Jobs to be Found

Privacy Policy for Jobs to be Found

This Privacy Policy explains how Jobs to be Found (“the Bot”, “we”, “us”, or “our”) collects, uses, stores, and shares personal data when you interact with our Telegram bot or visit our website.

1. Data Controller

The controller responsible for processing your personal data is:

Yuriy Dyuster Berlin, Beusselstr. 36, 10553 Email: yuriy.dyuster@gmail.com Website: jtbf.app Telegram bot: @JobsToBeFoundBot

2. What the Bot Does

Jobs to be Found is an AI-powered career coaching experiment. It asks users about their professional background, experience, preferences, and ambitions and uses this information to generate job-search strategies, career directions, and search queries.

The Bot does not represent employers, make hiring decisions, or guarantee that a user will find or receive a job.

3. Personal Data We Collect

Depending on how you use the Bot, we may process:

Telegram account information

This may include:

  • Your Telegram user ID
  • Display name and username
  • Profile information made available by Telegram
  • Interface language
  • Chat and message identifiers

We do not receive your telephone number unless you explicitly share it.

Information you provide

This may include:

  • Text messages and answers
  • Voice messages and their transcriptions
  • CVs, résumés, and other uploaded documents
  • Employment history and current role
  • Skills, qualifications, education, and experience
  • Preferred roles, industries, locations, and working arrangements
  • Career goals, salary expectations, constraints, and preferences
  • Feedback you provide about the Bot

Please do not submit information that is not necessary for receiving the service.

Generated and derived information

We may generate or extract information based on your messages and documents, including:

  • Summaries of your professional background
  • Information extracted from your CV
  • Transcriptions of voice messages
  • Suggested job-search directions
  • Search strategies and queries
  • Inferences about roles that may be relevant to you

AI-generated information may be incomplete or incorrect. You should review all recommendations before using them.

Technical information

We may process limited technical information necessary to operate and secure the service, including:

  • Date and time of interactions
  • Error and diagnostic information
  • Security and abuse-prevention logs
  • API request metadata
  • Website server logs, such as IP address, browser type, and requested pages

4. How We Use Personal Data

We process personal data to:

  • Provide the Bot and respond to your messages
  • Understand your professional situation and preferences
  • Process CVs, voice messages, and other submitted content
  • Generate personalised career and job-search strategies
  • Maintain conversational context
  • Troubleshoot errors and improve reliability
  • Prevent fraud, misuse, and security incidents
  • Evaluate and improve the Bot during its beta phase
  • Respond to privacy requests
  • Comply with legal obligations

We do not sell personal data or use it for behavioural advertising.

5. Legal Bases for Processing

Where the General Data Protection Regulation applies, we rely on the following legal bases:

  • Performance of a contract or steps requested by you: processing necessary to provide the Bot and its requested features, under Article 6(1)(b) GDPR.
  • Legitimate interests: operating, securing, testing, debugging, and improving the Bot, under Article 6(1)(f) GDPR.
  • Consent: where we specifically request your consent for an optional activity, under Article 6(1)(a) GDPR.
  • Legal obligations: where processing is necessary to comply with applicable law, under Article 6(1)(c) GDPR.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

6. AI Processing and Google Gemini

The Bot uses the commercial Google Gemini API to analyse user input and generate responses.

Information sent to Gemini may include:

  • Your messages and answers
  • Relevant conversation history
  • Voice-message content or transcripts
  • CVs and other uploaded documents
  • Instructions required to generate a relevant response

Under the terms applicable to paid Gemini API services, Google does not use prompts, uploaded files, or generated responses to improve its general products or train its general-purpose AI models.

Google may retain prompts, contextual information, and generated outputs for a limited period for security, abuse prevention, policy enforcement, and legally required disclosures. Google currently states that this abuse-monitoring retention period is up to 55 days.

Where the Gemini Files API is used to process a document, audio recording, or other file, Google states that the uploaded file is automatically deleted from that file service after 48 hours.

Google may process information in countries where Google or its service providers operate. Such processing is governed by Google’s applicable data-processing terms and international-transfer safeguards.

We do not intentionally opt in to sharing user conversations, documents, or API datasets with Google for general model training or product improvement.

7. Telegram

The Bot operates through Telegram. When you communicate with the Bot, Telegram processes information under its own terms and privacy policy.

Telegram may provide the Bot with:

  • Your public Telegram account information
  • Messages you send to the Bot
  • Files, voice messages, and documents you upload
  • Interactions with buttons or commands

Telegram is an independent service, and we do not control how Telegram processes data within its platform. Deleting information from our systems does not necessarily delete copies retained by Telegram. You may manage or delete your Telegram messages and account through Telegram’s own settings.

8. Other Service Providers

We may use service providers that process information on our behalf, including:

  • Google, for the commercial Gemini API
  • Vercel, for application hosting
  • Supabase, for data storage
  • Technical providers used for monitoring, security, or error reporting

These providers may process personal data only as necessary to deliver their services and under applicable contractual and data-protection obligations.

We may also disclose information where required by law, a court order, or a valid request from a competent authority, or where reasonably necessary to protect users, the service, or our legal rights.

9. International Data Transfers

Some service providers may process data outside Germany or the European Economic Area.

Where required, international transfers are protected through appropriate safeguards, such as:

  • An adequacy decision issued by the European Commission
  • Standard Contractual Clauses approved by the European Commission
  • Additional contractual, organisational, or technical protections

You may contact us for further information about the safeguards applicable to a particular provider.

10. Data Retention

We retain personal data collected directly through the Bot for no longer than 60 days after your most recent interaction with the Bot, unless:

  • You request deletion earlier
  • A shorter retention period applies
  • Retention is required to comply with a legal obligation
  • Limited information is needed to establish, exercise, or defend legal claims
  • Security information must be retained temporarily to investigate misuse

After the retention period, information is deleted or irreversibly anonymised.

The retention periods applied independently by Telegram, Google, and other providers are governed by their respective terms and policies. Google’s paid Gemini API may retain prompts and outputs for up to 55 days for abuse monitoring, while files uploaded through the Gemini Files API are normally deleted after 48 hours.

Aggregated or anonymised information that can no longer reasonably identify you may be retained for longer.

11. Sensitive and Third-Party Information

The Bot does not require information about your health, racial or ethnic origin, religion, political opinions, sexual orientation, trade-union membership, biometric data, or other sensitive personal information.

Please avoid including such information in messages or documents unless it is strictly necessary.

You should also avoid uploading personal information about another person unless you have the right to provide it.

12. Automated Processing

The Bot uses automated AI processing to analyse information and generate suggestions.

This processing may influence the recommendations and job-search strategies shown to you. However, the Bot does not make decisions that produce legal or similarly significant effects, such as deciding whether you receive employment, credit, insurance, or access to another essential service.

All recommendations should be treated as informational suggestions and reviewed by you.

13. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure.

These measures may include:

  • Restricted access to production systems
  • Secure communication with service providers
  • Access controls and authentication
  • Data-retention limits
  • Monitoring for errors and misuse
  • Regular updates to software dependencies

No online service can guarantee absolute security. You should avoid sending highly confidential information through the Bot.

14. Your Data-Protection Rights

Depending on your location and the applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate information
  • Request deletion of your information
  • Request restriction of processing
  • Receive certain data in a portable format
  • Object to processing based on legitimate interests
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a competent data-protection authority

To exercise your rights, contact us at yuriy.dyuster@gmail.com. We may need to request limited information to verify your identity before fulfilling a request.

Users in the European Union may lodge a complaint with the data-protection authority in the country where they live, work, or believe an infringement occurred.

15. Children

The Bot is intended for people seeking professional or employment opportunities and is not designed for children under the age of 18.

If we learn that we have collected personal data from a child without an appropriate legal basis, we will delete it.

16. Changes to This Policy

We may update this Privacy Policy as the Bot, its service providers, or applicable legal requirements change.

The latest version will be published on this website with an updated revision date. Where changes materially affect how personal data is processed, we may also provide notice through the Bot.

17. Contact

Questions, requests, or complaints concerning this Privacy Policy may be sent to:

Yuriy Dyuster Email: yuriy.dyuster@gmail.com Address: Berlin, Beusselstr. 36, 10553