Privacy policy

1. Controller and contact

The controller under the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR) is: Rafael Rodrigues, Hamelirainstrasse 3, 8302 Kloten, Switzerland. Email: ror@digisustainability.io.

2. Data we process, by feature

• Account: email address, name, and the data sent by Google or Apple if you sign in with them (name, email, account identifier).
• CVs: the uploaded file (PDF, Word or text) in private storage, and the text extracted from it.
• Job ads: the role, company name and job description you enter, plus the company research and interview guide generated from them.
• Mock interviews: questions, your answer transcripts, speech metrics (speaking rate, filler words), scores and AI feedback.
• Reference letters (Arbeitszeugnis): the analysis result. The uploaded file itself is not stored.
• RAV job-search records: the applications you enter, which may include names, email addresses and phone numbers of contact persons at employers.
• Interview credits and promo codes: your remaining balance and which codes you redeemed.
• Buy Me a Coffee: if you support us, the donor email address sent by Buy Me a Coffee, used to reset your balance.
• Technical logs: IP address, browser and error information, kept briefly by our hosting providers for security and operation.
• Essential local storage in your browser: your sign-in session token, your language choice and interface state.

Page statistics: our hosting provider Lovable records which pages are viewed and for how long, linked to a random session ID. This does not include your name, email address or anything you enter. We use it only to see how the site is used. We do not use advertising or cross-site tracking tools.

3. Audio and video

• Video from your camera stays in your browser. It is never uploaded. An optional local recording is held in memory and discarded when the interview ends.
• Audio of your answers is sent only to transcribe it to text. The audio is not stored.
• Only the text transcript (and speech metrics derived from it) is saved to your account.

4. Purposes

We process your data only to prepare you for job interviews, give feedback, review reference letters and help you document your job search for the RAV. Legal bases: performance of our service at your request, your consent, and our legitimate interest in operating a secure service.

Your data is not sold, not shared with employers and not used to train AI models.

5. Automated scoring

Interview scores, CV ratings and feedback are generated automatically by AI. They are for practice only and have no legal or employment consequences. No decision about you is made on that basis.

6. Recipients and countries

• Lovable Cloud – database and file storage (Germany, EU).
• Lovable AI Gateway – routes AI requests to the model providers below.
• Lovable – page statistics (pages viewed, time on page).
• OpenAI (USA) – text analysis: CV, job ad, answers, reference letter text.
• Google (USA) – speech-to-text and text-to-speech.
• Cloudflare – edge hosting of the website (global network).
• Lovable email service (USA) – sign-in and account emails.
• Buy Me a Coffee (USA) – payment processing for coffee support.
• Google and Apple (USA) – only if you choose to sign in with them.
• Wikipedia and Google News – receive only the company name for research.

7. Transfers abroad

Some recipients are located in the USA or other countries. Transfers take place on the basis of the Swiss-US and EU-US Data Privacy Framework where the provider is certified, and otherwise on the basis of Standard Contractual Clauses approved by the European Commission and recognised by the FDPIC.

8. Retention and deletion

• Your data is kept until you delete it or your account.
• Once a month we check for inactive accounts. Accounts inactive for 24 months are deleted automatically. We email you a warning at 21 months, and never delete an account sooner than 30 days after that warning.
• Buy Me a Coffee payment records are kept as long as required for accounting.

9. Your rights

You can request access, correction, deletion and a copy of your data (data portability), and object to processing. You can download your data and delete your account at any time on the “Privacy & data” page, or write to ror@digisustainability.io.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or with a supervisory authority in your EU country.

10. Cookies and local storage

We use these essential browser storage items: the sign-in session token, the language setting and interface state. Our hosting provider also sets two technical cookies: a deployment cookie (__dpl) and a session cookie (session-id). No advertising or cross-site tracking cookies are used.