Last updated: 7 November 2026

Privacy

The short version: your career data is yours. We do not sell it, we do not sell access to it, and you can export or delete it at any time.

What we collect

What	Why
Email address	To sign you in with a one-time code and to send the brief you asked for.
CV text you paste	To extract your skills, seniority and experience so opportunities can be scored against you.
Your current pay and target	To calculate the gap between your pay and the live market. This is optional and never shown to anyone else.
Opportunities you save, apply to and report on	To track your pipeline and to improve our probability estimates.
Usage events	To know which screens work and which do not.

We do not collect national ID numbers, health data, ethnicity, religion or biometric data. We do not ask for your address.

What we do not do

We do not sell your data. Not to employers, not to recruiters, not to anyone.
We do not share your CV or salary with employers or recruiters.
We do not let a referral partner influence what you see or how it is ranked. That constraint is enforced in code, not just in policy.
We do not train third-party models on your CV without your explicit consent.

Benchmarks and aggregation

Salary benchmarks are computed from postings that disclose pay, and — with your consent — from outcomes you report. Published benchmarks are only shown when at least 25 comparable records exist. Below that threshold the segment is hidden rather than shown with false precision. Aggregated figures never identify an individual.

Who processes data for us

Stripe — payments. Card details never touch our servers.
Our email provider — delivery of the brief and signup sequence.
Our hosting provider — where the application runs.

Each is bound by a data processing agreement. A current sub-processor list is available on request.

Your rights

Under the GDPR you can:

See everything we hold about you.
Export it in a machine-readable format.
Correct it — most of it you can edit directly.
Delete it. Deletion removes your profile, your CV, your applications and your outcomes within 30 days.
Object to any processing and withdraw consent at any time.

Email us and we will action it. You also have the right to complain to your local data protection authority.

Cookies and storage

We use one essential cookie to keep you signed in, and local browser storage for your theme preference and whether you have seen the first-run tour. No advertising cookies, no third-party tracking pixels.

Retention

Your account data is kept while your account exists. Raw CV files are parsed and then discarded unless you keep them. Usage events are kept for 24 months. Server logs are kept for 30 days.

AI processing

Some features send parts of your profile to a language model to generate text — cover letters, explanations, interview questions. Where that happens you are told, and you can turn AI features off. Our providers are contractually barred from training on your data.

A note on honesty. The number we show you about your pay is the whole product. If we were ever wrong about it, telling you is more important than protecting our reputation. Write to us and we will look at it.

Who we are

ZyraFlow GmbH™ operates ThinkZet and is the data controller for your personal data.

Contact

Privacy questions: [email protected]