Privacy Policy

1. Who is responsible for your data

The controller for personal data processed through the Services is the operator of MySI Scout. You can contact us about privacy or data-protection matters through the contact channel made available in the Services.

2. Information we collect

Account and authentication information

When you sign in, we process your email address, a one-time sign-in code and request token in protected form, sign-in source, browser user-agent, and the time of your most recent sign-in. We store an authentication token so that your signed-in session can continue.

Information you add to your workspace

This can include CV text and uploaded CV files, relevant roles, job links and vacancy details, applications, statuses, stages, notes, contacts, referrals, submitted information, useful links, tasks, and messages you save or receive in your MySI Scout inbox.

Job-analysis information

To analyse an opportunity, we process the job posting content and URL you provide or open through the extension together with the CV you select. We store the resulting fit score, requirement matches, gaps, recommendations and related analysis context in your workspace.

Connected Gmail information

If you connect Gmail, we process the connected email address and OAuth access and refresh tokens. We use the connection to check selected mailbox messages for relevant job-alert links. We retain a mailbox cursor to avoid processing the same messages repeatedly.

Chrome extension information

The extension stores your sign-in token locally in your browser. On supported job pages, it processes the current page URL and, where needed to associate a job, the source URL that opened the page. It uses this information to display job analysis and application context in the extension panel.

Technical information

We may process technical and diagnostic information needed to run and secure the Services, such as request timestamps, error logs, browser information and network information supplied with a request.

3. How we use your information

• Provide, secure and maintain your MySI Scout account.
• Send sign-in codes and service-related communications.
• Analyse the relationship between a selected CV and a job opportunity at your request.
• Organise applications, tasks, inbox messages and interview context in your workspace.
• Process connected Gmail job alerts and link relevant opportunities to your workspace.
• Improve reliability, prevent abuse, investigate errors and comply with applicable law.

4. Legal bases for processing

If the GDPR applies to you, we process personal data to provide the Services you request and take steps connected with your account (performance of a contract); with your consent, for example when you connect Gmail; to meet legal obligations; and where necessary for our legitimate interests in operating, securing and improving the Services.

5. Service providers and disclosures

We use service providers that process data on our behalf to operate the Services. Depending on the feature you use, these include:

• OpenAI, to perform CV-to-job analyses requested by you.
• Google, when you choose to connect a Gmail mailbox through OAuth.
• Mailjet, to deliver email sign-in codes.
• Hosting, database, infrastructure and security providers needed to operate mysi.app.

We may also disclose information where required by law or to protect the security, rights and integrity of the Services and their users. We do not sell personal data or use it for advertising profiling.

6. International transfers

Our providers may process information in countries other than the country where you live. Where required, we use appropriate transfer safeguards, such as contractual protections, for international transfers of personal data.

7. Retention

We retain account and workspace data while your account remains active and for as long as reasonably necessary to provide the Services, resolve disputes, maintain security and meet legal obligations. Authentication tokens expire after seven days unless revoked earlier. OAuth and temporary sign-in data are retained only for as long as needed for the relevant authentication or connection flow.

8. Your choices and rights

You can update workspace data, disconnect Gmail, and sign out of the Services. Depending on your location, you may have rights to request access, correction, deletion, restriction, portability or objection to certain processing. To exercise these rights, contact us through the contact channel made available in the Services. You may also have the right to lodge a complaint with your local data protection authority.

9. Cookies and local storage

MySI Scout currently uses browser local storage for essential session information and interface preferences, such as your authentication token, user role and unread-message count. We do not currently use advertising cookies or sell personal data for cross-context behavioural advertising.

10. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, protected authentication tokens and encrypted storage for Gmail OAuth tokens. No online service can guarantee absolute security.

11. Children

The Services are not directed to children. We do not knowingly collect personal data from children under 16.

12. Changes to this policy

We may update this Privacy Policy when our Services or legal obligations change. We will post the updated version on this page and update the “Last updated” date.