Legal

Privacy Policy

Last updated: April 2, 2026 · Effective immediately

We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights as a user — including under GDPR.

1. Who We Are

Sollicitatie Coach is an AI-powered job application tool operated by an individual developer based in the Netherlands.

As a service operating within the EU, we comply with the General Data Protection Regulation (GDPR).

2. What Data We Collect

2.1 Data you provide directly

Data typeHow it's collectedPurpose
CV textYou paste it into the appAI analysis only
Job description textYou paste it into the appAI analysis only
Email addressOptional, via email capture formProduct updates, tips (with consent)
Review / feedbackOptional, via review formProduct improvement

2.2 Data collected automatically

Data typeSourcePurpose
IP address + User-AgentServer logsRate limiting and abuse prevention (hashed fingerprint)
Usage data (page views, interactions)Vercel AnalyticsUnderstanding how the service is used
Browser local storageYour browserStoring usage count, language preference, session ID

3. How We Process Your Data

3.1 CV and job description

We do not store your CV or job description. When you run an analysis, your text is sent directly to the Anthropic API for processing and immediately discarded after the response is returned. No CV or job description text is saved to any database.

The processing flow is:

3.2 IP addresses and fingerprinting

IP addresses and User-Agent strings are combined into a hashed fingerprint (SHA-256) used temporarily in server memory to enforce rate limits. The raw IP address is not written to persistent storage. Fingerprints are cleared periodically. We do not track or profile users.

3.3 Email addresses

If you voluntarily provide your email address via the optional email capture form, it is stored locally in your browser (localStorage) until we implement a proper email list integration. We will only send you product-related communications. You can opt out at any time.

3.4 Reviews and feedback

If you submit a review, the star rating and text are sent to us via Formspree.io. We may display anonymised feedback on the website. We will not publish your name without your explicit consent.

4. Local Storage

We use your browser's localStorage (not cookies) to store:

This data stays in your browser only and is never sent to our servers unless explicitly described above. You can clear this data at any time by clearing your browser's local storage.

5. Third-Party Services

5.1 Anthropic (AI Processing)

Your CV and job description text is sent to Anthropic's API for AI analysis. Anthropic is a US-based company. By using Sollicitatie Coach, you acknowledge that your input text will be processed by Anthropic's systems.

Anthropic's privacy policy: anthropic.com/privacy

5.2 Lemon Squeezy (Payments)

If you subscribe to Plus or Pro, your payment is processed by Lemon Squeezy. We receive an order session ID to validate your subscription tier but do not store your payment details (card number, billing address). Lemon Squeezy acts as the Merchant of Record and validates subscription status via their API.

Lemon Squeezy's privacy policy: lemonsqueezy.com/privacy

5.3 Vercel (Hosting)

Our service is hosted on Vercel. Vercel may process request metadata (IP addresses, headers) as part of normal infrastructure operation.

Vercel's privacy policy: vercel.com/legal/privacy-policy

5.4 Formspree.io (Review notifications)

We use Formspree.io to receive review notifications. Review content (star rating and message) is transmitted via Formspree.io's infrastructure. No CV or personal identification data is included in these submissions.

Formspree.io's privacy policy: formspree.io/legal/privacy-policy

6. Legal Basis for Processing (GDPR)

Processing activityLegal basis
CV and job description analysisPerformance of a contract (providing the service you requested)
Rate limiting via hashed IP fingerprintLegitimate interest (preventing abuse, ensuring fair access)
Email marketing (if opted in)Consent (you voluntarily provided your email)
Analytics (Vercel)Legitimate interest (understanding usage to improve the service)
Payment processing and tier validationPerformance of a contract (processing your subscription)

7. Data Retention

Data typeRetention period
CV and job description textNot stored — discarded immediately after processing
IP fingerprints (rate limiting)In-memory only — cleared on server restart (typically within hours)
Email address (if provided)Until you request deletion or unsubscribe
Review submissionsUntil you request deletion
Payment and subscription recordsManaged by Lemon Squeezy per their policy
Local storage dataUntil you clear your browser data

8. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

To exercise any of these rights, contact us at joshuapole@live.nl. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

9. Data Security

We take reasonable technical measures to protect your data:

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of data in transit.

10. Children's Privacy

Sollicitatie Coach is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Data Transfers

By using Sollicitatie Coach, your data may be transferred to and processed in the United States (Anthropic, Lemon Squeezy, Vercel, Formspree.io). These transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) as required by GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify users.

13. Contact Us

For any privacy-related questions or to exercise your rights: