Privacy Policy

Last updated: 22nd of March 2026
Company: SlashHash B.V. – KVK 97824216

Introduction

This Privacy Policy explains how SlashHash B.V. ("we," "us," or "our") collects, uses, stores, and protects personal data when you use our website, app, and services (the "Platform"), including AI-powered job search and career guidance features. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

By using our Platform, you consent to the processing of your personal data as described below.

1. Definitions

• Website: [insert website URL]
• App: SlashHash mobile or desktop applications, including updates and features.
• Platform: Collectively refers to the Website and App.

2. Personal Data We Collect

We may collect, use, and store the following categories of personal data:

• Identity Data: First name, last name, email address, address, date of birth, telephone number.
• Contact Data: Address, email address, telephone number.
• Engagement Data: How you use our Platform, jobs viewed/applied for, interview feedback, messages sent/received.
• Profile Data: Username, password, CV/resume, interests, feedback, education, work history, languages, salary information (if provided), job preferences.
• Technical & Usage Data: IP address, login data, browser type/version, operating system, device information, time zone, location, browser plug-ins, pages visited, Platform interactions.
• Marketing & Communications Data: Your communication and marketing preferences.
• Special Categories of Data: Ethnicity, sexual orientation, gender identity. You provide this data with explicit consent.
• Aggregated Data: Statistical or demographic information derived from your personal data, anonymized so you cannot be identified.

3. How We Collect Personal Data

• Direct interactions: Information you provide via forms, emails, messages, or support requests.
• Automated technologies: Technical and usage data collected via cookies, device interactions, or AI chat features.
• Third parties and public sources: Employers using our Platform, LinkedIn, and other publicly available sources.

4. Legal Bases for Processing

We process your personal data under the following GDPR legal bases:

Note: We may process data for multiple legal bases depending on the purpose.

5. AI and Automated Processing

Our Platform includes AI features, including a large language model (LLM) by OpenAI:

• Chat inputs are processed to provide job guidance, resume analysis, and role recommendations.
• Chat inputs are encrypted at rest, stored only in the EU, and not used to train external AI models.
• Messages may be stored and reviewed to improve the Service.

By using the AI chat, you consent to this processing.

6. Failure to Provide Personal Data

Where personal data is required by law or to perform a contract with you (e.g., providing your CV, contact info, or using AI chat), failure to provide such data may prevent us from providing certain services. We will notify you if this is the case.

7. Data Security

• Encryption at rest: All personal data is encrypted using unique per-user encryption keys. When you delete your account, the keys are destroyed, making the data permanently inaccessible.
• Data in transit: All data transmitted between your device and our Platform is encrypted via TLS.
• Data location: All personal data is stored within the European Economic Area (EEA).

Access is limited to authorized personnel, who process data only on our instructions and are bound by confidentiality agreements. We have procedures for data breach detection, reporting, and response.

8. Cookies

We use cookies and similar technologies to enhance functionality, analyze usage, and provide personalized content. Non-essential cookies are set only after consent. You may manage or withdraw consent via our cookie settings.

For more information, see our Cookie Policy.

9. Disclosures of Your Personal Data

We may share your personal data with:

• Employers: Third parties using our Platform to select and recruit candidates.
• Service providers: IT, software, system administration, analytics, and AI providers (acting as processors).
• Professional advisers: Lawyers, auditors, bankers, insurers.
• Legal authorities: Where required by law.
• Business transfers: In the event of a merger, sale, or acquisition.

All third parties must process data in compliance with GDPR and only for specified purposes.

10. International Transfers

We do not transfer data outside the EU/EEA without appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions.

11. Data Retention

We retain personal data only as long as necessary for contractual, legal, regulatory, or business purposes. Data may be anonymized for research or statistical purposes indefinitely.

12. Your Rights

Under GDPR, you have the right to:

• Access, correct, or erase your data
• Object to or restrict processing
• Request portability of your data
• Withdraw consent
• Lodge a complaint with a supervisory authority

Requests are usually processed within one month, and we may request information to verify your identity. No fee is required unless requests are clearly excessive or repetitive.

13. Opting Out of Marketing

You can withdraw consent to marketing communications at any time via unsubscribe links or by contacting us at privacy@slashhash.ai.

14. Change of Purpose

We will only use personal data for the purposes described, unless we reasonably consider a compatible purpose. If we process your data for a new purpose, we will notify you.

15. Contact Us

For questions or to exercise your rights:

SlashHash B.V.
Email: privacy@slashhash.ai
KVK: 97824216
Address: [Insert company address]