← Back to home

Privacy Policy

Last updated: 13 October 2026

Who we are

search4grow.com ("Search4Grow.com", "we") is an AI job search and CV preparation service operated by Maksym Bastion, Germany, who is the controller of your personal data. For any privacy question or request, email privacy@search4grow.com.

What we collect

  • Account data — your email address, a password (stored only as a one-way hash) or the social account you sign in with, and optional settings such as a nickname, phone, country and language.
  • Profile and career data — CVs and documents you upload, work history, skills, languages and other profile details you enter, and the "Professional Profile Draft" (a draft of your career profile that AI agents build from them with your consent, from which you copy confirmed data to your Profile).
  • Job search data — your search criteria, saved searches, favourite vacancies, the CVs and cover letters we generate for you, and your test results.
  • Mailbox data — only if you connect a mailbox for application tracking: the messages related to your job applications.
  • Payment data — your balance, purchases and invoices. Card details are handled by our payment provider; we never receive or store your card number.
  • Technical data — IP address, approximate country (used to pre-fill your region and checkout currency) and security logs of sign-ins and account changes.

Searches you run before registering are not stored.

Sign-in with Google, Facebook, Apple or LinkedIn

If you sign in with a social account, we receive from that provider only your name, email address, profile photo and the provider's account identifier for you — nothing else (for example, no contacts, posts or friends lists). We use this solely to create your account, sign you in, and recognise you when you sign in with several providers, so they all open the same account. If a provider does not share your email address, we ask you to enter one and confirm it with a one-time code.

We never post to your social accounts, and we never sell, share or use this data for advertising. You can see and disconnect linked sign-in accounts in Settings → Linked sign-in accounts, and you can also revoke our access from the provider's own account settings at any time.

Browser extension

If you install our browser extension, it reads the current page only when you click its icon — it does not run automatically, watch your browsing, or read pages in the background. When you use it, we receive only the vacancy on that page: its title, company, description text and link. The extension never sees your passwords or browsing history, and it never acts on your behalf on LinkedIn or any other site. You can see the browsers you've connected and disconnect any of them at any time in Settings → Browser extension; removing the extension from your browser stops it from reading anything at all.

Useful Links public profile

If you turn on the optional Useful Links public profile (off by default), we process the following data to show it to others: your name, main role and the link to your public CV page; optionally your company, city and country, contact details and follower counts, only if you switch them on; and the lists and links you publish, together with who follows you and, if you allow it, your activity (what you publish and save). The purpose is to let you share recommendations and be found and followed by other people. The legal basis is your consent (Art. 6(1)(a) GDPR), recorded when you turn the profile on and again if you turn it off, together with the version of the notice you saw. Published content is visible to anyone on the internet, including search engines, and to other signed-in users who can follow you. We keep this data until you withdraw consent by turning the profile off, which stops the display immediately, or until you delete your account. Saved copies held by other users are kept by them, marked as removed. You can withdraw consent in Settings → Public profile at any time, as easily as you gave it, and you can export or erase your data in Settings → Your data. Withdrawal does not affect processing before it. See also our Terms of Service.

Why we use it (legal basis)

  • Providing the service you signed up for (contract) — your account, job searches, CV preparation, payments and support.
  • Your consent — building and updating your Professional Profile Draft, connecting a mailbox, sending mailbox content to AI models, publishing a Useful Links public profile and the lists and links you choose to share. You can withdraw consent at any time, as easily as you gave it.
  • Legitimate interests — keeping the service secure, preventing fraud and abuse, and fixing errors.
  • Legal obligations — keeping accounting records of payments.

Who processes it for us

We use trusted service providers that process data only on our instructions:

  • Hosting and infrastructure — Render (application servers in Frankfurt, Germany), Neon (database, United States), Upstash (queues and rate limiting), and S3-compatible cloud storage for uploaded files.
  • AI model providers — such as Anthropic, OpenAI and Google — to analyse vacancies and prepare your CVs. We send them only the data needed for the task you requested and do not allow them to train their models on your data where their terms let us opt out.
  • Payment providers — Stripe or Polar.
  • Email delivery — for sign-in codes, password resets and service emails.
  • Job sources — your search criteria (not your name or contact details) are sent to job boards and search APIs to find vacancies.

We do not sell your personal data.

International transfers

Some providers, including our database host, store or process data outside the European Economic Area, mainly in the United States. Where this happens, we rely on the safeguards these providers offer for such transfers, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

We keep your data while your account is active. When you delete your account, we delete your CVs and other documents, profiles, Professional Profile Draft, saved searches, favourites, connected mailboxes and linked sign-in accounts, and remove your email address and sign-in credentials from your account record. Payment records are kept as long as accounting law requires, and security logs for a limited period to protect the service.

Your public page address. When you delete your account, your public page address (search4grow.com/cv/<your-address>) is blocked so that no one else can take it over and show their content under links you shared. To do this we keep a keyed cryptographic hash of the address — not the address itself — for as long as the service exists (legitimate interest: preventing impersonation through links you shared). For 12 months after deletion we also keep a keyed hash of your email address, so that you, and only you, can restore the same address by registering again with that email; after 12 months the email hash is erased automatically. These hashes are pseudonymised data: they can't be turned back into your address or email without our secret key.

Visits to your public CV. To show you which of your links bring visitors (for example the link on your LinkedIn or Facebook profile), we count visits to your public CV page per day and per link. We store only these daily totals — never the visitor's IP address, browser details, cookies or any identifier — and ignore visits from link-preview robots and from you. We also keep which sharing steps you marked as done and the text you last used for a post. All of this is deleted together with your account.

Your rights

You can export your data or delete your account yourself at any time in Settings → Your data — no support ticket needed. You also have the right to access, correct, restrict or object to the processing of your data, and to data portability. To exercise any of these rights, or if you cannot sign in, email privacy@search4grow.com. You can also lodge a complaint with a data protection supervisory authority, for example in the EU country where you live.

Deleting your data

  1. Sign in at search4grow.com.
  2. Open Settings → Your data.
  3. Click "Delete my account" and confirm.

If you can no longer sign in, email privacy@search4grow.com from the address on your account and we will delete it for you.

Security

We use encrypted connections (HTTPS), store passwords only as one-way hashes, encrypt sensitive secrets such as two-factor keys, and restrict administrative access with mandatory two-factor authentication.

Children

The service is intended for adults looking for work and is not directed at children under 16.

Place data

City names and coordinates used for the search radius come from GeoNames, licensed under CC BY 4.0. Place data © GeoNames.

Changes

If we make significant changes to this policy, we will update the date above and let registered users know.