Privacy Policy - WerkGenie

Last updated: November 17, 2025

WerkGenie (“we”, “us”, “our”) operates the WerkGenie platform available at werkgenie.io (the “Platform”). This Privacy Policy explains how we collect, use, and protect your personal data when you use our services. If you do not agree with this Policy, please do not use the Platform.

1. Who is responsible for your data?

The controller responsible for processing your personal data is:

WerkGenie

info@werkgenie.io

If you have any questions about this Policy or how we handle your data, you can contact us at the email address above.

2. What data we collect

We only collect personal data that is necessary to run the WerkGenie Platform and provide our services.

2.1 Account and profile information

When you create or update an account, we may collect:

• Email address
• Password (stored in hashed form, not in plain text)
• Date of birth
• Profile photo
• Gender
• Preferred languages
• City
• Personal description / “about me”
• Any additional profile information you choose to provide

For employers/companies we may also collect:

• Company name
• Company profile photo
• Company personal description / “about me”
• Any additional company profile information you choose to provide

2.2 CVs and user-generated content

When you use WerkGenie as a job-seeker, you can upload or create:

• CVs / resumes
• Work experience and education details
• Skills, certifications and languages
• Other information you choose to include in your profile or CV

This content is used to help match you with vacancies and to show relevant information to potential employers when there is a match.

2.3 AI conversations and third-party LLMs

WerkGenie may offer AI-assisted features (for example, help with creating your profile or CV, or matching you to vacancies). We may use third-party Large Language Model (LLM) providers for these AI features. We only work with providers that state they are GDPR-compliant or offer equivalent protections. We do not share your email address or full name with third-party LLM providers. We may send other information needed for the AI to work, such as:

• City/country
• Skills
• Work experience
• Education
• Parts of your CV or profile text

We use this information solely to provide the AI feature you requested (e.g. matching, profile help, or suggestions).

2.4 Technical and usage information

When you use our Platform, our systems may automatically collect limited technical data, such as:

• Date and time of access
• Basic device and browser information
• Pages or screens you visit
• Basic log information for security and debugging

We use this to keep the platform secure and functioning properly.

2.5 Payment information (Stripe)

If you make a payment on WerkGenie (for example, for premium features):

• Payments are processed securely by Stripe.
• We may share your email address, full name, and payment-related information with Stripe to process your payment.
• We do not store your complete payment card details on our servers; Stripe processes them on our behalf.

Please also review Stripe's own privacy policy for more details on how they handle your data.

2.6 Login with third-party services (Google, Facebook, etc.)

If you choose to sign up or log in via a third-party service (such as Google or Facebook), you instruct that service to send us information such as:

• Your name and email address
• Profile photo
• Other information that service shares according to your privacy settings there

You can control what is shared with us through your settings in that third-party service.

2.5 Payment information (Stripe)

If you make a payment on WerkGenie (for example, for premium features):

• Payments are processed securely by Stripe.
• We may share your email address, full name, and payment-related information with Stripe to process your payment.
• We do not store your complete payment card details on our servers; Stripe processes them on our behalf.

Please also review Stripe's own privacy policy for more details on how they handle your data.

2.6 Login with third-party services (Google, Facebook, etc.)

If you choose to sign up or log in via a third-party service (such as Google or Facebook), you instruct that service to send us information such as:

• Your name and email address
• Profile photo
• Other information that service shares according to your privacy settings there

You can control what is shared with us through your settings in that third-party service.

3. How we use your information

We use the data we collect for the following purposes:

• To provide and operate the WerkGenie Platform
• Creating and managing your account
• Allowing you to create and update profiles and vacancies
• Enabling the core job-matching features
• To match job-seekers with vacancies
• Processing your profile, CV and vacancy details to determine potential matches
• Performing AI-based matching using anonymous or pseudonymised candidate data wherever possible
• To enable communication between users
• Letting job-seekers and employers see each other's relevant information after a match
• Allowing messaging or invitations only after both parties have accepted the match or offer
• To handle payments
• Processing payments through Stripe
• Managing invoices, subscriptions or other paid features
• To maintain security and prevent abuse
• Protecting our Platform from fraud, abuse and technical issues
• Ensuring the integrity of the matching process
• To comply with legal obligations
• Meeting accounting, tax and other legal requirements

We do not sell your personal data.

4. How matching and visibility work

4.1 Anonymous matching

Our AI and matching systems compare:

• Vacancy information
• Candidate information (skills, experience, etc.)

The matching is done without sharing sensitive identifiers (such as email address or full name) with third-party AI providers.

4.2 When your name or company is shown

Job-seekers: Your profile name and relevant profile information may be shown to employers after the system has identified a match or potential match.

Employers: Company names and basic vacancy info may be shown to job-seekers when there is a match or potential match.

Communication between job-seekers and employers is only enabled after both sides accept the match, invitation or offer.

4.3 Public vacancies

Employers can choose to make a vacancy publicly visible. In that case:

• The vacancy details may be viewable by people who do not have a WerkGenie account.
• The company name may be shown together with the public vacancy.
• Employers are responsible for ensuring the information they publish publicly does not violate any confidentiality or privacy obligations towards their own staff or applicants.

5. Legal basis for processing (GDPR)

Under the GDPR, we may process your personal data based on the following legal grounds:

• Performance of a contract
• To create and manage your WerkGenie account and to provide the Platform features you use (e.g. job matching, communication, payments).
• Legitimate interests
• To secure and improve our Platform, prevent abuse, and provide relevant matching, as long as these interests are not overridden by your rights and interests.
• Consent
• For specific features where we ask for your consent (for example, certain AI features or optional communications). You can withdraw your consent at any time.
• Legal obligations
• To comply with laws regarding accounting, tax, or law enforcement requests where applicable.

6. Sharing your data

We share your data only when necessary and with appropriate safeguards.

We may share your data with:

• Service providers (processors)
• Trusted third-party providers that help us run the Platform, such as:
• Hosting and infrastructure providers
• Third-party LLM / AI providers
• Payment processor (Stripe)
• Email and communication providers

These parties only process your data according to our instructions and under data processing agreements.

Other users (job-seekers and employers): As described in Section 4, we share certain profile or company information with other users when there is a match, or when vacancies are made public.

Legal and regulatory authorities: Where required by law, or to protect our rights, users, or others, we may share information with law enforcement or regulators.

We do not sell your personal data to third parties.

7. Data storage and retention

We keep your personal data only as long as necessary for the purposes described in this Policy, including to:

• Maintain your account and provide the Platform
• Resolve disputes
• Enforce our agreements
• Comply with legal and accounting obligations

In general:

• Account and profile data are kept while your account is active.
• CVs and profile content are kept while stored in your account, or until you delete them.
• Technical logs may be kept for a limited time for security and debugging.
• Payment information is kept as required by tax and accounting laws.

You may request deletion of your account; in that case, we will delete or anonymise your data unless we are legally required or allowed to keep certain information.

8. Security

We take appropriate technical and organisational measures to protect your data.

• Passwords stored in hashed form, not in plain text
• Encryption of traffic between your device and our servers (e.g. HTTPS/WSS)
• Access control and safeguards to limit access to personal data to those who need it
• Regular monitoring of our systems for vulnerabilities or incidents
• No online system can be 100% secure, but we work to protect your data against unauthorised access, loss, misuse or alteration.

9. International transfers

Some of our service providers (including LLM providers or Stripe) may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA:

• We aim to work only with providers offering adequate data protection, and
• We rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, where required by law.

10. Your rights (GDPR)

Depending on your location and subject to certain conditions, you have the following rights regarding your personal data:

• Access - to know whether we process your data and, if so, to receive a copy.
• Rectification - to correct inaccurate or incomplete data.
• Erasure - to request deletion of your data in certain cases.
• Restriction - to request we limit processing under certain conditions.
• Data portability - to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Objection - to object to processing based on our legitimate interests, including profiling.
• Withdraw consent - where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with your local supervisory authority, for example in the Netherlands: the Autoriteit Persoonsgegevens.

To exercise any of your rights, please contact us at info@werkgenie.io.

Employers are responsible for ensuring the information they publish publicly does not violate any confidentiality or privacy obligations towards their own staff or applicants.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top and, where appropriate, by additional notice (for example, on the Platform).

We encourage you to review this Policy regularly to stay informed about how we process your data.

7. Legitimate interests

To secure and improve our Platform, prevent abuse, and provide relevant matching, as long as these interests are not overridden by your rights and interests.

Consent

For specific features where we ask for your consent (for example, certain AI features or optional communications). You can withdraw your consent at any time.

Legal obligations

To comply with laws regarding accounting, tax, or law enforcement requests where applicable.

6. Sharing your data

We share your data only when necessary and with appropriate safeguards.

We may share your data with:

• Service providers (processors)
• Trusted third-party providers that help us run the Platform, such as:
• Hosting and infrastructure providers
• Third-party LLM / AI providers
• Payment processor (Stripe)
• Email and communication providers

These parties only process your data according to our instructions and under data processing agreements.

Other users (job-seekers and employers): As described in Section 4, we share certain profile or company information with other users when there is a match, or when vacancies are made public.

Legal and regulatory authorities: Where required by law, or to protect our rights, users, or others, we may share information with law enforcement or regulators.

We do not sell your personal data to third parties.

7. Data storage and retention

We keep your personal data only as long as necessary for the purposes described in this Policy, including to:

• Maintain your account and provide the Platform
• Resolve disputes
• Enforce our agreements
• Comply with legal and accounting obligations

In general:

• Account and profile data are kept while your account is active.
• CVs and profile content are kept while stored in your account, or until you delete them.
• Technical logs may be kept for a limited time for security and debugging.
• Payment information is kept as required by tax and accounting laws.

You may request deletion of your account; in that case, we will delete or anonymise your data unless we are legally required or allowed to keep certain information.

8. Security

We take appropriate technical and organisational measures to protect your data.

• Passwords stored in hashed form, not in plain text
• Encryption of traffic between your device and our servers (e.g. HTTPS/WSS)
• Access control and safeguards to limit access to personal data to those who need it
• Regular monitoring of our systems for vulnerabilities or incidents
• No online system can be 100% secure, but we work to protect your data against unauthorised access, loss, misuse or alteration.

9. International transfers

Some of our service providers (including LLM providers or Stripe) may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA:

• We aim to work only with providers offering adequate data protection, and
• We rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, where required by law.

10. Your rights (GDPR)

Depending on your location and subject to certain conditions, you have the following rights regarding your personal data:

• Access - to know whether we process your data and, if so, to receive a copy.
• Rectification - to correct inaccurate or incomplete data.
• Erasure - to request deletion of your data in certain cases.
• Restriction - to request we limit processing under certain conditions.
• Data portability - to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Objection - to object to processing based on our legitimate interests, including profiling.
• Withdraw consent - where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with your local supervisory authority, for example in the Netherlands: the Autoriteit Persoonsgegevens.

To exercise any of your rights, please contact us at info@werkgenie.io.

You may request deletion of your account; in that case, we will delete or anonymise your data unless we are legally required or allowed to keep certain information.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top and, where appropriate, by additional notice (for example, on the Platform).

We encourage you to review this Policy regularly to stay informed about how we process your data.

We take appropriate technical and organisational measures to protect your data.

• Passwords stored in hashed form, not in plain text
• Encryption of traffic between your device and our servers (e.g. HTTPS/WSS)
• Access control and safeguards to limit access to personal data to those who need it
• Regular monitoring of our systems for vulnerabilities or incidents
• No online system can be 100% secure, but we work to protect your data against unauthorised access, loss, misuse or alteration.

• We aim to work only with providers offering adequate data protection, and
• We rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, where required by law.

10. Your rights (GDPR)

Depending on your location and subject to certain conditions, you have the following rights regarding your personal data:

• Access - to know whether we process your data and, if so, to receive a copy.
• Rectification - to correct inaccurate or incomplete data.
• Erasure - to request deletion of your data in certain cases.
• Restriction - to request we limit processing under certain conditions.
• Data portability - to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Objection - to object to processing based on our legitimate interests, including profiling.
• Withdraw consent - where processing is based on consent, you can withdraw it at any time.
9. International transfers

You also have the right to lodge a complaint with your local supervisory authority, for example in the Netherlands: the Autoriteit Persoonsgegevens.

To exercise any of your rights, please contact us at info@werkgenie.io.

You may request deletion of your account; in that case, we will delete or anonymise your data unless we are legally required or allowed to keep certain information.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top and, where appropriate, by additional notice (for example, on the Platform).

We encourage you to review this Policy regularly to stay informed about how we process your data.

Restriction - to request we limit processing under certain conditions.

Data portability - to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.

Objection - to object to processing based on our legitimate interests, including profiling.

Withdraw consent - where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with your local supervisory authority, for example in the Netherlands: the Autoriteit Persoonsgegevens.

To exercise any of your rights, please contact us at info@werkgenie.io.

Contact details

WerkGenie, Ubbemastins 5, Netherlands, Leeuwarden - info@werkgenie.io