processing (Claude models for cover letters, CV tailoring, company research), Germany, servers in the EU
- Replicate: AI photo retouching (only the application photo, no names), USA, EU Standard Contractual Clauses
- Stripe: Payment processing (Stripe Payments Europe, Ltd.)
- Resend: Email delivery
No disclosure for marketing purposes takes place.
7. Storage Duration
Your data is stored as long as your access is valid. We delete it permanently 30 days after your access expires; we email you on days 0, 14, 27 after expiry, before we delete anything. You can keep it by extending (99 CHF for 3 months) or with Self-Restore (free: an encrypted file to download, after which we delete everything; you can import the file into a new account later). You can delete your account and data yourself at any time. Anonymous scans without an account are deleted after 7 days. Deleted data disappears from our nightly encrypted database backups (Infomaniak, Switzerland) no later than 14 days afterwards; until then they are used only to recover from an outage.
8. Your Rights
You have the right to:
- Information about your stored data
- Correction of incorrect data
- Deletion of your data
- Restriction of processing
- Data portability
To exercise your rights, contact us at gruezi@jobsuchi.ch.
9. Cookies and Tracking
We use session cookies for authentication. For web analytics, we use Umami, a self-hosted, privacy-friendly analytics tool. Umami uses no cookies — therefore no consent banner is required.
- What is collected: Page views, visited pages, referring websites, device type, browser, operating system, country/region, session duration, custom events (e.g., CV upload, checkout)
- IP addresses: To generate an anonymous session ID, the IP address is temporarily processed. The IP address is not permanently stored in plain text, but as a hash value for session recognition.
- Addresses and pages: Of a page view we send only the path and campaign parameters (
utm_*), no other parameters. Pages of the member area, the result pages of a CV scan, and pages with unsubscribe or confirmation links are not measured at all. Your browser's Do-Not-Track setting is respected. - No personal data: Name, email address, or CV content is not transmitted to the analytics tool.
- No third-party sharing: Analytics data stays on our own server (
imamu.code-nexus.co) in the EU. - Retention: Analytics data is automatically deleted after 90 days.
Additionally, we collect error messages and performance data with Sentry (self-hosted) to ensure the stability of our services. Personal data (name, email, CV content) is not captured — we use PII scrubbing to automatically remove such data.
10. Data Security
We implement technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access. Data transmission is encrypted (SSL/TLS).
11. Changes
We reserve the right to adjust this privacy policy at any time. The current version is available on our website.