Privacy policy

Last updated: 16 October 2026

AI Job Fit brings together two tools: a Chrome extension that assesses how well your profile matches a job posting and then generates a tailored CV and a cover letter, and Radar, an online service that watches job postings for you. This policy describes what data is processed, where, and why. In short: without an account, your CV stays in your browser, no content is retained on our servers, and the only data collected is anonymous usage statistics. With a Radar account (optional, sections 3 to 5), your CV, your settings and the postings you follow are kept on the Radar server.

1. Data stored locally

• Your professional profile (produced when you import your CV): stored in your browser's local storage (chrome.storage.local).
• Your preferences (language, template, tone, optional photo): the same, local storage only.
• If you link a Radar account, the extension also keeps a copy of your Radar CV and an access token there. Your password is never stored.
• Uninstalling the extension permanently deletes this data.

2. AI processing (transient, no content retained)

• When you request a score, a tailored CV or a letter, the text of the job posting and your profile are sent to our technical relay (Cloudflare Workers), which forwards the request to the OpenAI API to generate the result.
• This relay answers at api.ai-job-fit.com and, as a fallback, at api.pebhub.be: the same service under a second domain name, used when a corporate network filters the first one.
• We neither log nor retain any content (CV, job posting or generated document) on this relay. It passes the request and the response through, without storing them.
• OpenAI processes this data in accordance with its API policy (no training on API data).

3. Radar account (optional)

• Radar is a separate service that tracks job postings for you. The extension works fully without it: nothing below applies unless you have an account.
• What Radar keeps: your email address, your password in a one-way encrypted form, the CV you upload (the PDF file and its structured version), your settings (followed sites, threshold, regions, criteria, email preferences), your decisions on postings, your applications and the documents generated for them.
• Sign in with Google (optional): Radar receives your email address and a Google account identifier from Google, nothing else (no contacts, no calendar, no files). Google recognises an existing Radar account; it never creates one.
• From the extension: signing in uses a code shown in Radar, or your email address and password sent once; Radar returns an access token limited to exchanges with the extension. Once linked, your CV is synchronised with Radar in both directions (a change made in the extension, including an answer to the follow-up questions, is saved there). When you open a job posting, its address is sent to Radar to check whether it already knows it; this lookup is not recorded. When you save a posting to Radar, its title, description, address, employer, location and the displayed score are kept there.
• Where and for how long: on the Radar server, hosted in the European Union (Hostinger, Germany) and reached through Cloudflare, for as long as your account exists. A backup copy is made every night on a server run by the publisher, in the European Union. Radar has postings assessed and documents written by the OpenAI API, under the same terms as in section 2.
• Cookies: a session cookie, required to stay signed in, and a temporary cookie during a sign-in with Google. On this website, clicking “Add to Chrome” sets a cookie for one week that holds only the page language, so the extension installs in that language. No analytics or advertising cookies.
• Disconnecting the extension: from its Options. It erases the token and the CV copy from your browser; your account data stays in Radar until the account is deleted (section 11).

4. Radar emails

• Radar writes to you about your account (invitation, address confirmation, sign-in link) and, if you want, about job postings (alert, Monday summary, application follow-up).
• These emails are sent through Brevo (Sendinblue SAS, France), which receives your address and the content of the message to deliver it.
• Alerts and the summary can be adjusted or switched off in Radar's Settings, and through the unsubscribe link included in each of them.

5. Payment (if you subscribe)

• The Radar subscription is paid through Stripe (Stripe Payments Europe, Ireland). Your payment details are entered at Stripe and are never passed to Radar.
• Radar keeps the customer and subscription identifiers Stripe assigns, the status and dates of your subscription, and the payment notifications Stripe sends it.
• Invoices and payment history are held by Stripe and reachable from Radar's Subscription page. Billing data is kept for as long as accounting law requires.

6. Anonymous usage statistics (can be switched off)

• To improve the product, the extension sends anonymous usage events (e.g. “a CV was generated”, duration, job platform, model used) to PostHog, hosted in the European Union.
• Radar and this website send the same kind of events, through Radar's own server: the screens opened, the steps taken (sign-up, CV uploaded, CV adapted, application) and, on the website, the pages viewed and clicks towards the Chrome Web Store or Radar. A Radar account is represented by a pseudonymous identifier computed from it, never by your email; a visit by a random identifier kept only while the tab is open. Only your country is sent, never your IP address. No cookie is used for this. The publisher's administration page can put your account's email back next to these events, to help you when something goes wrong; the email itself never leaves our server.
• If your browser sends the Global Privacy Control signal, Radar and the website send nothing.
• These events are tied to a random identifier (UUID) generated at install time. It is linked to no real identity: no name, no email, no IP address retained, and never any content from a CV or a job posting.
• You can switch these statistics off at any time (Options → Privacy & feedback), and reset the anonymous identifier in one click. A “Your stats” screen shows exactly what is being counted.

7. Feedback forms

• In the extension, the feedback form forwards your message (and your email, only if you choose to provide it) by email to the publisher, so that we can read your feedback and, where relevant, reply to you. That email is never linked to the anonymous statistics identifier.
• In Radar, the form on the Help and extension page forwards your message with your account address, so that the publisher can reply.
• These messages are never used for commercial purposes.

8. Service providers

Each one receives only what it needs to provide its service:

• Cloudflare: AI relay and secure access to the site and to Radar.
• Hostinger (Germany): hosting of the Radar server.
• OpenAI (United States): assessing postings and writing documents, with no training on this data. The transfer outside the European Union is covered by the European Commission's standard contractual clauses.
• PostHog (European Union): usage statistics of the extension, Radar and the website.
• Brevo (France): sending Radar emails.
• Stripe (Ireland): subscription payment.
• Google: sign in with a Google account, if you choose it.

9. What we don't do

• No selling or sharing of data with third parties beyond the providers above.
• No advertising cookies, no profiling.
• No account required: the extension works without sign-up. The Radar account is optional.

10. Legal bases

• Performance of the service you ask for: score, generated documents, Radar account, alerts and subscription.
• The publisher's legitimate interest: anonymous statistics (can be switched off) and account security.
• Legal obligation: keeping billing data.

11. Your rights (GDPR)

You have a right of access, rectification, erasure, portability and objection. Data stored locally is under your direct control (edit it in the Options, delete it by uninstalling). Your Radar CV and settings are edited in Radar. In Radar’s settings, “My account” lets you download your data (profile, settings, applications) and delete your account: your CV, applications, tailored CVs and settings are then erased; only billing data is kept, as the law requires, and backups drop it as they are renewed. For any other request: [email protected]. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

12. Contact

Data controller: Nicolas Breels, [email protected]

This page is an English translation of the French version, which prevails in the event of any discrepancy.