Privacy Policy
Last updated: April 22, 2026
1. Introduction
VibeOffer ("we", "our", or "us") operates the VibeOffer web application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service. By using VibeOffer, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1. Account Information
When you register, we collect your email address, full name, and password (securely hashed). You may also provide an optional profile photo.
2.2. Profile Data
To provide AI-powered job matching and scoring, we collect information you voluntarily provide: desired role, skills, years of experience, work mode preferences, salary expectations, location, bio, and professional links (LinkedIn, GitHub, portfolio, etc.).
2.3. Documents
You may upload resumes, CVs, cover letters, and other professional documents. These files are stored securely in Supabase Storage and are only accessible to you and our AI processing systems.
2.4. Job & Application Data
We store job listings fetched from third-party sources, your application history, interview pipeline stages, follow-up reminders, cover letters, and AI-generated analysis results.
2.5. Usage & Technical Data
We collect minimal technical information required for authentication and service operation: session tokens, locale preferences, and onboarding state. We do not use third-party analytics trackers.
3. How We Use Your Information
- AI Job Matching & Scoring: Your profile, skills, and preferences are sent to our AI provider to calculate job match scores (0-100).
- Cover Letter Generation: Your profile and uploaded documents are used as context when generating AI cover letters.
- Resume Analysis: Uploaded CVs are analyzed by AI to provide improvement recommendations and ATS compatibility scores.
- Interview Preparation: Your job and application data is used to generate interview practice questions and HR competence analysis.
- Notifications: If configured, we use your Telegram bot token and chat ID to send job notifications.
4. Third-Party Services
We use the following third-party services to operate VibeOffer:
- Supabase: Authentication, database, and file storage. Your data is stored in Supabase-managed infrastructure with Row Level Security (RLS) policies ensuring data isolation between users. Supabase Privacy Policy
- OpenRouter (AI Processing): Profile data, job descriptions, and document content are sent to AI models via OpenRouter for scoring, analysis, and content generation. Data is sent only when you explicitly trigger an AI feature. OpenRouter Privacy Policy
- Vercel: Application hosting and serverless functions. Vercel Privacy Policy
5. Job Data from Third Parties
VibeOffer aggregates job listings from 28 third-party sources including Djinni, DOU, Work.ua, Robota.ua, Telegram channels, Jooble, Adzuna, and others. We do not own, verify, or guarantee the accuracy of this data. Job listings are fetched from publicly available RSS feeds, APIs, and web pages. We are not responsible for the content, accuracy, or availability of third-party job postings.
6. Cookies & Local Storage
We use minimal cookies and local storage for essential functionality only. For detailed information, please see our Cookie Policy.
7. Data Retention
Your account data, profile, documents, and application history are retained for as long as your account is active. If you delete your account, we will delete all your personal data, uploaded documents, and application history within 30 days. Aggregated, anonymized statistics may be retained indefinitely.
8. Your Rights (GDPR-aligned)
Regardless of your location, we extend the following rights to all users:
- Right of Access: You can view and export all your data from within the application at any time.
- Right to Rectification: You can update your profile, documents, and other personal data through the application interface.
- Right to Erasure: You may request complete deletion of your account and all associated data by contacting us.
- Right to Data Portability: Your profile data, documents, and application history can be exported.
- Right to Object: You can opt out of AI processing by simply not using AI features. No data is sent to AI providers unless you explicitly trigger an action.
9. Data Security
We implement industry-standard security measures including: HTTPS encryption for all data in transit, Supabase Row Level Security (RLS) policies for data isolation, secure password hashing via Supabase Auth, JWT-scoped database access ensuring users can only access their own data, and secure file storage with access-controlled URLs.
10. Children's Privacy
VibeOffer is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Email: dmitriyroi@symphonyagency.io
