1. Purpose of collecting and using personal data
Jobdori, an AI career service operated by Kyubin Do (도규빈, the "Operator"), processes users' personal data for the purposes below. The data is not used for any purpose other than these, and if the purpose changes the Operator will take the necessary steps, such as obtaining separate consent under the applicable laws.
Providing and running the service: signing up and verifying identity through a Google social account, providing the CV analysis and Jobdori diagnosis, generating AI-based interview questions and answer guidance, and recording Bolt (payment token) top-ups and usage.Customer support: responding to enquiries, improving service quality, and analysing errors.2. Personal data we collect
The Operator collects the minimum personal data needed to provide the service.
Required: the email address, name and profile identifier from your Google social account.Collected while you use the service: text in the CV file (PDF) you upload (work history, education, skills, self-introduction, etc.), job-posting link information, service usage records, access logs, cookies and payment records.How we collect it: Google OAuth at sign-up, and your own uploads and inputs while using the service.Payment information: Bolt top-ups are processed by the global payment provider Polar Software Inc. as the Merchant of Record. The Operator does not directly collect or store sensitive payment information such as card numbers.3. Retention and use period
The Operator retains and uses the collected personal data while you remain a member of the service.When you request to delete your account or lose membership, the collected personal data is destroyed immediately by an irreversible method.Where retention is required under the applicable laws, the Operator may keep member information for the period those laws specify.4. Destruction procedure and method
The Operator destroys personal data without delay once it is no longer needed, for example when the retention period has passed or the purpose has been achieved.
Procedure: personal data for which you have deleted your account, or whose purpose has been achieved, is permanently deleted in line with internal policy and the law.Method: information held as electronic files is deleted using a technical method that prevents the records from being recovered.CV file storage: the original CV files you upload (PDF, etc.) are held securely in an encrypted database and, through row-level access control, can be read only by the authenticated owner. The extracted text-based profile information is stored separately. On account deletion, the original files and all related data are deleted immediately.5. Your rights and how to exercise them
You may at any time ask the Operator to access, correct, delete or stop processing your personal data.You can exercise these rights yourself through account deletion and the in-service editing features, or by a written request by email to the Data Protection Officer, which will be acted on without delay.6. Outsourcing of personal-data processing
To run the service smoothly, the Operator entrusts personal-data processing to the external providers below. All of them are located outside Korea; the specific cross-border details are set out in Article 7.
Anthropic, PBC: CV text analysis and fit-check processing.Supabase, Inc.: data storage, user authentication and file storage.Vercel, Inc.: service hosting and deployment.Google LLC: social login (OAuth).Google LLC (Google Analytics): collection and analysis of service-usage statistics.Microsoft Corporation (Microsoft Clarity): analysis of how the service is used, including interaction records, to improve usability.Polar Software Inc.: Bolt top-up payment processing (Merchant of Record).The Operator also uses external services (Jina AI, Browserless) to fetch the body of a job-posting link you enter and turn it into text. This is solely to process the job posting and does not send your CV or other personal data with it.
When outsourcing, the Operator requires, under Article 26 of the Personal Information Protection Act, that processing for any purpose other than the entrusted work is prohibited and that safety measures are in place.
7. Cross-border transfer of personal data
Core features such as CV analysis and the fit check are carried out in processing environments located outside Korea. The Operator therefore transfers personal data overseas as set out below, and you give separate consent to this transfer at sign-up. Every transfer takes place over encrypted communication (HTTPS) at the time the service is used.
Anthropic, PBC (USA): *items transferred* CV and answer text / *purpose* CV analysis and fit check / *retention* processed once at analysis time and not stored separately.Supabase, Inc. (USA): *items transferred* account information, and service data such as the CV and analysis results / *purpose* data storage and user authentication / *retention* until account deletion.Vercel, Inc. (USA): *items transferred* data processed while using the service / *purpose* service hosting / *retention* only at processing time, not stored separately.Google LLC (USA): *items transferred* email, name and profile identifier / *purpose* social login / *retention* until account deletion.Google LLC (Google Analytics) (USA): *items transferred* online identifiers (cookies), device and browser information, and service-usage records / *purpose* statistics and analysis of how the service is used / *retention* per the Google Analytics retention setting (user-level data up to 14 months).Microsoft Corporation (Microsoft Clarity) (USA): *items transferred* online identifiers (cookies), device and browser information, and interaction records such as clicks, scrolls and page navigation / *purpose* analysis of how the service is used to improve usability / *retention* per the Microsoft Clarity retention policy (about 13 months).Polar Software Inc. (USA): *items transferred* payment-related information / *purpose* Bolt top-up payment processing / *retention* the period required by the applicable laws.You may decline the cross-border transfer, but in that case the use of core features such as CV analysis and the fit check is restricted. Even after consenting, you may stop the processing of your personal data, including the cross-border transfer, by deleting your account.
8. Data Protection Officer and contact
The Operator takes overall responsibility for personal-data processing and, to handle users' complaints and provide remedies relating to it, designates the Data Protection Officer below.
Operator and Data Protection Officer: Kyubin Do (도규빈)Contact: contact@jobdori.work