Privacy Policy

jobbjobb.no is committed to protecting your privacy. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).

The data controller for personal data processed in the service is:

Agens AS
Trondheimsveien 184, 0570 Oslo, Norway
Org. no. 988 669 695
Email: personvern@jobbjobb.no

We collect personal data when you create an account and use the service. This includes:

• Account information: Name and email address, registered via our self-hosted authentication service.
• CV data: Name, email, phone number, address, date of birth, education, work experience, skills, LinkedIn profile link, and personal website.
• Job search data: Applications, application texts (including version history), job preferences, saved job listings, and match analyses.
• User preferences: Words and phrases you choose to avoid or prefer, example texts you provide, notification settings, and theme preferences.
• Technical data: AI usage history (operation type, token consumption) and API keys (stored as cryptographic hashes, never in plaintext).

We process your personal data for the following purposes:

• Service delivery (GDPR Art. 6(1)(b) – contract): Create and manage your account, generate applications, score positions against your CV, analyze and improve application texts, and send deadline reminders.
• Customization of AI results (GDPR Art. 6(1)(b) – contract): Store words and phrases you choose to avoid or prefer, as well as example texts you provide, to customize AI-generated content to your writing style.
• Security and operations (GDPR Art. 6(1)(f) – legitimate interest): Error logging, service monitoring, and abuse prevention.

jobbjobb.no uses AI models from OpenAI to deliver core functionality. The following data may be sent to OpenAI for processing:

• CV content for parsing and analysis
• Application text and job listings for generation and scoring
• Text for linguistic improvement

Data sent to OpenAI is processed in accordance with our data processing agreement with OpenAI, and is not used to train their models. See OpenAI's privacy policy for more information.

We use the following sub-processors to deliver the service. Data processing agreements have been entered into with all sub-processors.

For transfers to countries outside the EEA (USA), we rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses (SCCs).

Your personal data is stored as long as you have an active account with us. When you delete your account, all your personal data is permanently deleted, including CV, applications, and preferences.

Operational logs that may contain technical information are retained for up to 30 days before being automatically deleted.

We have implemented technical and organizational measures to protect your personal data:

• All communication is encrypted with TLS (HTTPS) in transit
• API keys are stored as cryptographic hashes (SHA-256), never in plaintext
• Authentication and authorization via OIDC with JWT tokens
• Data isolation – users only have access to their own data
• Regular monitoring and logging to detect unauthorized access

In the event of a security breach that may pose a risk to your rights, we will notify the Norwegian Data Protection Authority within 72 hours in accordance with GDPR Art. 33, and you as the affected person without undue delay in accordance with Art. 34.

jobbjobb.no only uses necessary cookies for authentication and session management. We do not use tracking or marketing cookies.

We do not use any third-party analytics or tracking services.

You have the following rights under GDPR:

• Access (Art. 15): You may request a copy of all personal data we hold about you.
• Rectification (Art. 16): You may update or correct your data directly in the service.
• Erasure (Art. 17): You may delete your account and all associated data from the settings.
• Data portability (Art. 20): You may export all your data in a machine-readable format (JSON).
• Objection (Art. 21): You may object to processing based on legitimate interest.
• Restriction (Art. 18): You may request that we restrict the processing of your data.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at personvern@jobbjobb.no. We will respond within 30 days.

If you believe that we are not processing your personal data in accordance with GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet (Norwegian Data Protection Authority)
www.datatilsynet.no
Phone: +47 22 39 69 00

We may update this privacy policy as needed. For significant changes, we will notify you via email or in the service. The current version will always be available on this page.