Privacy Notice

Nermau ("we", "us") operates Finding My Job Hub and is the data controller for the personal data described here. You can contact us about privacy at support@nermau.com.

1. What we collect and why

• Account data (name, email address, login credentials, or your Google account identifier if you sign in with Google) — to create and secure your account. Legal basis: performance of our contract with you.
• Your job-search content (companies, roles, salaries, stages, interviews, notes, follow-ups) — to provide the Service. Legal basis: performance of our contract.
• Subscription and access status (trial dates, subscription state, billing period, payment problem flags received from Paddle) — to manage your access. Legal basis: performance of our contract.
• Technical and security data (IP address, device and browser information, error logs, timestamps of key actions) — to keep the Service secure, prevent fraud and abuse, and fix problems. Legal basis: our legitimate interests.
• Support messages you send us — to answer you. Legal basis: legitimate interests and contract performance.

We do not sell your data, and we do not use your job-search content for advertising. Payment card details are collected and processed by Paddle, not by us — we never see them.

2. Who we share data with

• Hosting and infrastructure providers that run the application and database on our behalf, as processors under contract.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Professional advisers (legal, accounting) where necessary.
• Public authorities where we are legally required to disclose information.

3. International transfers

Some of our providers may process data outside the EEA. Where that happens we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

4. How long we keep data

We keep your account and job-search data for as long as your account exists. If you delete your account, your profile, applications, interviews, events and access records are deleted permanently. Records we must keep for legal or accounting reasons (for example invoice-related data held by Paddle) are retained for the period required by law, then deleted or anonymised.

5. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-user database rules that make your records readable only by your own account.

6. Your rights

Under the GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You can export your applications as CSV and delete your account yourself from your profile at any time. Write to support@nermau.com and we will respond within one month. You also have the right to complain to your local data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

7. Cookies and similar technologies

We use only essential cookies and local browser storage needed to keep you signed in, keep your session secure and process payments through Paddle's checkout. We do not use advertising or third-party tracking cookies. You can clear this storage in your browser settings, though doing so will sign you out.

8. Changes to this notice

We will publish any updates on this page with a new date and, for material changes, tell you by email or in the app.