Privacy
This page explains, in plain language, what JobSprintly collects, why, who it is shared with, and how you can see, export or delete it.
Who runs JobSprintly
JobSprintly is operated by Alessandro Zambelli, based in Switzerland, as an individually run side project. It is not a registered company, and no company or VAT registration number applies.
- Service: JobSprintly
- Operated by: Alessandro Zambelli, Switzerland
- Responsible for your data: Alessandro Zambelli is responsible for the personal data processed by JobSprintly and is the person to contact about it.
Contact
Support, privacy requests and billing all go to a4.zambo@gmail.com. A postal address is available on request.
What is collected and why
- Account information — your email address, and a password or Google sign-in, so your account can be created and you can sign back in.
- Career and application information you type — assessment answers, career-direction results, CV and LinkedIn notes, portfolio, reference and certification entries, job applications and their stages, imported job descriptions, interview notes, planner tasks, weekly logs and achievements. Stored so the product can show your workspace back to you and recommend your next step.
- Payment references — subscription status, plan, renewal dates and Stripe customer/subscription identifiers, used to decide whether your access is active. Card details are never sent to or stored by JobSprintly; Stripe handles them.
- Product analytics (only with your consent) — page views, feature-usage events and campaign (UTM) parameters, sent only if you accept analytics.
- Advertising measurement (only with your consent) — if advertising trackers are enabled and you accept marketing, a limited conversion signal such as "checkout started" or "purchase completed", with the plan, price and currency.
- Technical logs — error and request details needed to keep the service working and secure. Your career content is not written to these logs.
Why processing is allowed
Where data-protection law such as the Swiss FADP or the GDPR applies, processing relies on: performing the contract with you (running your account, workspace and subscription), legitimate interests (keeping the service secure and working, preventing fraud and abuse), your consent (analytics and any advertising measurement), and legal obligations (accounting and tax records for payments).
Analytics, advertising and local storage
Analytics is off until you accept it. If you accept, PostHog loads and sets identifiers in your browser to count page views and the events we send explicitly — no automatic click capture or session recording. If you reject, PostHog never loads. If you accept and later withdraw, capture stops immediately and the PostHog identifiers and campaign attribution stored in your browser are removed.
No advertising or ad-measurement trackers are installed on this site at the moment. If that changes, they will be a separate consent choice, and only a small conversion signal would be sent — never your CV content, job descriptions, application or interview notes, name or email.
Your browser's local storage is also used for things the product needs to work: your sign-in session, a local cache of your workspace so it survives a refresh, your free quiz answers before you have an account, and your privacy choices themselves. These are essential and are not used for advertising.
Change your choices any time: . You can also record a formal consent withdrawal from your account page.
Your rights and how to use them
You can ask for a copy of your data, export it, have it corrected, delete your account and workspace, and withdraw consent for analytics or advertising. Use the "Your data and privacy" section of your account page — requests are recorded there so you can track their status — or email a4.zambo@gmail.com. Requests are answered as quickly as reasonably possible, and within any deadline the law that applies to you sets. You may be asked to confirm you control the account email before data is released.
Deleting your account
Deleting your account from the account page cancels your subscription first, then deletes your account record and workspace data. Payment and invoice records held by Stripe and needed for accounting, tax or fraud-prevention purposes are kept as long as those obligations require, so they are not removed with your account. Provider backups may still contain copies for a short period before they rotate.
Service providers who receive data
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication and hosting of app data | US |
| Stripe | Payment processing, invoicing and billing portal | US/EU |
| Cloudflare | Application hosting and delivery | Global |
| PostHog | Product analytics (only with consent) | US |
Each provider only receives what it needs for its role. Your career notes and applications are not sent to employers, recruiters or advertisers, and your personal information is not sold.
International data transfers
Your data may be processed outside Switzerland and outside your own country, including in the United States, by the providers listed above. Those providers offer standard data-protection terms and standard contractual clauses for such transfers, and JobSprintly relies on them.
How long data is kept
Data is kept only for as long as reasonably necessary to provide the service, keep it secure, meet legal and accounting obligations, resolve disputes and enforce agreements.
| Category | What | How long |
|---|---|---|
| Account and workspace data | Your account record and everything in your workspace (assessments, applications, notes, logs) | Kept while your account exists |
| Deleted accounts | Account record and workspace data | Deleted when you delete your account; provider backups may still contain copies for a short period before they rotate |
| Technical logs | Server error and request logs (no career content) | Kept short-term for security and debugging, then rotated by the hosting provider |
| Analytics | Product analytics events, only if you accept analytics | Kept by the analytics provider under its own retention settings; withdrawing consent stops collection immediately |
| Payments | Stripe customer/subscription references, invoices and purchase acknowledgements | Kept by Stripe and by the operator for as long as accounting, tax, fraud-prevention or legal obligations require, so these are not deleted with your account |
Security
Your workspace is protected by per-user database access rules, so one account cannot read another's data. Traffic is encrypted in transit, payment card data never reaches JobSprintly, and administrative credentials stay on the server. No service can promise perfect security, so please use a strong, unique password.
Complaints
If you're unhappy with how your data has been handled, email a4.zambo@gmail.com first. You may also complain to the data-protection authority where you live — in Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC), and in the EU or UK it is your national authority.
Changes to this page
This page may be updated as the product changes. Material changes are reflected in the version number below.
Policy version 2026-09-08.