EN | IT

Privacy Policy

Last updated: March 10, 2026

Data controller

The data controller for this service is Giorgio Silvi (support@groundkg.com).

What we collect

  • Account info — your name and email address
  • Job preferences — target roles, location, remote preference, languages, salary expectations, company preferences, and any additional notes you provide
  • CV / Resume — if you choose to upload one (optional)
  • Feedback — your email replies about job matches we send you
  • Visit counts — we count daily unique visitors to our landing page using aggregated IP addresses. These counts are not linked to your account and are used solely to understand overall traffic
  • Interest record — when you sign up or join the waitlist, we log your email address and the action (signup/waitlist) to understand demand. This record is deleted when your account data is erased
  • Payment data — if you subscribe to a paid plan, your billing name, address, and payment method are collected by our payment processor (Stripe). We do not store your card details on our servers

How we use it

Your data is used solely to run your personalized job search agent. Specifically:

  • Your preferences and CV are used to build an AI profile that searches for and evaluates job matches
  • Your email address is used to send you weekday job match notifications
  • Your feedback (replies to our emails) is used to refine future job recommendations

We do not sell, rent, or share your personal data with advertisers or third parties for their own purposes.

Third-party processors

To provide the service, your data is processed by:

  • Anthropic (Claude AI) — your CV content, job preferences, and feedback are sent to Anthropic's API to search for and evaluate job matches. Data is processed under Anthropic's Privacy Policy and covered by Standard Contractual Clauses (SCCs) for EU-US data transfers.
  • Google (Gmail SMTP) — used to send you email notifications. Subject to Google's Privacy Policy.
  • Stripe Payments Europe, Limited (Ireland) — processes payments for paid subscriptions. Stripe receives your billing name, address, and card details. Data is processed under Stripe's Privacy Policy. We have a Data Processing Agreement (DPA) with Stripe as required by Art. 28 GDPR.
  • Hetzner Online GmbH (Germany) — provides the server infrastructure where your data is stored. All data remains within the EU. We have an Auftragsverarbeitungsvertrag (AVV) with Hetzner as required by Art. 28 GDPR.
  • Job boards (LinkedIn, Indeed, Glassdoor, etc.) — publicly available job listings are searched on your behalf. No personal data is shared with these platforms.

Data storage & security

  • Your data is stored on a secured server hosted by Hetzner (Germany/EU)
  • Access is restricted to SSH key authentication only
  • Uploaded CVs are stored on the server filesystem, not in any public-facing database
  • The server is protected by a firewall, fail2ban, and automatic security updates

Data retention

  • Active accounts — your data is kept as long as your account is active
  • After unsubscribing — your account is deactivated immediately. All personal data (profile, CV, logs, preferences) is deleted within 14 days
  • Waitlist emails — kept until you are notified of an available spot or you request removal
  • Verification tokens — automatically expire and are deleted after 24 hours
  • Waitlist promotion tokens — when a spot opens up, you receive a 72-hour link to claim it. Expired tokens are automatically deleted
  • Email delivery logs — we log the timestamp, recipient, and subject of emails we send for delivery verification. These logs are kept for operational monitoring only
  • Billing records — invoices and payment records are retained for 10 years as required by German tax law (§14b UStG, §147 AO)

Your rights

Under GDPR and applicable privacy laws, you have the right to:

  • Access — request a copy of all data we hold about you. You can also download your data directly from your dashboard
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data at any time
  • Portability — receive your data in a machine-readable format. Use the "Export my data" button in your dashboard preferences to download a JSON file
  • Withdraw consent — unsubscribe at any time via the link in every email we send
  • Object — you have the right to object to processing based on legitimate interest (Art. 21 GDPR). We will stop processing unless we can demonstrate compelling legitimate grounds
  • Complaint — lodge a complaint with your local data protection authority if you believe your data is being mishandled

To exercise any of these rights, email support@groundkg.com.

The competent supervisory authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

Legal basis

We process your personal data on the following legal bases (Art. 6 GDPR):

  • Contract performance — Art. 6(1)(b) — processing your profile, job preferences, and CV to run the job search service you signed up for; sending you job match notifications; processing payments for paid subscriptions
  • Consent — Art. 6(1)(a) — uploading your CV (optional); receiving marketing communications. You may withdraw consent at any time by unsubscribing via the link in any email
  • Legitimate interest — Art. 6(1)(f) — fraud prevention; service security and monitoring; aggregated visit statistics to understand traffic
  • Legal obligation — Art. 6(1)(c) — retaining invoices and billing records for 10 years as required by German tax law (§14b UStG, §147 AO)

Automated decision-making

Our service uses AI (Claude by Anthropic) to score job listings against your profile on a scale of 1-10. Only jobs scoring 7 or above are sent to you. This automated scoring is the core function of the service you signed up for. You have the right to request human review of any automated decision by contacting us at the email below.

International data transfers

Your data is stored on a server in Germany (EU). To provide the service, some data is transferred to processors in the United States:

  • Anthropic (San Francisco, USA) — receives your CV content, preferences, and feedback for AI processing. Covered by Standard Contractual Clauses (SCCs).
  • Google (USA) — Gmail SMTP is used to send email notifications. Only your email address and notification content are transmitted. Covered by SCCs.
  • Stripe — payment processing is handled by Stripe Payments Europe, Limited (Ireland). Your billing data stays within the EU. Stripe may transfer limited data to Stripe, Inc. (USA) under SCCs.

Cookies

We use two cookies: a session cookie (required for signup and dashboard login) and a language preference cookie (365 days, stores your chosen language: English or Italian). Both are strictly necessary for the service to function. We do not use tracking cookies, analytics, or third-party scripts.

Changes to this policy

We may update this policy as the service evolves. Significant changes will be communicated via email to active users.

Contact

For any privacy-related questions or requests, contact:
Giorgio Silvi — support@groundkg.com