← Back to Bewerby

Privacy Policy

Last updated: June 8, 2026

1. Introduction

Welcome to Bewerby ("Bewerby", "we", "us", or "our"). We operate the platform at https://bewerby.com, which helps users find Ausbildung (vocational training) positions in Germany and apply to them using AI-assisted tools.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data. By using Bewerby, you agree to the practices described here.

2. Data We Collect

2.1 Account & Profile Data

When you create an account, we collect:

  • Full name, email address, date of birth, nationality
  • Contact information: phone, address, city, postal code
  • Professional details: German language level, education, work experience, skills
  • A profile photo (optional)
  • An uploaded CV in PDF format (optional)

2.2 Gmail / Google Account Data

If you choose to connect your Google account to enable the email application feature, we request the gmail.send OAuth scope. This allows Bewerby to send emails on your behalf to job application addresses.

We collect and store:

  • Your Gmail OAuth access token and refresh token — stored encrypted in our database
  • Token expiry timestamp

We do not read, store, index, or access any of your existing emails, contacts, or inbox. We use Gmail exclusively to send outgoing application emails that you explicitly initiate and approve. Your Gmail data is never used for advertising or sold to third parties.

2.3 Usage Data

We automatically collect standard server logs including:

  • IP address, browser type, operating system
  • Pages visited, features used, timestamps
  • Job applications sent (job ID, method, status)

2.4 Payment Data

We use a subscription system. Payment processing is handled by third-party providers. We do not store full credit card numbers on our servers.

3. How We Use Your Data

  • To provide the service — generate personalized application emails, build and export your CV, show relevant job listings
  • To send emails on your behalf — using your connected Gmail account or our platform email system, only when you explicitly trigger a send action
  • To improve the platform — analyze usage patterns to improve features
  • To communicate with you — send transactional emails (account confirmations, usage alerts)
  • To comply with legal obligations — fraud prevention, legal requests

We do not sell your personal data. We do not use your data for advertising targeting. We do not share your data with third parties except as described in Section 5.

4. Google API Services — Limited Use Disclosure

Bewerby's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only request the gmail.send scope — the minimum required to send emails on your behalf
  • Gmail data is used solely to send job application emails you initiate
  • We do not transfer Gmail data to third parties except as necessary to operate the service
  • We do not use Gmail data for serving advertisements
  • We do not allow humans to read your Gmail data
  • You can revoke Gmail access at any time from your profile settings or via Google Account Permissions

5. Data Sharing & Third Parties

We share data only with:

  • Supabase — our database and file storage provider (EU infrastructure)
  • OpenAI — to generate email content and CV text (profile data is sent as prompt context; OpenAI does not train on API data per their policy)
  • Google LLC — for Gmail OAuth authentication and email sending
  • Legal authorities — if required by applicable law

6. Data Retention

  • Account data is retained while your account is active
  • Gmail tokens are deleted immediately when you disconnect your Gmail or delete your account
  • Uploaded CVs are deleted when you remove them or delete your account
  • You may request full data deletion at any time — see Section 8

7. Data Security

We implement industry-standard security measures: HTTPS encryption in transit, encrypted storage for OAuth tokens, row-level security on our database, and access controls. However, no system is 100% secure — if you discover a vulnerability, please contact us at privacy@bewerby.com.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access — request a copy of all data we hold about you
  • Correction — update inaccurate data via your profile settings
  • Deletion — request full account and data deletion
  • Portability — receive your data in a machine-readable format
  • Withdraw consent — disconnect Gmail at any time from your profile settings

To exercise any of these rights, email us at privacy@bewerby.com. We respond within 30 days.

9. Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies or third-party advertising cookies.

10. Children's Privacy

Bewerby is not intended for users under 16 years of age. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the platform. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For any privacy questions, data requests, or concerns:

Email: privacy@bewerby.com
Platform: https://bewerby.com