Privacy Policy

1. Who We Are

DevArchitect (“we”, “our”, or “us”) operates the DevArchitect platform — an AI-powered job board for remote tech and freelance developers. We are the data controller for personal data collected through this website.

Questions about this policy: privacy@devarchitect.io

2. Data We Collect

• Email address — provided when you subscribe for job alerts or use the CV Matcher.
• CV content — the text extracted from the CV file you upload. We do not store the original file; only the structured profile data derived from it.
• Derived profile data — skills, experience level, and a career summary extracted by AI from your CV text.
• Job match results — the list of jobs matched to your profile, stored alongside your email to allow us to return your results if you visit again.
• IP address — used solely for abuse prevention and rate limiting. Not linked to your profile for any other purpose.
• Usage data — pages visited, browser type, and referring URL collected via cookies and log files to improve the service.

3. How We Use Your Data

• To extract your professional profile from your CV using AI (OpenAI API).
• To find and return job listings that match your profile using vector similarity search.
• To send you email notifications about new jobs matching your profile, if you subscribed.
• To cache your CV analysis results so returning visitors do not need to re-upload their CV.
• To detect and prevent abuse of our free-tier service.
• To analyse aggregate, anonymised usage patterns to improve the platform.

We do not sell your personal data to third parties, use it for advertising, or share it with employers without your explicit action.

4. Third-Party Services

• OpenAI — your CV text is sent to OpenAI's API to extract a structured profile. OpenAI processes data per their privacy policy. We use their API with data-usage opt-out enabled.
• Supabase — our database and backend provider. Your email, derived profile, and job matches are stored on Supabase infrastructure hosted in the EU.
• Vercel — our hosting provider. Vercel may log request metadata (IP, headers) per their standard infrastructure logging.

5. Data Retention

CV analysis results (profile + job matches) linked to your email are retained indefinitely to support the cached-results feature. You may request deletion at any time (see Section 7).

IP-based rate-limiting logs are automatically purged after 30 days.

If you unsubscribe from job alerts, your email is removed from the mailing list but your CV analysis record may be retained unless you also request full deletion.

6. Cookies

We use the following types of cookies:

• Strictly necessary — required for the platform to function (e.g., session authentication). Cannot be declined.
• Functional — remember your preferences (e.g., cookie consent choice). Enabled only with your consent.
• Analytics — aggregate, anonymised usage data to understand how users interact with the platform. Enabled only with your consent.

You can withdraw cookie consent at any time by clearing your browser's local storage for this site.

7. Your Rights

Under applicable data protection law (including GDPR where applicable), you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request that we limit how we process your data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent you previously gave, at any time.

To exercise any of these rights, email us at privacy@devarchitect.io. We will respond within 30 days.

8. Security

We take reasonable technical measures to protect your data, including encrypted data transmission (HTTPS), row-level security on our database, and access controls limiting who can query personal data. However, no system is completely secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date above. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

DevArchitect — privacy@devarchitect.io