Privacy Policy
Effective date: June 7, 2026 ยท Last updated: October 14, 2026
1. Introduction
Welcome to Jobsy.
Jobsy is operated by EasyLinks Oy ("Jobsy", "we", "our", or "us"), a company registered in Finland.
Company Information
EasyLinks Oy
Business ID: 3382448-7
Norkkokatu 6, 48770 Kotka, Finland
Email: info@easylinks.fi
We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Finnish laws.
This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data.
2. Data We Collect
When you use Jobsy, we may collect and process the following information:
Account Information
- First name
- Last name
- Email address
- Sign-in information: when you sign in with Google we receive your name, email address and profile picture.
CV and Professional Information
- Uploaded CV (PDF format)
- Work experience
- Education details
- Skills and qualifications
- Information contained within your uploaded documents, which may include contact details such as a phone number or address
Email Connection Information
When you choose to connect your email account (for example Gmail or Outlook, using an app password):
- Email address
- App password for that email account (stored in encrypted form)
Jobsy does not access, read, monitor, or analyze your email inbox.
AI-Generated Content
We may store:
- AI-generated outreach emails
- AI-generated application materials
- AI-generated recommendations and analyses
Assistant Conversations
Messages you exchange with the Jobsy assistant and the notes it keeps to personalize its help.
Referral Program
Your invitation code, the accounts that joined through it and the related reward records.
Blog Comments
Comments you publish are public together with your display name.
Payment Information
Payments are processed by Stripe.
Jobsy does not collect or store credit card or payment card details.
3. How We Use Your Information
We process your personal data to:
- Create and manage your account
- Analyze your CV
- Generate personalized outreach emails
- Help you contact potential employers
- Send emails on your behalf through your connected email account
- Improve platform functionality
- Provide customer support
- Comply with legal obligations
4. AI Processing
Jobsy uses artificial intelligence technologies provided by third-party AI service providers.
Information submitted for AI processing may include:
- CV content
- Professional experience
- Skills and qualifications
- Application-related content
Your data is not used to train AI models.
AI-generated content may contain inaccuracies and should be reviewed by users before use.
5. Email Integration
Jobsy allows users to connect their email accounts (for example Gmail or Outlook) using app passwords.
The email integration is used solely for sending emails on behalf of users.
Jobsy:
- Does not access inbox contents
- Does not read emails
- Does not monitor conversations
- Does not access attachments
- Does not track employer responses
App passwords are stored in encrypted form and are deleted when the email connection is removed.
6. Legal Basis for Processing
We process personal data under one or more of the following legal bases:
Contract Performance
To provide Jobsy services requested by users.
Consent
Where you explicitly provide consent for specific processing activities, such as analytics and advertising cookies.
Legitimate Interests
To improve service quality, security, and platform functionality.
Legal Obligations
Where required by applicable law.
7. Company Information Database
Jobsy maintains a database of companies and business contact information obtained from publicly available and official sources.
This information is used solely to facilitate communication between users and potential employers.
Companies may request correction or removal of information by contacting:
8. Data Sharing
We do not sell personal data.
We may share data only with:
Service Providers
Including:
- AI and language-processing providers
- Stripe
- Hosting and infrastructure providers
- Analytics and advertising providers (Google), only with your consent
Legal Authorities
When required by law or legal process.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with GDPR requirements.
10. Data Retention
We retain personal data only for as long as necessary.
Typical retention periods include:
| Data Type | Retention Period |
|---|---|
| User account | Until account deletion |
| CV files | Until account deletion |
| AI-generated content | Until account deletion |
| Email credentials | Until the email connection is removed |
| Email delivery logs | Up to 30 days |
| Backup data | Up to 90 days |
| Legal records | As required by law |
11. Cookies and Similar Technologies
We use a small number of cookies and similar browser storage. They fall into three groups:
- Necessary. Keep you signed in, remember your language, remember who invited you until you sign up, and remember your cookie choice. These are always on because the site cannot work without them. They stay until you sign out or clear your browser data; your cookie choice is kept for 12 months.
- Analytics (Google Analytics). Help us understand how many people visit and which pages they use. Kept for up to 2 years.
- Advertising (Google Ads). Let us measure whether sign-ups and purchases come from our ads. Kept for up to 90 days.
Analytics and advertising cookies are set only after you choose Accept all. Until then, Google receives no identifiers stored on your device.
Stripe sets its own cookies on its payment page to prevent fraud. You can change your choice at any time:
Cookie settings12. Your GDPR Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
To exercise your rights, contact:
We aim to respond within 30 days.
13. Account Deletion
Users may request account deletion by contacting:
Upon verified deletion requests, Jobsy will remove personal information unless retention is required by law.
14. Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Encrypted credential storage
- Secure HTTPS connections
- Access controls
- Monitoring and security logging where appropriate
However, no system can guarantee absolute security.
15. Children's Privacy
Jobsy is not intended for individuals under the age of 18.
We do not knowingly collect personal information from children.
16. Changes to this Policy
We may update this Privacy Policy from time to time.
Material changes will be communicated through the platform or website.
17. Contact
For privacy-related questions, GDPR requests, or account deletion requests:
EasyLinks Oy
Norkkokatu 6, 48770 Kotka, Finland
info@easylinks.fi