0. Data Controller
The data controller responsible for your personal data is Ron Ofer, an individual sole trader based in Israel, operating axessgen (axessgen.com). This Privacy Policy explains how we collect, use, and protect your data in accordance with applicable law, including:
- The EU General Data Protection Regulation (GDPR, EU 2016/679) for EU/EEA users
- The UK GDPR and Data Protection Act 2018 (as amended) for UK users
- The Israel Privacy Protection Law (PPL, 5741-1981) and 2024-2025 Amendment 13
- The California Consumer Privacy Act (CCPA) for US users
For any privacy-related questions, contact us at support@axessgen.com.
1. Data We Collect
axessgen collects the following information to provide and improve the Service:
- Account information - email address, full name, and authentication credentials
- Career profile - job titles, skills, industries, experience level, work preferences, location, salary expectations, and career goals
- CV / Resume - uploaded documents are parsed to extract text content for AI matching and tailoring
- Job interaction history - actions you take on matched jobs (apply, save, mark done, reject, etc.)
- Scoring preferences - relevance and likelihood weights, notification thresholds, and custom keywords
- Usage data - timestamps, feature access, and interaction logs (used for analytics and product improvement)
2. How We Use Your Data
Your data is used to:
- Search for and score job listings based on your profile (using AI, see section 2a)
- Generate tailored CVs and cover letters for matched positions
- Send email notifications with your curated job matches
- Improve our AI matching algorithms and Service quality
- Comply with legal obligations (e.g., data retention for tax/audit purposes)
2a. Automated Processing and AI Scoring
axessgen uses algorithmic, automated processing to score and rank job listings for you. This includes:
- Automatic extraction of skills/experience from your CV
- Algorithmic matching of job descriptions against your profile (no human reviewer)
- AI-generated scoring of job relevance and likelihood of interview (using Anthropic Claude)
- Automated filtering and ranking before delivery
This is a form of "automated profiling" under GDPR and similar laws. It is not a final automated decision that legally restricts you (you are free to apply to any job), but you have the right to:
- Request human review of any score or recommendation
- Opt out of the AI scoring entirely and review all jobs manually
- Request an explanation of how the AI scored a specific job
To exercise these rights, contact support@axessgen.com.
2b. Emails we send
Transactional emails (account notifications, your curated job matches) are sent as a core part of the Service. Since axessgen is free, transactional emails are limited to job matches and account-related notifications.
We may also send optional product updates or marketing emails based on your consent, which you can withdraw at any time via the unsubscribe link in any such email or by contacting us at support@axessgen.com.
3. Third-Party Services
axessgen uses the following third-party services. Your data is shared only to the extent necessary to provide the Service:
- Supabase (database hosting, authentication, data storage) - Your data is secured with row-level security policies ensuring you can only access your own records. Supabase is SOC 2 Type II certified. Data is hosted in the EU (Frankfurt, Germany). https://supabase.com/privacy
- Google (OAuth authentication, Google Drive) - Google Sign-In is used for account creation/login. Google Drive is used to store generated documents (tailored CVs, cover letters, application packages). Your generated files remain in your Google Drive folder and are subject to Google's privacy terms. https://policies.google.com/privacy
- Anthropic (Claude AI - job scoring, CV/cover letter generation) - Your career profile and CV content are sent to Anthropic's Claude API for job matching, scoring, CV tailoring, and cover letter generation. Anthropic does not use your data for model training (per Anthropic's Data Processing Addendum). https://www.anthropic.com/legal/data-processing-addendum
- Perplexity AI (live web search for company research) - Only the company name, job title, and location are shared with Perplexity - not your personal data or CV. Perplexity does not retain this data beyond the generation of your report. https://www.perplexity.ai/privacy
- Apify (job data collection / web scraping) - Only job search criteria (role titles, location, keywords) derived from your profile are used as inputs. Your personal data, CV, and identifiable information are not shared with Apify. https://apify.com/privacy
- n8n (workflow automation backend) - n8n orchestrates the job matching, email delivery, and AI generation pipelines. Your data flows through n8n workflows in memory only; it is not stored by n8n. https://n8n.io/privacy
We may update our sub-processors from time to time. We will post material changes to this section when we do. EU and UK users who wish to raise an objection to a new or changed sub-processor may contact us at support@axessgen.com.
3a. Third-Party Public Content in the AI Guide
The AI Guide surfaces public commentary and data from third-party platforms to help you research companies. This includes:
- Reddit - publicly posted employee discussions and company commentary
- Blind (teamblind.com) - anonymous employee forum posts and compensation discussions
- Glassdoor, Indeed, Comparably - public employee reviews, ratings, and salary reports
- Levels.fyi - public compensation and career progression data
- Medium - publicly published employee posts and company insights
- Company websites and public sources - LinkedIn, Crunchbase, news articles, and similar public data
We source only publicly available information. Quoted content is presented with source attribution. We do not reproduce full articles verbatim, store this content beyond the lifetime of your Guide, or re-sell it. If you wish to request correction or removal of specific content, contact us at support@axessgen.com.
4. Data Retention
We retain your data for as long as your account is active. If you delete your account, we revoke your access promptly and delete your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing and tax records for up to 7 years under Israeli tax law), or where retention is necessary to establish, exercise, or defend legal claims.
Job interaction history and anonymized usage data may be retained in aggregate form for analytics and Service improvement even after account deletion.
Documents generated through the Service (tailored CVs, cover letters, application packages) are stored in Google Drive. These documents remain in your linked Google Drive folder and are not automatically deleted when you delete your account. You can manage or delete these files directly from your Google Drive at any time.
You can request confirmation that your personal data has been deleted by contacting us at support@axessgen.com.
5. Your Rights
You have the right to:
- Access, update, or correct your personal data through your Settings page or by contacting us
- Request a copy of all data we hold about you (data subject access request / DSAR)
- Request deletion of your account and associated personal data
- Withdraw consent for data processing at any time
- Object to automated decision-making / AI scoring (see section 2a)
- Restrict processing of your data
- Request portability of your data (export in machine-readable format)
- Lodge a complaint with your data protection authority (in your country of residence or the EU)
To exercise any of these rights, contact us at support@axessgen.com. We will respond within 30 days (or as required by law).
6. International Data Transfers
Some of our sub-processors (including Anthropic and Perplexity AI, based in the United States) process data outside the European Economic Area (EEA). When your personal data is transferred internationally, we rely on appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions (where applicable)
- Equivalent mechanisms under applicable law (including Israeli law)
Our primary database (Supabase) is hosted in the EU (Frankfurt, Germany), meaning your core profile and job data remain within the EEA.
For users in Israel: International transfers comply with the Israel PPL Section 11 (Onward Transfer Requirements). We ensure sub-processors provide equivalent protection of your data.
7. EU and UK Data Protection Representative
For users in the European Union / EEA and the United Kingdom, axessgen is required to appoint a data protection representative under GDPR Article 27 and UK GDPR.
Representative appointment status: A representative service is being engaged and details will be published here by August 31, 2026. In the meantime, you can always reach the data controller directly at support@axessgen.com, or file a complaint with your national data protection authority.
8. Recruiter Data Sharing Consent (Future - Currently Not Live)
axessgen is building the ability for job seekers to opt into recruiter discoverability in the future. This is NOT currently active, but we are preparing the legal scaffolding now.
In a future phase, if you enable the "Recruiter Discoverability" toggle in your Settings, you will consent to axessgen sharing:
- Your job title, skills, experience level, and location with vetted recruiters
- Your interest in job opportunities within your industry/seniority level
- Your contact information for recruiter outreach (limited to verified recruiting partners)
This consent will be:
- Separate from account signup (not a mandatory condition of using axessgen)
- Default OFF (you must opt in; no recruiter data is shared unless you enable it)
- Timestamped (we record when you enable/disable it)
- Revocable with one click (you can withdraw consent at any time)
When you withdraw consent, your data will be removed from recruiter searches within 24 hours.
This phase is NOT LIVE YET. Full recruiter integration, data processing agreements, and opt-out workflows will be communicated before any recruiter data is shared.
9. Cookies and Analytics
axessgen uses the following tracking and analytics services:
- Essential cookies (authentication, session management) - Managed by Supabase. Required for the Service to function. No user consent needed.
- Google Analytics (anonymized usage statistics) - We track page views, feature usage, and user journeys to understand how the Service is used and improve it. Google Analytics data is anonymized and does not identify individuals. You can opt out using Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Google Search Console (site performance, indexing) - We track how the axessgen website appears in Google Search results. Search Console data is subject to Google's privacy terms.
- Attribution Pixels (referral tracking) - If you arrive at axessgen via a referral link (e.g., axessgen.com/r/partner-name), we log the referral source to measure channel effectiveness. This does not track you across other websites.
We do not use advertising cookies or third-party tracking cookies. We do not sell your data to advertisers.
10. Data Security
We implement industry-standard security measures including:
- Encryption in transit (HTTPS/TLS for all data in motion)
- Row-level security in our database (you can only access your own records)
- Secure authentication practices (password hashing, OAuth)
- Regular security audits and monitoring
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. If you suspect a security breach, contact support@axessgen.com immediately.
11. US State Privacy Rights (California / CCPA)
For users in the United States (including California residents under the California Consumer Privacy Act / CCPA and similar state laws):
- We do not sell your personal data to third parties
- We do not share your data for targeted advertising purposes
- You have the right to know what personal data we hold about you
- You have the right to request deletion of your data
- You have the right to opt out of any sale or sharing (we do not conduct any)
To exercise these rights, contact us at support@axessgen.com.
12. Children
The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 16. If we learn that we have inadvertently collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@axessgen.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. Your continued use of axessgen after updates take effect constitutes acceptance of the revised policy. We will notify you of any significant changes that affect your rights or our use of your data.
14. Contact
For privacy-related inquiries, contact us at support@axessgen.com. We will respond within 30 days.
15. Data Protection Authority Contacts
If you have concerns about our privacy practices, you can file a complaint with your national data protection authority: