Privacy Policy

Last updated: 2026-07-03

Who we are

JobsPuzzle ("we") is operated by Zinc Dynamics, Limassol, Cyprus, which is the data controller for the personal data described here. Privacy requests: support@jobspuzzle.com.

What we collect

• Account email + (Worker mode) full name, photo, WhatsApp number, skills, current city.
• CV file contents (Pro mode only) - parsed text used to generate cover letters.
• Application history - which jobs you queued, drafted, sent, or skipped.
• Search queries you type (truncated and rotated every 90 days).

AI processing

To generate cover letters, CV suggestions, and match scores, the relevant text (your CV text and the job posting) is processed by AI providers (currently Groq, with servers in the United States). We send only what the feature needs, and your data is not used for advertising. Technical error logs (Sentry) may record your browser type and the page where an error happened - used only to fix bugs.

Legal bases (GDPR)

• Contract: processing your CV, profile, and applications to provide the service you signed up for.
• Consent: the optional choices below (keeping data for matches, sharing with employers, job-alert emails, connected Gmail). You can withdraw each one anytime in the app.
• Legitimate interest: rate-limiting, abuse prevention, and keeping the service secure.

What we don't sell

We never sell your data to advertisers or data brokers. Your CV and profile are shared only (a) with the job source you choose to apply to, and (b) with hiring companies IF you explicitly opted in to "share my profile with employers" below - helping you get hired is what that sharing is for, and you can switch it off anytime.

Optional consents (you choose, changeable anytime)

Inside the app we ask two explicit, optional questions - each defaults to whatever you pick and can be changed later:

• Keep my data for job matches: if you say yes, we keep your CV and preferences to email you new matching opportunities.
• Share my profile with employers: if you say yes, your profile (CV details, roles, city/country) joins a talent pool that hiring companies can search, to help you get hired. If you say no - or switch it off later - your profile leaves that pool immediately and is never shown to any company.

Your data rights

• Export: download everything we store about you as one file - Profile page → "Download my data".
• Deletion: delete your account and all data anytime (below).
• Correction: edit your profile, CV, and preferences anytime in the dashboard.
• Withdraw consent: change any optional consent anytime (Profile page / the consent settings) - withdrawing has no effect on the rest of the service.
• Complain: you can lodge a complaint with your data protection authority - in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy).

Cookies

JobsPuzzle sets only essential cookies (your login session). No advertising, analytics, or tracking cookies.

Connected Gmail (optional)

If you connect your Gmail, we store a token that lets us create draft emails in your own Gmail account with your CV attached. We never send emails on your behalf, never read your inbox, and never share the token. Disconnect anytime by revoking access at myaccount.google.com → Security → Third-party access.

JobsPuzzle's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party job sources

JobsPuzzle aggregates publicly-visible job listings from third-party boards (Bayt, GulfTalent, Naukrigulf, Bazaraki, Kariera, and others). We do not store your applications on those boards - you apply by tapping a button that opens their site (or, in Worker mode, opens WhatsApp / phone / email).

Storage

Account data lives on Supabase (EU region). Worker profile photos are stored in a private bucket; URLs are signed per-request and expire after one hour. AI generation requests are processed in the United States (see "AI processing"); everything else stays in the EU. Data is kept while your account is active and removed within 30 days of account deletion.

Service providers we use

Supabase (database & storage, EU) · Vercel (hosting) · Groq (AI text generation, US) · Resend (transactional email) · Google (only if you connect Gmail) · Sentry (error monitoring). Each receives only what its function needs; none may use your data for its own purposes.

Deletion

Delete your account anytime via the dashboard → settings → delete. This removes your profile, CV, applications, and uploaded photo within 30 days.

Contact

Questions: support@jobspuzzle.com