Privacy policy

1. What data do we collect?

To provide the resume creation and management service, Beatjob collects the following categories of data:

• Account data: email address and password (the latter is stored only as a hash, managed by our authentication provider).
• Technical data: session tokens needed to keep you signed in, managed by our authentication provider.
• Resume information: this information is only accessible to you, once you have signed in to your account.
• Technical error data: if something fails, we log the error message and stack trace, the browser and operating system, the page where it happened and your account's internal identifier. It does not include the content of your resumes, your email address or your password. This data is processed by our error monitoring provider, Sentry, with servers in the European Union.

2. What do we use your data for?

We process your data for the following purposes:

• Creating and maintaining your user account.
• Storing and editing your resumes and letting you manage them.
• Importing your resume from a PDF or DOCX file, if you choose to use this feature.
• Preventing abuse and keeping the service secure.
• Detecting and fixing technical errors in the service.

When you import a resume, the file is not stored on our servers: its text is extracted in your browser and sent to an artificial intelligence provider to interpret it and fit it into your resume. That text is only used for this task.

We do not use your data for personalized advertising and we do not sell it to third parties.

3. Legal basis for processing

The processing of your data is based on the following legal bases:

• Your consent, given when you sign up and accept this policy.
• The performance of the contract for the resume creation and management service.
• Our legitimate interest in keeping the platform secure and working properly.

4. Data retention

We keep your personal data while your account is active. If you decide to delete your account, the associated data is erased immediately. Technical error data is kept for a maximum of 90 days and then deleted automatically.

5. Your rights

As the data subject, you can exercise the following rights at any time:

• Access: find out what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Portability: receive a copy of your data in a structured, commonly used format.
• Objection: object to the processing in certain circumstances.
• Restriction: ask us to restrict the processing in certain cases.

To exercise any of these rights, write to us at moc.bojtaeb@troppus stating your request and, where appropriate, attaching a copy of an identity document to verify that you are the data subject. We will reply within one month of receiving your request.

If you believe we have not handled your rights properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

6. Security

At Beatjob we take the security of your data very seriously. To protect your personal information, we apply the following technical measures:

• Encryption at rest: all your data (including your resume, contact details and history) is stored encrypted with the AES-256 standard on the servers, which prevents it from being read in the event of unauthorized physical access.
• Data isolation (RLS): our database is configured with Row-Level Security policies. This means that only you, as an authenticated user, can access, modify or delete your own data, ensuring that other people can never see your information.
• Secure authentication: we use JWT (JSON Web Tokens) to manage sessions securely, and the OAuth 2.0 with PKCE authentication flow to protect the sign-in process, especially in web and mobile applications.
• Secure authentication with external providers: to make access easier, we offer the option to sign in with your Google account or other supported providers. This process uses the OAuth 2.0 with PKCE (Proof Key for Code Exchange) standard, which adds an extra layer of security to the credential exchange and prevents third parties from intercepting or reusing the authorization codes. The whole flow is handled by a secure authentication infrastructure, ensuring that your sign-in details remain protected.

These measures ensure that Beatjob meets the security standards required by the General Data Protection Regulation (GDPR) and follows the guidelines of the Spanish Data Protection Agency (AEPD), giving you a secure environment to manage your professional information.

Even so, no system is 100% secure. If you notice any security issue, please contact us at moc.bojtaeb@troppus.

7. Minors

Beatjob is not intended for people under 16. If you are under that age, you must not sign up or use the service. If we learn that we have collected data from someone under 16, we will delete it as soon as possible.

8. Changes to this policy

We may update this privacy policy to reflect legal, technical or operational changes to the service. If the changes are substantial, we will announce them with a visible notice on the page itself and, where appropriate, by email. The date of the last update appears at the top of this document.

9. Applicable law

This policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and by Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).