Jobpace
Home Product About
Log in Start free →
Legal

How we handle your data.

This page explains what personal data Jobpace collects, why, where it's stored, who else sees it, and what rights you have over it — including exactly what happens to your CV, LinkedIn export and assessment results when you use the product.

Version 1 Effective: 14 August 2026 Data controller: Jobpace, David Baunsgaard CVR: 46528964 Address: Møllegårdsvej 4, 5882 Vejstrup, Denmark Contact: hello@jobpace.dk
On this page
  1. 01Who we are
  2. 02What data we collect, and why
  3. 03Your CV, LinkedIn export & assessments
  4. 04How AI is used on your data
  5. 05Who else sees your data
  6. 06International transfers
  7. 07Your rights
  8. 08How long we keep data
  9. 09Cookies & tracking
  10. 10Children
  11. 11Changes to this policy
  12. 12Contact us
01

Who we are

Jobpace is an AI career suite for experienced professionals in Denmark, Sweden, Norway and Germany, built by David Baunsgaard and operated together with Peter Kirkebye. For the purposes of GDPR, Jobpace is the data controller for the personal data described on this page — we decide what data is collected and why.

Jobpace is registered in Denmark as a sole proprietorship (personfirma) under CVR/SE no. 46528964, with registered address Møllegårdsvej 4, 5882 Vejstrup, Denmark.

You can reach us any time at hello@jobpace.dk. There's no support queue behind that address — it goes straight to the people who built the product.

02

What data we collect, and why

We collect the minimum needed to run your account, deliver the tools, and meet our own legal and accounting obligations. Here's the full list:

Data pointWhy (legal basis)Kept forCategory
Email addressContract — running your accountUntil deletion + 30 daysPersonal
Display nameContractUntil deletionPersonal
CountryLegitimate interest — language/market defaultsUntil deletionPseudonymous
Account created dateLegitimate interest — support & product analysis5 yearsAnonymised
Plan status & datesContract + accounting obligation5 years (bookkeeping law)Pseudonymous
Last active timestampLegitimate interest — service reliability12 monthsAggregated
Admin audit log (support actions on your account)Legitimate interest — security2 yearsPseudonymous
Stripe customer referenceContract + accounting obligation5 yearsPseudonymous
CV, LinkedIn export, assessment results, profile answersContract — necessary to deliver the tools you ask us to runUntil you delete it, or your accountPersonal
We don't ask you to consent to us reading a CV you've chosen to upload — under GDPR Art. 6(1)(b), that processing is simply necessary to deliver the service you asked for, and consent would be the wrong (and legally weaker) basis for something you can't meaningfully decline and still use the product. What we do instead is give you a clear notice — described in full in section 03 — before we touch your first document, so you know exactly what happens to it.
03

Your CV, LinkedIn export & assessments

Before you upload your first document, Jobpace shows you a plain-language notice covering exactly what happens next. Here it is in full:

ReadingThe text is extracted in your browser. The file itself never leaves your machine.
AnalysisWhen you run a tool, the relevant parts of your profile are sent to Claude (Anthropic's AI) to produce the result. Jobpace uses Anthropic's commercial API; under our current agreement, customer data is not used to train Anthropic's models.
StorageYour profile is synced to our database in Ireland (EU), so you can continue on another device. Your history keeps your most recent analyses.
ControlDownload everything, or permanently delete it, at any time from your Profile.

About the results: match scores, applications, and interview preparation are AI-generated and can be wrong. Treat them as input to your own decision — not the decision itself.

One technical detail worth being explicit about: file text extraction (PDF, Word, plain text) happens entirely client-side, in your browser. If a document contains only a scanned image with no extractable text, we don't fall back to any server-side image processing — you'll be asked to provide a text-based version instead.

04

How AI is used on your data

Every one of Jobpace's tools — match scoring, CV tailoring, cover letters, interview preparation, and the rest — works by sending the relevant parts of your profile to Anthropic's Claude API, generating a result, and returning it to you. This happens only when you actively run a tool; nothing is analysed in the background without your action.

In line with the EU AI Act's transparency requirements (Article 50), we want this to be unambiguous: the outputs you see are AI-generated. They are a starting point built from your own material, not a verified or guaranteed-accurate assessment, and you remain responsible for reviewing and deciding what to do with them before sending anything to an employer.

05

Who else sees your data

We don't sell your data, and we don't share it for advertising. The only parties who ever see it are the processors we rely on to actually run the service:

ProviderWhat they doWhat they see
Supabase (DPA)Database hosting, EU-West (Ireland)Your account and profile data
Anthropic (Claude API) (DPA)AI processing for every toolThe parts of your profile relevant to the tool you run
Stripe (DPA)Payment processingBilling details, not your career data
Vercel (DPA)Application hostingStandard request/hosting data
Google / MicrosoftSign-in (OAuth), if you choose that login methodThe name and email your provider shares at sign-in
Dinero (DPA)Bookkeeping for our own accounting obligationsInvoice/payment records, not your profile content

We only add a new processor when it's necessary to run the service, and we hold — or are in the process of putting in place — a data processing agreement with each one covering how they may use your data. Supabase, Vercel, Anthropic, Stripe and Dinero each publish a standing Data Processing Addendum directly on their site (linked above), which applies automatically once you use their service under their standard terms — there's no separate document for us to download or sign. Each relies on the EU's Standard Contractual Clauses (or an equivalent recognised safeguard) for any transfer of data outside the EU/EEA. Sign-in via Google or Microsoft is limited to the name and email they share at login and is governed by each provider's own account and API terms rather than a dedicated processor DPA, since neither is hosting or processing your career data on our behalf.

06

International transfers

Your account data is stored in the EU (Ireland). Two of our processors are based outside the EU/EEA — Anthropic (Claude API) and Stripe (payments), both US-operated — and each transfer is covered by that provider's Standard Contractual Clauses; Stripe can additionally rely on the EU-US Data Privacy Framework where applicable. We review this as our processor relationships evolve, and we'll update this section if that ever changes.

07

Your rights

Under GDPR, you have the right to access, correct, export, and delete your personal data, and to object to or restrict certain processing. Here's how each of those actually works in Jobpace today:

Access Live
View everything tied to your account from your Profile page at any time.
Export Live
Download a complete copy of your data as a file, from Profile → Download my data.
Deletion Live
Permanently delete your account and profile data from Profile → Delete account. This removes your account record and your stored profile/CV content.
Correction
Edit your name, profile answers, and uploaded documents directly at any time — most fields are simply editable in place.
Objection (Art. 21)
You can object to processing based on our legitimate interest (for example, product analytics) at any time. Email us and we'll stop that processing unless we have a compelling legitimate ground that overrides your interests, or need to continue for a legal claim.
Restriction (Art. 18)
You can ask us to pause processing of your data — for example, while we investigate a correction or objection you've raised — instead of deleting it outright. We'll mark the data as restricted and only process it further with your consent, or for a legal claim.

If you'd rather we handle something manually — an objection, a restriction request, or anything not covered above — email hello@jobpace.dk and we'll respond within the timelines GDPR requires. You also have the right to lodge a complaint with your local data protection authority; in Denmark, that's Datatilsynet.

Automated decision-making (Art. 13(2)(f)): Jobpace's tools — match scoring, CV tailoring, cover letters, and interview preparation — use AI to generate suggestions and scores based on your own profile. None of this is a solely automated decision that produces a legal or similarly significant effect on you: the output is shown only to you, as input to your own job search, and no employer, recruiter, or third party sees it or acts on it through Jobpace. You always decide what to do with the result before it goes anywhere. If that ever changes — for example, if we build a feature that shares AI output directly with an employer — we'll update this section and give you the right to request human review before that applies to you.

08

How long we keep data

Retention periods are listed alongside each data point in section 02. As a general rule: your profile and document content is kept only as long as your account exists, plan and billing records are kept 5 years to satisfy Danish bookkeeping law, and lightweight operational data (like a last-active timestamp) is kept 12 months or less. Deleting your account triggers deletion of your profile and document content; a short grace window (30 days) applies to your email address specifically, to allow us to handle any in-flight support or billing matter.

Free trials you never activate: if you start a free trial but never sign back in or run a single tool, we don't keep that account indefinitely. An inactive trial account — no login and no tool use for 90 days after signup — is automatically deleted, profile data included.

09

Cookies & tracking

Jobpace is deliberately light on tracking. We don't run a page-view log and we don't record which tools you use, individually, for analytics purposes — the only activity signal we keep is a single "last active" timestamp, updated when you call our API, described in section 02. Signing in relies on a small number of strictly necessary session cookies, which are required for the login itself to function and aren't used for tracking or advertising.

10

Children

Jobpace is built for experienced professionals and is not directed at, or intended for use by, anyone under 18. We don't knowingly collect data from minors. If you believe a minor has created an account, contact us and we'll remove it.

11

Changes to this policy

If we make a material change to how we handle your data, we'll update this page and, where the change is significant, let existing users know directly. The version number and effective date at the top of this page always reflect the current version.

12

Contact us

Questions about your data

Whether it's a question about this policy, a request we haven't automated yet, or something that doesn't fit neatly into a category — write to us directly. It's still us who reads it.

hello@jobpace.dk

Jobpace (personfirma) · CVR/SE 46528964 · Møllegårdsvej 4, 5882 Vejstrup, Denmark

Jobpace
Home Product About Pricing Privacy Terms