Privacy

Last updated: 2026-05-21

The short version

We built jobs.onlyai.ch because we wanted a senior career-search agent for ourselves. We treat your data the way we'd want our own treated.

• No human at jobs.onlyai.ch ever reads your CV. Your CV is scored and tailored by an LLM (Claude, from Anthropic) on the API. We don't have a database of your CV that our team browses, and we don't share your CV with anyone else.
• Everything is encrypted. Connections to the site use TLS (HTTPS). The database holding your account is on our own server in Europe and is encrypted at rest. Your uploaded files live in a per-user directory on the same server — nobody else's account can read your files even if they were inside the application.
• You can delete your account at any time. One click in Settings → Delete account and we wipe your profile, your CV, every tailored document generated for you, and every row in our database that identifies you.
• We don't sell your data. Ever. We're not ad-supported and we have no incentive to. If we ever change our business model in a way that would change this, we'll tell you by email before doing anything.

What we collect, and why

Account

When you sign up we record your email address, your name (if you share it via OAuth), and the auth provider you used (Google, LinkedIn, or magic link). We use this to sign you in and to send you your daily digest.

Profile

The profile fields you fill in on /onboarding — seniority, target functions, target cities, work mode, comp floor, dealbreakers, languages. We use these to filter and score job postings against your fit. Nothing here leaves our server except as input to the LLM (see below).

Files you upload

Your CV (.pdf or .docx), optional reference letters, and any knowledge files (e.g. interview notes, target-company research) you choose to add. We use the CV to tailor outputs and to score match quality. We don't index your files for search and we don't copy them off the server.

What the agent saw and decided

For every job posting the agent evaluates we store the canonical fields (title, company, location, URL, posting date) and the score + recommendation we computed. We persist the LLM's "why this matches" reasoning so you can see it on the dashboard.

Logs

Web server logs and an audit log of security-sensitive events (sign-in attempts, password changes, account deletion). These rotate after 30 days. We don't log your CV content.

Who else sees this data

Anthropic (the Claude API)

To score and tailor postings we send your CV, profile, and the job description to Anthropic's Claude API. By Anthropic's commercial terms, Anthropic does not train models on data sent through the API. API content is retained for up to 30 days by Anthropic for operational and abuse-prevention purposes only. No human at Anthropic reads it as a matter of routine.

Source-of-truth job boards

The agent fetches job postings from sources you configure (or the defaults — jobs.ch, Workday tenants, Greenhouse, Lever, Ashby, Amazon Jobs, etc.). We do not send your profile or CV to these sources — we just pull their public job listings.

Email delivery (IONOS)

The daily digest is delivered via IONOS SMTP servers in Germany. The email body contains the job matches and links back into the app for your tailored CV. Standard mail infrastructure rules apply (TLS in transit, DMARC alignment).

Identity providers (Google, LinkedIn)

If you sign in via Google or LinkedIn OAuth, those providers see that you signed into jobs.onlyai.ch. We receive your email and name from them; we do not receive your password.

Hosting + CDN (Cloudflare, our VPS)

TLS termination is handled by our VPS provider in Europe. Cloudflare DNS sits in front of the apex domain. Neither sees decrypted application data.

How long we keep your data

Active accounts: indefinitely, while your account exists. Deleted accounts: removed within 24 hours of you clicking the delete button — that includes your profile, files, generated documents, and all rows in our database that identify you. Server backups expire within 30 days, after which your data is gone from those too.

Cookies

We use one cookie: jobs_session. It's an HttpOnly, Secure, SameSite=Lax JWT that keeps you signed in. There are no analytics cookies and no third-party tracking on jobs.onlyai.ch.

Your rights (FADP / GDPR-equivalent)

Switzerland's revised Federal Act on Data Protection (revFADP) gives you the same core rights GDPR does. You can:

• See what we hold on you — most of it is visible inside the app (profile, files, dashboard). Email us for anything else.
• Correct anything that's wrong, either in-app or by email.
• Delete your account at any time — Settings → Delete account.
• Object to specific uses of your data — just email us.
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Children

jobs.onlyai.ch is built for senior professionals. You must be 18 or older to use it.

Security incidents

If we ever experience a data breach that affects your account, we'll tell you by email within 72 hours, with what happened, what data was affected, and what you should do.

Changes to this policy

If we change anything material we'll email registered users before the change takes effect. We'll always keep older versions accessible by request.

Contact

Email jobs@onlyai.ch for anything privacy-related: data requests, deletion follow-ups, objections, questions.