Privacy Policy

Last updated: January 28, 2026
1. Introduction

Smart Match ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller

Smart Match is the data controller responsible for your personal data. For any questions regarding data protection, you can contact us at: hello@wallstrdev.de
3. Information We Collect
3.1 Account Information

Email address (required for account creation and authentication)
Phone number (optional, if provided during registration)
Password (encrypted and stored securely)


3.2 Resume Analysis Data

Resume documents (PDF files) - processed in real-time and NOT stored on our servers
Job URLs you provide for matching analysis (processed temporarily)
Analysis results are generated on-demand and not permanently stored


3.3 Payment Information

Payment details are processed and stored by Stripe (our payment processor)
We do not store your credit card information on our servers
We receive transaction confirmations and subscription status from Stripe


3.4 Usage Data

Daily usage counts (stored locally in your browser only)
Essential cookies for authentication


1. Legal Basis for Processing

We process your personal data based on:

Contract Performance: To provide our resume analysis services
Consent: For marketing communications and optional features
Legitimate Interests: To improve our services and prevent fraud
Legal Obligation: To comply with tax and financial regulations


1. How We Use Your Information
   
   To provide and improve our resume analysis services
   To authentiresume analysis services (resumes are processed in real-time only, not stored)
   To authenticate your identity and manage your account
   To process payments and manage subscriptions through Stripe
   To enforce daily usage limits (tracked in your browser)
   To send essential service-related communications only
2. Data Sharing and Third Parties

We share your data only with trusted service providers:
Stripe:

Payment processing and subscription management (PCI DSS compliant)
Analysis Service:

AI-powered resume analysis processing (data processed securely and not stored)

We do not sell, rent, or share your personal data with third parties for their marketing purposes.
7. Data Retention

Account Data: Retained as long as your account is active (email and authentication info only)
Resume Files: NOT stored - processed in memory during analysis only, then discarded
Analysis Results: NOT stored - generated on-demand and displayed immediately
Payment Records: Managed by Stripe according to their retention policies and legal requirements


1. Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restriction: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time


To exercise these rights, contact us at hello@wallstrdev.de
9. Cookies and Tracking

We use the following types of cookies:

Essential Cookies: Required for authentication and core functionality
Analytics Cookies: To understand how you use our service (with your consent)
Preference Cookies: To remember your settings (e.g., dark mode)


You can manage cookie preferences through our cookie consent banner or your browser settings.
10. Data Security

We implement industry-standard security measures to protect your data:

End-to-end encryption for data transmission (HTTPS/TLS)
Secure authentication and password encryption
Regular security audits and updates
Access controls and data minimization principles
Encrypted storage for sensitive data


1. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Stripe's GDPR-compliant data processing agreements
Adequacy decisions for certain countries


1. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy.
14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority in the EU.
15. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Email: hello@wallstrdev.de

Data Protection Officer: hello@wallstrdev.de