Privacy Policy
Last updated: 19 April 2026
HSM Jobs (https://www.hsmjob.com) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and the Dutch UAVG.
1. Who we are
The data controller for HSM Jobs is Ebenezer Kwame Afful, operating under the trading name HSM Jobs.
| Platform | https://www.hsmjob.com |
| Contact email | privacy@hsmjob.com |
| Country of operation | Netherlands |
2. What data we collect
We collect only the data necessary to provide our service:
| Data | When & why |
|---|---|
| Name & email address | When you create an account. Used to identify you and personalise the platform. |
| Job alert preferences | When you set up an alert (keywords, city, sector, salary, frequency). Used solely to send matching job emails. |
| Saved jobs (bookmarks) | When you save a job. Stored so you can retrieve your list across sessions. |
| CV / LinkedIn content | When you use our AI career tools. Processed to generate your analysis; not permanently stored on our servers beyond your session. |
| Usage events | Clicks, page views, and feature interactions. Stored in our own database — no third-party tracking pixels. Used to improve the platform. |
| Feedback submissions | When you submit feedback via the Feedback widget. Text and timestamp only. |
We do not collect payment card details, national identification numbers, or special-category data (health, ethnicity, religion, etc.).
3. How we use your data
4. Legal basis for processing (GDPR Article 6)
| Processing activity | Legal basis |
|---|---|
| Account creation & authentication | Performance of a contract (Art. 6(1)(b)) — necessary to provide the service you signed up for. |
| Job alert emails | Performance of a contract (Art. 6(1)(b)) — you explicitly requested alerts. You can cancel at any time. |
| Usage analytics | Legitimate interests (Art. 6(1)(f)) — improving platform performance and UX. Analytics are self-hosted; no data is sold or shared. |
| Feedback | Legitimate interests (Art. 6(1)(f)) — understanding user needs to improve the service. |
| AI tool processing | Performance of a contract (Art. 6(1)(b)) — you initiate the analysis and the data is required to deliver the result. |
5. Third-party services
We use the following sub-processors. Each is bound by a Data Processing Agreement (DPA) or equivalent safeguard:
| Provider | Purpose | Data shared |
|---|---|---|
| Clerk (clerk.com) | User authentication & account managementName, email, session tokens | |
| Resend (resend.com) | Job alert email deliveryYour email address and alert content only | |
| Neon (neon.tech) | Database hostingAll account and alert data stored in encrypted PostgreSQL | |
| Anthropic (anthropic.com) | AI-powered career tools (CV analysis, cover letters, interview coach)CV / LinkedIn text you paste into a tool. Not stored beyond the API call. | |
| OpenAI (openai.com) | AI-powered career tools (fallback model provider)CV / LinkedIn text you paste into a tool. Not stored beyond the API call. |
We also retrieve publicly available job listing data from Adzuna, LinkedIn, JSearch, IamExpat, EnglishJobSearch, and Undutchables. This is job metadata only — no user data is shared with these sources.
6. International data transfers
Some of our sub-processors (Clerk, Resend, Anthropic) are based in the United States. Where your data is transferred outside the European Economic Area, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
- the provider's certification under an applicable adequacy framework.
You can request details of the specific transfer mechanism for any provider by contacting us at privacy@hsmjob.com.
7. How long we keep your data
| Account data | Retained for as long as your account is active. Deleted within 30 days of account deletion. |
| Job alerts | Retained until you delete the alert or your account. |
| Bookmarks | Retained until you remove them or delete your account. |
| Usage analytics | Retained for 12 months, then aggregated or deleted. |
| CV / tool session data | Not stored beyond the duration of your session. The Anthropic API does not retain your content after the response is returned. |
| Feedback | Retained indefinitely in anonymised form for product improvement. |
8. Your rights under GDPR
As a data subject in the EEA, you have the following rights:
To exercise any right, email privacy@hsmjob.com. We will respond within 30 days.
10. Contact & complaints
For any privacy question, data request, or complaint, contact us at:
Complaints procedure (klachtenprocedure)
If you have a concern about how we handle your personal data, we ask that you follow these steps:
- Contact us at privacy@hsmjob.com describing your concern clearly.
- We will acknowledge your complaint within 5 working days and respond substantively within 30 calendar days.
- If you are not satisfied with our response — or if we have not responded within 30 days — you have the right to lodge a formal complaint with the supervisory authority.
The competent supervisory authority is the Autoriteit Persoonsgegevens (Dutch DPA). You can file a complaint at autoriteitpersoonsgegevens.nl.
We reserve the right to update this policy. Material changes will be notified by email or a prominent notice on the platform at least 14 days before taking effect.