Privacy statement

Shinsa reads your CV to judge one job posting. That is personal data, so here is exactly what happens to it: what is stored, who else sees it, and how you get rid of it.

What we store

• Your account: your email address and a password. The password is hashed by our authentication provider and is never visible to us.
• Your CV: the text you upload or paste, plus a structured version of it (roles, years, skills, languages). Whatever you put in your CV ends up here, so leave out anything you do not want stored.
• Your screenings: each job posting you submit, the verdict, the reasoning, and the outcome you log afterwards.
• Your plan: which fare you are on, how many screenings you used, and a customer reference from our payment provider. We never see or store your card details.

What we do not do

No advertising, no profiling across websites, and no selling or sharing of your data with anyone who is not listed below. The only cookies we set are the ones that keep you logged in. That is why you do not see a cookie banner.

We do count visits, using Vercel Web Analytics. It is cookieless: it records that a page was viewed, not who you are, and it cannot follow you to other websites. We use it to see which pages are worth writing, nothing else.

Who else processes your data

To run the service we use the processors below. They act on our instructions only.

• Anthropic (United States): reads your CV and the job posting to produce the verdict. Anthropic does not use API data to train its models.
• Supabase: database and login.
• Vercel: hosting and the cookieless visit counter described above.
• Stripe: payments. Card details go to Stripe directly and never reach our servers.
• Adzuna: only for Priority users, to find matching job openings. We send search terms derived from your CV, not the CV itself.

Some of these are based outside the European Union. Transfers rely on the European Commission's standard contractual clauses.

Why we are allowed to

We process your CV and screenings to deliver the service you asked for, which is the performance of our agreement with you. Payment data is processed to meet our legal bookkeeping obligations. There is no processing based on advertising interests, because there is no advertising.

How long we keep it

Your CV and screenings stay until you delete them or close your account. On your profile page you can delete your CV, wipe every screening at once, or close your account entirely. Closing your account removes all of it and cancels a running subscription. Individual screenings can be deleted from the board. All of this is self-service: no email, no waiting.

Invoices are kept for seven years because Dutch tax law requires it. They hold your email and what you paid, never your CV.

Your rights

You can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to processing. Mail jasper@missiemaker.nl and you get an answer within a month. If you think we handle your data badly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If this statement changes in a way that matters, we mail you before it takes effect. The date at the top always tells you which version you are reading.

See also the terms of service.