Privacy Policy

TyoHunt is an AI-powered job matching service operated by Viral Patel (sole operator, trading as TyoHunt). We help job seekers in Finland discover relevant job openings through automated scraping and AI-based matching. A Finnish business registration (Oy) is planned and this page will be updated once it is in place.

Data Controller: Viral Patel (TyoHunt)

Contact: [email protected]

• Account information: email address, hashed password
• Profile data: full name, job preferences, CV/resume (if uploaded)
• Job alert settings and search criteria
• Usage data: pages visited, features used, timestamps
• Technical data: IP address (recorded at registration for legal compliance), browser type
• Consent records: when you accepted our Terms of Service

• To match you with relevant job openings in Finland
• To send job alert emails you have subscribed to
• To provide AI-powered CV analysis and cover letter generation
• To maintain and improve the service
• To comply with legal obligations (GDPR, Finnish law)

We do not sell your personal data to third parties.

• Contract: Processing necessary to provide the service you signed up for
• Consent: CV processing and AI analysis (you consent at upload)
• Legitimate interest: Service security and fraud prevention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where we are required by law to retain it.

Job alert emails are sent until you unsubscribe (each email contains a one-click unsubscribe link).

As an EU resident, you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your account and all associated data
• Portability: Export your data in a machine-readable format
• Object: Object to processing based on legitimate interest
• Withdraw consent: At any time for consent-based processing

To exercise these rights, go to Settings → Privacy in your account or email [email protected].

We use a session cookie to keep you signed in. This cookie is strictly necessary and does not track you across other websites.

We also use the following third-party tools, gated behind your explicit cookie consent:

• Google Analytics 4 — website analytics (anonymized, EU data processing)
• Google Tag Manager — tag management container
• Meta Pixel & Conversions API — advertising measurement; browser tracking requires consent; server-side sends only a SHA-256 hashed email (never plain text) to measure registrations

All browser-side tracking fires only after you click "Accept" on our cookie banner. You may withdraw consent at any time by clearing your cookies and declining on your next visit. Legal basis: your consent (Art. 6(1)(a) GDPR).

For full details, see our Cookie Policy.

How we use AI services with your data:

• CV Parsing: When you upload a CV, the full text is sent to Mistral AI's API to extract skills, experience, education, and generate your seniority score. If Mistral is temporarily unavailable, Google Gemini Flash API is used as a fallback.
• Cover Letter Generation: When you generate a cover letter, the job description and your CV summary are sent to Mistral AI's API to produce a tailored draft. Google Gemini is used as a fallback if needed.
• Job Matching: Your CV profile (extracted skills, seniority) is used locally within our system to score jobs — no AI API call is made per job match.

AI provider data handling:

• Mistral AI (primary): EU-based. Data processed in the EU under GDPR. Mistral does not use your CV or cover letter data to train AI models. See Mistral AI Privacy Policy.
• Google Gemini (fallback): US-based. When used, data is transferred to the US under Standard Contractual Clauses (GDPR Article 46). Google does not use API inputs for model training. See Google Privacy Policy.

You may delete your CV at any time from the CV page. Deletion removes all parsed data from our systems immediately.

Your data is stored on servers in the EU. AI features are processed primarily by Mistral AI (EU-based, no cross-border transfer). When Gemini is used as a fallback, data is transferred to the US under Standard Contractual Clauses compliant with GDPR Article 46.

We will notify you by email if we make material changes to this policy. The "last updated" date at the top of this page reflects the most recent revision.