Your data and your rights

To assess how well a resume matches a job description, so that a recruiter can prepare their interviews. No decision is made automatically: the score is a support tool, the decision stays human.

The recruiter's legitimate interest in assessing the applications they receive (art. 6.1.f GDPR). You may object at any time.

• the resume you sent to a recruiter, as they uploaded it
• the text extracted from it
• the analyses produced from that text (scores, summary, improvement areas)
• where applicable, the notes written by the recruiter

A single technical provider, an artificial-intelligence service provider established outside the European Union, acting as a processor under article 28 GDPR. The text extracted from your resume and from the job description is sent to them for as long as it takes to produce the analysis. This transfer outside the European Union is covered by the European Commission's standard contractual clauses, a copy of which is available on request. That provider is contractually bound not to use this content to train its models and not to retain it beyond the processing of the request. Its identity is disclosed on request to the contact given above. No other recipient.

Encrypted connection (HTTPS), files stored outside the web root under random names with restricted permissions, per-account isolation, and access logging.

The operator measures site traffic: for each page displayed, the date, IP address, browser and page viewed are kept. No advertising cookie, no third-party tracker, and no tracking from one visit to the next: the identifier tying together the pages of a single visit disappears when the tab is closed. Country and city are derived from the IP address by the ip-api.com service, which receives that address and nothing else.

After 24 months, your resume and all related analyses are permanently deleted.

The access log is kept for 365 days.

Write to contact@skillmatchlab.com, stating your name as it appears on your resume. You will get an answer within one month. You may also lodge a complaint with your national data protection authority.