Privacy Policy
Last updated: September 29, 2026
This policy explains what data Boofoll collects, why, and what your rights are. It applies to the public site and the app (web and mobile).
1. Who we are
Boofoll is a job search and matching service focused on jobs in Germany. Questions about this policy can be sent to privacy@boofoll.com.
2. What data we collect
Account data: name, email, and authentication, processed by Clerk.
Professional profile data: CV/resume, target roles, location, experience, and search preferences, provided by you during onboarding.
Usage data: jobs viewed, favorited, applications tracked, and app interactions, used to compute compatibility and organize your application history.
Payment data: processed directly by Stripe — we don't store card numbers or sensitive payment data on our servers.
Device/site usage data: aggregated usage metrics (PostHog) and technical error logging (Sentry), to keep the service running.
3. Legal basis for processing (GDPR Art. 6)
Contract performance: processing your CV and preferences is necessary to provide the service you signed up for (finding and ranking compatible jobs).
Consent: used specifically for non-essential cookies/ads (see section 4) — you can withdraw consent at any time.
Legitimate interest: aggregated usage metrics to improve the product.
4. Cookies and advertising
The public site (homepage, pricing) does not use advertising cookies and does not display ads.
Inside the logged-in app area, Free-tier users see ads (Google AdSense on web, Google AdMob on mobile) as part of the free tier's monetization model — paid tier users (Radar, Candidato, Premium) never see ads.
Before any advertising cookie is set for users in the European Union, we show a consent banner (Google Funding Choices on web, UMP SDK on mobile), in line with Google's EU consent policy. You can decline ad personalization cookies at any time via that banner.
5. Who we share data with (subprocessors)
Clerk — account authentication.
Stripe — payment and subscription processing.
Supabase — database hosting.
Vercel — web application hosting.
Vercel Blob — file storage (uploaded CVs).
Resend — transactional email delivery.
Evolution API — WhatsApp alert delivery (Premium plan).
Anthropic — AI processing for profile extraction and CV generation.
PostHog — product analytics (aggregated/anonymized where possible).
Sentry — technical error monitoring.
Google (AdSense/AdMob) — ad serving, only for Free-tier users, only in the logged-in app area.
None of these partners are authorized to use your data for their own purposes beyond what's needed to provide the service they're contracted for.
6. Data retention
We keep your data while your account is active. Upon account deletion request, we remove personal data within a reasonable timeframe, except where retention is legally required (e.g. payment/tax records).
7. Your rights (GDPR)
If you're in the European Union, you have the right to access, rectify, erase, port your data, object to processing, and withdraw consent at any time. To exercise these rights, contact privacy@boofoll.com.
You also have the right to lodge a complaint with your country's data protection authority (in Germany, the BfDI — Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit).
8. International data transfers
Some partners listed in section 5 (e.g. Google, Anthropic, Stripe, Vercel) process data outside the European Union, including in the United States. These transfers rely on Standard Contractual Clauses (SCCs) or an equivalent mechanism adopted by each partner.
9. Children's privacy
Boofoll is not directed at individuals under 18, and we do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy periodically. The date at the top reflects the last update.
11. Contact
Privacy questions: privacy@boofoll.com.