Legal
Legal information and policies for Joblyst.
Impressum
Joblyst is an independent job board that aggregates publicly available job listings from Berlin-based tech companies via their ATS APIs.
For company removal requests or any legal inquiries, please contact us at the email above.
Privacy Policy
Last updated: September 2026. This policy explains what personal data Joblyst collects, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is Paulo Teixeira, operating Joblyst at hello@joblyst.tech. For any data-related request, contact us at that address.
2. What We Collect and Why
Unauthenticated visitors
We collect no personal data from visitors who do not sign in. Analytics data (page views, referrers) is collected only with your consent — see the Cookie Policy section below.
Authenticated users
When you create an account and build a profile, we store:
- Email address (used to send magic-link sign-ins and daily/weekly digest emails)
- Candidate profile: role category, subcategories, seniority level, skills, work preferences (remote, English-only, salary floor)
- Followed companies and notification preferences
- MCP API key (if you generate one for AI integrations)
- Activity timestamps: when you last viewed matches, when you last received a digest
CV upload (optional)
If you upload a CV, the file content is sent to Google Gemini to extract your profile (role, skills, seniority). The file itself is not stored — only the extracted structured data is saved to your profile.
3. Legal Basis
- Contract performance (Art. 6(1)(b) GDPR) — processing your profile and digest emails to provide the personalised job matching service you signed up for.
- Legitimate interest (Art. 6(1)(f) GDPR) — aggregating publicly available job listings from company career pages.
- Consent (Art. 6(1)(a) GDPR) — analytics cookies and feedback widget, loaded only after you accept.
4. Third-Party Processors (Sub-processors)
We share data with the following processors under data processing agreements:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase | Database & authentication | All user data | EU (Frankfurt) |
| Resend | Transactional email (magic links, digests) | Email address + job match data | US (SCCs) |
| Google (Gemini) | CV content extraction | CV file content (not stored by Google) | US (SCCs) |
| Vercel | Hosting + analytics (on consent) | IP address, page views | US (SCCs) |
| Umami Cloud | Anonymous web analytics (on consent) | Page views, referrers (no PII) | EU |
| Userback | User feedback widget (on consent) | Feedback text, session info | AU (SCCs) |
| Anthropic | AI development tooling used to build and maintain the service | Aggregate and pseudonymised profile data | US (SCCs) |
SCCs = Standard Contractual Clauses approved by the European Commission for transfers outside the EEA.
5. Data Retention
- User profiles and follows: retained until you delete your account.
- Pipeline and health logs: retained for 90 days, then deleted automatically.
- Digest email history: retained for 30 days.
6. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of all data we hold about you.
- Rectification — correct inaccurate data via your Account page.
- Erasure — delete your account and all associated data via the "Delete account" button on your Account page.
- Portability — request a copy of all data we hold about you by emailing us.
- Objection — object to processing based on legitimate interest by emailing us.
- Withdraw consent — change your cookie preferences at any time via the "Cookie preferences" link in the footer.
To exercise any right, contact us at hello@joblyst.tech. You also have the right to lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Cookie Policy
We use cookies and similar technologies as described below. You can change your preferences at any time by clicking "Cookie preferences" in the footer.
Essential cookies
These are required for the site to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| sidebar:state | Remembers sidebar open/closed preference | 7 days |
| joblyst_cookie_consent | Stores your cookie consent choice | 12 months |
| sb-* (Supabase) | Authentication session management | Session / 7 days |
Analytics cookies (consent required)
These are loaded only after you accept. They help us understand how the site is used. No personally identifiable information is collected.
| Service | Purpose | Duration |
|---|---|---|
| Umami Cloud | Anonymous page view analytics | 12 months |
| Vercel Analytics | Page performance and visit tracking | Session |
| Vercel Speed Insights | Core Web Vitals performance measurement | Session |
| Userback | User feedback and session replay | Session |
Terms of Use
By using Joblyst, you agree to these terms:
- Job listings are provided for informational purposes only and are sourced from public ATS APIs.
- We are not responsible for the accuracy, completeness, or availability of job listings.
- Applications are handled directly by the hiring companies — Joblyst is not a party to any employment relationship.
- We reserve the right to add or remove companies and job listings at any time.
- You may not use Joblyst to scrape, harvest, or systematically collect job data for commercial redistribution without our written consent.
Questions? Email us at hello@joblyst.tech.