JobLegal
Privacy Policy
How Taktflow ApS processes your information when you use JobWeGo.
Last updated 2 August 2026
Controller
JobWeGo is operated by Taktflow ApS (registered secondary name JobWeGo ApS), CVR 46667832, Tinbergens Alle 123, 9260 Gistrup, Denmark. Taktflow ApS is the controller for the processing described here. Contact us at dpa@jobwego.dk.
Information we process
We process account and contact details, your profile and job preferences, address and geographic preferences, CV files and content, Voice Profile and writing feedback, generated applications and CV variants, job matches and usage/interaction history, and necessary security and operational logs. If payments are activated later, we also process subscription, invoice and payment metadata; card details are handled directly by Stripe. Do not upload a national identification number or unnecessary information about health, religion, political beliefs, trade-union membership, sexuality, or other sensitive matters.
Purposes and legal bases
We use the information to create and secure your account, structure your CV, match you with jobs, generate documents in your style, deliver notifications you select, and provide support. This is necessary to perform our contract with you (GDPR Article 6(1)(b)). Necessary security, abuse prevention and limited debugging rely on our legitimate interest in a secure and stable service (Article 6(1)(f)). Analytics and strongly masked browser Session Replay start by default; campaign measurement remains off unless you enable it, and Reject or withdrawal stops future collection immediately (Article 6(1)(a)). Statutory accounting information is processed under Article 6(1)(c) when relevant.
AI and automated job scoring
Anthropic processes CV, profile, job and application text for analysis and generation. Google Gemini Paid Services may process CV/profile text for private job scoring, embeddings and short-lived caches. The providers' business terms prohibit using these API inputs for ordinary model training or product improvement, although data may be retained for a limited period for security, abuse prevention or legal requirements. Job scoring is advisory only: JobWeGo does not apply for jobs, reject you, or make a decision that has legal or similarly significant effects. You always decide whether and where to apply.
Processors, recipients and international transfers
We use defined providers for database/login, hosting, AI, email, error diagnostics and later payments. Where a provider is a processor, processing is governed by a data processing agreement. Several providers are based in the United States or use global subprocessors; transfers outside the EU/EEA rely, as applicable, on the European Commission's Standard Contractual Clauses, the EU-U.S. Data Privacy Framework and supplementary safeguards. PostHog EU Cloud processes the default-on product data in Frankfurt, Germany. Commute calculations send coordinates without your name or user ID to HeiGIT/openrouteservice. Campaign providers receive data only after the relevant cookie consent.
See the current list of processors and other recipients →Retention and deletion
Account, profile, CV, Voice Profile and saved documents are retained while your account is active, or until you delete the content or ask us to erase it. We then delete or anonymise information that is no longer needed, except documentation, security data and accounting records that must be retained by law or for a specific legal claim. Data in encrypted backups and at processors ages out under their documented deletion cycles. Anthropic deletes API inputs and outputs within 30 days by default, subject to the exceptions in its commercial terms.
Your rights
You can request access, correction, erasure, restriction and data portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of earlier processing. Email dpa@jobwego.dk; we may request proportionate identity verification and respond without undue delay and normally within one month of receipt.
Security
We use access controls, encrypted transport, role-based database policies, segregated secrets, log redaction, backups and monitoring. In default-on Session Replay, all text and inputs are masked while images, video, canvas, iframes, console logs and network content are blocked. Sentry sends Replay only after a browser error. PostHog records only a sample while Analytics and Error diagnostics remain enabled. Rejecting or withdrawing either category stops future collection immediately and resets identifiers. No internet service can guarantee absolute security; if a breach occurs, we follow the GDPR requirements for documentation, notification and communication.
Contact and complaints
Send questions and requests to dpa@jobwego.dk or Taktflow ApS, Tinbergens Alle 123, 9260 Gistrup, Denmark. You may complain to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. We update this policy when purposes, providers or legal requirements change materially and always show the date above.