Privacy Policy

Last updated: July 21, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, processing, storage, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide, maintain, and improve the Service, including facilitating AI-driven job evaluations, match explanations, cover letter generation, and translation features. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.

• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

• Application refers to OptiMatch, the software program provided by the Company.

• Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to OptiMatch.

• Country refers to: Ukraine.

• Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.

• Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual.

• Service refers to the Application.

• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

• Subscriptions refers to paid access to premium features or services offered within the Application on a recurring billing cycle.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, session duration, diagnostic logs, and error tracking).

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact, identify, or provide Services to You. Personally identifiable information includes, but is not limited to:

• Email address
• First name and last name
• Professional experience, skills, and employment preferences
• Portfolio links and professional links

Job Posting and Candidate Profile Data

To provide job matching and evaluation features, We collect and process information regarding freelance job listings (including job titles, descriptions, and required skills) sourced from third-party freelance platforms, as well as candidate profile data provided by You.

Usage and Diagnostic Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, device model, operating system version, unique device identifiers, crash logs, and other diagnostic data.

Third-Party Services and Data Processing Architecture

We utilize trusted third-party Service Providers to host, secure, process, and optimize Your data and the Application functions. By using our Service, You acknowledge that Your data may be processed by the following providers in accordance with their respective privacy policies:

1. Data Storage and Database Hosting

• Supabase: We use Supabase as our cloud database provider. Personal information such as Your name, professional experience, and portfolio links are stored in Supabase in encrypted form (both at rest and in transit).
• Render: Our backend server infrastructure and application logic are hosted on Render cloud platform.

2. AI-Powered Processing and Data Anonymization

• Groq:Prior to sending user profile information to primary AI evaluation models, We process user data through Groq for the purpose of data anonymization (removing direct personal identifiers). Groq is also utilized as a secondary/fallback engine for job evaluations and cover letter generation in case of API rate limits, downtime, or service failures on primary AI models, and for translating cover letters into different languages.
• Google Gemini AI: We transmit anonymized user profiles, along with job listing information (titles, descriptions, required skills), to Google Gemini to perform job evaluation, match scoring, and to generate personalized cover letters.
• Microsoft Azure Translator: We use Microsoft Azure to translate AI-generated output fields, including reason (explanations of why a job matches a user), aiDescription (concise job summaries), and aiRecomendation (tailored advice for applying to job postings).

3. Authentication, Monetization, and Application Performance

• Google Authentication: We use Google Sign-In services to authenticate users and enable secure account creation and login.
• Google AdMob: We use Google AdMob to display advertisements within the Application. AdMob may collect and process device identifiers, IP addresses, and usage data to serve personalized or non-personalized advertisements.
• Sentry: We use Sentry (Functional Software, Inc.) for real-time error tracking, crash monitoring, and bug detection to ensure system stability and performance.
• In-App Purchases and Subscriptions: If You purchase a Subscription or in-app product, payments are processed directly through platform payment processors (such as the Apple App Store or Google Play Store). We do not store or process Your payment card or banking details directly.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: including to monitor the usage of our Service, perform job evaluations, generate cover letters, and translate application content.

• To manage Your Account: to manage Your registration as a user of the Service and enable access to registered features.

• To process Subscriptions and transactions: to manage paid features, fulfill purchases, and verify subscription status.

• To contact You: To contact You by email, push notifications, or other forms of electronic communication regarding updates, security alerts, or administrative messages.

• To manage Your requests: To attend to and manage Your support inquiries.

• For business transfers: We may use Your Personal Data in connection with any merger, sale of Company assets, financing, or acquisition.

• For analytics and service improvement: To analyze usage trends, evaluate AI output quality, fix application bugs, and enhance user experience.

Links to External Websites and Third-Party Freelance Platforms

Our Service contains links to third-party websites and original freelance platforms from which job listings originate. If You click on a third-party link, You will be directed to that third party's site.

Disclaimer of Responsibility: We have no control over, and assume no responsibility for, the content, privacy policies, terms of service, or practices of any third-party sites, applications, or freelance platforms. We strongly advise You to review the Privacy Policy of every external site You visit.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We apply the following maximum retention periods:

• Account Information: Retained for the duration of Your active account plus up to 24 months following account closure to handle post-termination inquiries or legal compliance.
• Customer Support Data: Support tickets and correspondence are retained for up to 24 months from ticket closure. Chat transcripts are retained for up to 24 months.
• Usage Data & Server Logs: Statistics, server logs, IP addresses, and Sentry crash logs are retained for up to 24 months for security, debugging, and service optimization.

When retention periods expire, Personal Data is securely deleted, overwritten, or permanently anonymized so that it can no longer be associated with You.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in cloud locations operated by our Service Providers (including Supabase, Render, Google, Microsoft, Groq, and Sentry) located in various jurisdictions. This means your information may be transferred to — and stored on — servers located outside of Your state, province, country, or other governmental jurisdiction where data protection laws may differ.

Where required by law, We implement appropriate safeguards (such as Standard Contractual Clauses) to ensure Your data receives an adequate level of protection.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

You may update, amend, or delete Your information at any time by logging into Your Account settings. You may also contact Us directly to request access to, correction of, or permanent deletion of any Personal Data provided to Us.

General Data Protection Regulation (GDPR) Compliance (EEA/UK Users)

If You are located in the European Economic Area (EEA) or the United Kingdom (UK), We process Your Personal Data under the following legal bases pursuant to Article 6 of the GDPR:

• Performance of a Contract: Necessary to fulfill our obligations under our Terms of Service (e.g., generating job matches and cover letters).
• Consent: Where You have granted explicit consent for specific processing operations (e.g., marketing communications or certain ad customization).
• Legitimate Interests: Necessary for our legitimate business interests, such as improving AI model accuracy, application security, and crash diagnostics, provided these interests do not override Your fundamental rights.
• Legal Obligation: Necessary to comply with applicable statutory requirements.

Your GDPR Rights: You have the right to request access to, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to the processing of Your Personal Data. You also have the right to lodge a complaint with the supervisory authority in the EU/EEA Member State of Your habitual residence, place of work, or place of the alleged infringement. A list of EEA supervisory authorities is available at: edpb.europa.eu.

Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing of Your Personal Data is based on Your consent (e.g., personalized advertising served via Google AdMob), You have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, You may:

• Device settings: Disable personalized advertising on your device (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads → Opt out of Ads Personalization).
• Application settings: Adjust advertising preferences directly within the OptiMatch Application settings screen.
• Direct request: Contact Us at optimatchfreelance@gmail.com to opt out of any consent-based processing. We will process Your request within 30 days.

Automated Decision-Making and Profiling (Art. 22 GDPR)

Our Service employs Artificial Intelligence (AI) models to evaluate job compatibility, generate match scores, and produce personalised content. This processing constitutes automated decision-making and profiling within the meaning of Article 22 and Article 4(4) of the GDPR, as it may significantly affect Your professional opportunities.

How the Automated Processing Pipeline Works

When You submit Your candidate profile (professional experience, skills, and employment preferences), the following automated pipeline is executed for each job evaluation:

• Step 1 — Anonymization (Groq): Your profile is first processed by Groq to strip direct personal identifiers (name, contact information) before any evaluation occurs. Only anonymized data proceeds to the next stage.
• Step 2 — Job Compatibility Evaluation and Match Scoring (Google Gemini AI): The anonymized profile and job listing data (title, description, required skills) are transmitted to Google Gemini AI, which assigns a numerical match score, generates a match explanation (reason), and produces a concise job summary (aiDescription) and tailored application advice (aiRecomendation).
• Step 3 — Cover Letter Generation: Based on the evaluated profile-job match, AI automatically generates a personalised cover letter. In cases of API rate limits or service failures, Groq serves as a fallback engine for this step.
• Step 4 — Translation (Microsoft Azure Translator): AI-generated output fields (reason, aiDescription, aiRecomendation) may be automatically translated into Your preferred language via Microsoft Azure Translator.

Significance and Impact

The match score produced in Step 2 directly determines which job listings are highlighted, ranked, and recommended to You within the OptiMatch Application. A lower score may result in certain opportunities being displayed with lower priority, which may materially influence Your job-seeking decisions.

Your Rights Regarding Automated Processing

In accordance with Article 22 GDPR, You have the following rights with respect to automated processing in OptiMatch:

• Right to Human Review: You may request that any automated job evaluation or match score be reviewed by the Company's operator (Oleksandr Sas) rather than determined solely by automated means.
• Right to Contest: You have the right to express Your point of view and contest any automated evaluation result that You believe is inaccurate or unfair.
• Right to Explanation: You have the right to obtain a meaningful explanation of the logic involved in producing a specific match score or AI-generated evaluation for a particular job listing.

To exercise any of these rights, please contact Us at optimatchfreelance@gmail.com, specifying the job listing ID and the evaluation You wish to contest, review, or have explained. We will respond within 30 days of receiving Your request.

California Privacy Rights (CCPA / CPRA and CalOPPA Compliance)

This section applies solely to residents of the State of California pursuant to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

Categories of Personal Information Collected

In the preceding 12 months, We have collected the following categories of Personal Information:

• Identifiers (e.g., name, email address, IP address, unique device identifiers).
• Professional or employment-related information (e.g., work experience, skills, portfolio links).
• Commercial information (e.g., Subscription purchase history).
• Internet or network activity information (e.g., interaction with the Application, diagnostic logs).

Your California Privacy Rights

California residents have the following rights:

• Right to Know / Access: The right to request information about the categories and specific pieces of Personal Information We have collected, used, disclosed, or sold.
• Right to Delete: The right to request the deletion of Personal Information collected from You, subject to statutory exceptions.
• Right to Correct: The right to request correction of inaccurate Personal Information.
• Right to Opt-Out of Sale or Sharing: We do not sell Your Personal Information for monetary consideration. However, advertising networks (such as Google AdMob) may collect device identifiers for cross-context behavioral advertising, which may constitute "sharing" under California law. You may opt out of personalized advertising within Application settings or through Your device settings.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information as necessary to perform the Services requested.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of Your privacy rights.

CalOPPA Do Not Track (DNT) Notice

Our Service does not currently respond to automated "Do Not Track" (DNT) browser signals due to a lack of uniform industry standards.

Children's Privacy and COPPA Compliance

Do We collect information from kids under the age of 13?

COPPA compliance is required if you collect information from children under 13. COPPA applies to websites, apps, and businesses in the US or with users from the US.

Our position on Children's Privacy: Our Service is strictly intended for individuals who are at least 16 years of age (or older). We do not knowingly market to, target, or collect personally identifiable information from children under the age of 13 (or under the age of 16 in certain jurisdictions).

If You are a parent or legal guardian and You become aware that Your child under 13 has provided Us with Personal Data without parental consent, please contact Us immediately at optimatchfreelance@gmail.com. Upon notification, We will take immediate steps to delete such information from our databases and server infrastructure.

Data Breach Notification Procedure (Art. 33–34 GDPR)

We maintain an internal incident response process to detect, assess, and respond to personal data breaches in a timely and accountable manner. In the event of a personal data breach affecting data We process or store (including data held by our sub-processors Supabase, Render, or Sentry), We will act in accordance with Articles 33 and 34 of the GDPR:

• Notification to Supervisory Authority (Art. 33 GDPR): Where a personal data breach is likely to result in a risk to the rights and freedoms of natural persons, We will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. The notification will include: the nature and scope of the breach, the approximate number of data subjects and personal data records affected, the likely consequences of the breach, and the measures taken or proposed to address it.
• Notification to You (Art. 34 GDPR): Where a breach is likely to result in a high risk to Your rights and freedoms — such as unauthorized exposure of Your professional profile, authentication credentials, or usage history — We will notify You without undue delay via the email address linked to Your Account and, where possible, via a prominent in-Application alert.
• Internal Documentation (Art. 5(2) GDPR): All security incidents and personal data breaches, regardless of whether formal notification is required, will be internally documented in Our breach register in accordance with Our accountability obligations under the GDPR.

If You discover or suspect a security vulnerability, unauthorized access, or potential data breach related to Our Service, please report it immediately to optimatchfreelance@gmail.com. We treat all security disclosures with the highest priority.

Security of Your Personal Data

The security of Your Personal Data is paramount to Us. We implement industry-standard administrative, physical, and technical security measures, including encryption at rest and in transit via Supabase, server-side data isolation on Render, and pre-transmission data anonymization via Groq. However, please remember that no method of transmission over the Internet or electronic storage is 100% secure, and We cannot guarantee absolute security.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this document.

For material changes, We may notify You via email or through a prominent notification within the Application prior to the changes taking effect. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or Your privacy rights, You can contact us:

• Name:Oleksandr Sas (Individual Developer)
• Postal Address (Poste Restante):Oleksandr Sas, Poste Restante, Post Office, 17 Hrushevskoho Street, Drohobych, Lviv Region, 82107, Ukraine
• Email:optimatchfreelance@gmail.com