Privacy Policy

Last updated: April 2026 · German version: Datenschutzerklärung

1. Controller / Responsible Party

The data controller responsible for this website is:

Sven Bunkus
Einzelunternehmer (Sole Proprietor)
Kolonnenstr. 8, 10827 Berlin, Germany
Email: placedai@polsia.app

VAT ID: DE316284323 · Tax No.: 14/247/03627

2. What Data We Collect

2.1 Data You Provide

When you use PlacedAI's profile analysis service, we process:

• Resume / profile text you paste into the analyzer
• LinkedIn profile text if you paste it
• Target role you optionally enter
• Session ID — a randomly generated identifier stored in your browser's localStorage to link your analyses across visits

We do not require you to create an account, provide your name, or give us your email address to use the core analysis feature.

2.2 Data Collected Automatically

When you visit our website, our server and third-party tools may automatically record:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Pages visited and time of visit
• Referring URL

3. Purpose and Legal Basis (GDPR Art. 6)

• Providing the analysis service — Legal basis: Contract performance (Art. 6(1)(b) GDPR)
• Improving our AI models and service quality — Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). We may use anonymised, aggregated data to improve the service.
• Server logs / security — Legal basis: Legitimate interests (Art. 6(1)(f) GDPR)

4. AI Processing & Anonymization

Your profile is anonymized before any AI processing. Before the text you submit leaves our servers, we strip personal identifiers — including names, email addresses, phone numbers, and physical addresses — and replace them with neutral placeholders (e.g., [NAME], [EMAIL], [PHONE], [ADDRESS]). Only anonymized career content (job titles, skills, achievements, dates) is transmitted to our AI provider.

The original, non-anonymized text is retained on our servers solely to return results to you and is subject to the data retention policy in Section 5. It is never shared with our AI provider or any third party.

Anonymized profile content is sent to our AI provider for analysis. This is the core functionality of the service. The anonymized content is processed to generate career feedback and is not used to train AI models under our current provider agreements.

By submitting your profile text, you consent to this processing. You can withdraw consent at any time by deleting your analyses via the History page.

5. Data Retention

• Analysis results are stored linked to your session ID for up to 12 months, after which they are automatically deleted.
• You can delete individual analyses at any time via the History page.
• You can also request deletion of all your data by emailing placedai@polsia.app.
• Server logs are retained for up to 30 days for security purposes.

6. Data Sharing and Third Parties

We share your data with the following third parties solely to provide our service:

• AI Analysis Provider (via OpenRouter) — Only anonymized career content (with all personal identifiers stripped) is transmitted to run the analysis. No names, emails, phone numbers, or addresses are ever sent to this provider. See OpenRouter Privacy Policy.
• Render Inc. — Hosting provider (US). Our server and database run on Render's infrastructure. See Render Privacy Policy.
• Neon Inc. — Database provider (US). Analysis results are stored in a PostgreSQL database managed by Neon. See Neon Privacy Policy.
• Google Fonts — Fonts are loaded from Google's CDN. This may result in your IP being transmitted to Google. See Google Privacy Policy.
• Meta Platforms Ireland Ltd. — We use the Meta Pixel for anonymised advertising measurement. Only aggregated, anonymised event data (e.g. page views) is shared. See Meta Data Policy.

We do not sell your data to any third party.

7. International Data Transfers

Our hosting and AI providers are based in the United States. Data transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission under Art. 46 GDPR.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — request a copy of your personal data (Art. 15)
• Rectification — correct inaccurate data (Art. 16)
• Erasure — request deletion of your data (Art. 17). You can self-service delete analyses via the History page.
• Restriction — restrict processing (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Objection — object to processing based on legitimate interests (Art. 21)

To exercise any of these rights, contact: privacy@placedai.com

You also have the right to lodge a complaint with the supervisory authority in your country of residence. In Germany, this is the relevant Landesdatenschutzbehörde.

9. Cookies and Local Storage

PlacedAI does not use tracking cookies. We use browser localStorage to store:

• placedai_sid — your anonymous session ID (required for session history and analytics)
• placedai_lang — your language preference (en/de)
• placedai_consent — your cookie consent preferences
• auth_token — your signed-in session (if you create an account)

These are strictly necessary for the service to function and do not require consent under the ePrivacy Directive. You can clear them at any time via your browser settings.

Analytics beacon: We use a first-party analytics system to collect anonymised visit statistics. Data collected includes: page path, referrer domain, device type, session ID, and UTM parameters. No personal data (names, emails, profile text) is transmitted. A randomly generated visitor ID is stored in localStorage. This helps us understand aggregate usage without tracking individuals.

Funnel event tracking: To measure conversion rates across the product funnel (landing page → analysis start → result view → purchase), we record anonymised events when you interact with the service. Events include: the page you visited, interaction type (e.g. "CTA clicked", "analysis started"), device type, and UTM parameters. No profile content, email addresses, or names are ever included in event data. This tracking is only activated when you give explicit analytics consent via the cookie banner.

Meta Pixel (Facebook): This website uses the Meta Pixel to measure the effectiveness of our advertising. The pixel collects anonymised event data (e.g. page views). Meta Ireland Limited processes this data in accordance with their Data Policy. If you have a Facebook account, Meta may associate this data with your profile. Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact

For privacy-related inquiries:

Tobias Holst
Email: privacy@placedai.com