Privacy Policy

Last updated: May 8, 2026

Data Controller

The personal data controller is AlgoMind Andriej Gruszewski, ul. Kasztelańska 13/12, 51-200 Wrocław, Poland, VAT ID: 8943080821. Contact: [email protected].

What Data We Collect

• Registration data: email address, first name, hashed password — or Google account identifier when using Google OAuth.
• Application data: company names, positions, statuses, dates, salary ranges, notes, job descriptions, recruiter details, interview records, and tags — solely as entered by the User.
• Technical data: server access logs (IP address, browser agent) for security and diagnostic purposes only.

Analytics: The Service uses Umami Analytics — a privacy-first tool that collects no personal data, uses no cookies, and shares no data with third parties. Only aggregated visit statistics are collected.

Purpose of Processing

• Providing the Service and managing the User Account — Article 6(1)(b) GDPR
• Ensuring Service security — Article 6(1)(f) GDPR
• Fulfilling legal obligations — Article 6(1)(c) GDPR
• Defending against and pursuing claims — Article 6(1)(f) GDPR

Cookies

The Service uses only strictly necessary cookies:

• Authentication cookie (HttpOnly JWT) — stores the session token required to access the Account. Deleted on logout.
• Session cookie — required for form handling and CSRF protection.

No analytics, advertising, or tracking cookies are used. The analytics tool (Umami) operates without cookies.

Data Recipients

Data may be shared with infrastructure providers (DigitalOcean) only to the extent necessary to provide the Service. Data is not sold to third parties.

Data Retention

Data is retained until the User deletes their Account or as required by applicable law. Upon Account deletion, all Application Data is permanently erased.

Your Rights

• Access to your data (Article 15 GDPR)
• Rectification of data (Article 16 GDPR)
• Erasure of data — available in Settings (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability — CSV export available in Settings (Article 20 GDPR)
• Object to processing (Article 21 GDPR)
• Lodge a complaint with the Polish data protection authority, PUODO (Article 77 GDPR)

Data Transfer to Third Countries

Personal data is not transferred to third countries or international organizations.

Automated Processing

Personal data is not used for automated decision-making or profiling.

Contact

[email protected]