What we hold, and what we don't.
A short summary, then the full thing.
- We hold the CV / profile you give us, the alerts you create, and the engagements you make with our emails.
- We use that data to match you to jobs and to make our matching better, never to advertise to you.
- We do not sell your data. We do not track you across the internet. We do not run advertising at all.
- You can export everything we hold or delete your account at any time, from Settings.
What we collect
When you create an account: your email address, your name if you choose to give it, and either an uploaded CV or a pasted free-text description of your background. We extract structured fields from that: skills, seniority, domains, things you actively want to avoid, and store them alongside the original text. The original is kept verbatim so we can re-process it later as our matching improves.
When you use the product: which emails you opened, which matches you clicked, saved, or dismissed. Server logs contain IP and user-agent for fourteen days, after which they're discarded.
What we do with it
Your data is used solely to power the matching service: to read your background, compare it to incoming postings, and write the explanations that arrive in your inbox. Parts of that work are carried out, on our behalf, by a small set of specialist service providers, listed below. We use these providers under their published terms and, where they offer such options, configure them to not retain your data or use it for model training. If and when paid plans are introduced, a payment processor will be engaged to handle card data and billing notifications; it will be added to the sub-processor table below at that time.
Beyond that, your data does not leave our servers. We do not sell it. We do not share it with institutions unless you opt in via Discoverability in your settings. Even when you do, only to the extent you allow, with every introduction relayed through us and requiring your explicit approval. We do not use your data for advertising. We do not run advertising at all.
What we don't collect
- We don't run third-party analytics. No Google Analytics, no Segment, no Mixpanel.
- We don't fingerprint you, don't track you across sites, don't drop tracking cookies.
- We don't enrich your profile with data from anywhere else.
Cookies
We set one cookie: a session cookie that keeps you signed in. That's it. No analytics cookies, no tracking pixels, no cross-site identifiers. Because the only cookie we set is strictly necessary for the service to work, we do not show a consent banner.
Sub-processors
The following entities act as sub-processors of personal data on behalf of Suitch in the course of providing the service. Each sub-processor is bound by a written agreement requiring appropriate safeguards under applicable data-protection law. Each entity's own privacy practices are governed by the terms available at the link provided.
| Entity | Category | Terms |
|---|---|---|
| Anthropic, PBC | AI services | View |
| Voyage AI, Inc. | AI services | View |
| Sendinblue SAS (Brevo) | Transactional email delivery | View |
| Çizgi Telekomünikasyon A.Ş. (Natro) | Server hosting | View |
Categories are descriptive, not contractual. The set of sub-processors listed above may change as the service evolves; this page will be kept current and is the authoritative reference. Material changes to this privacy notice as a whole are communicated separately as set out in the section below.
For the avoidance of doubt: Suitch does not authorise any sub-processor to use personal data received from Suitch for its own purposes, to sell or share such data with any third party, or to use such data to train general-purpose models.
Your rights
Wherever you are, you can: download a JSON dump of everything we hold on you, delete your account (immediate, irreversible), or unsubscribe from all email with a single click that does not require sign-in.
For EU/UK residents specifically: this notice and our practices are designed to satisfy GDPR and UK GDPR. The legal basis for processing is your contract with us (Article 6(1)(b)) for the matching itself, and our legitimate interest (Article 6(1)(f)) for fraud prevention and service improvement. Special-category data should not appear in your CV; if it does, we process it under Article 9(2)(a), your explicit consent given by uploading the CV.
Changes to this notice
We will email you before any change that materially weakens these protections. Otherwise, revisions are listed at the bottom of this page with a date.
Questions? [email protected].