Privacy Policy

This policy applies to the MyBlueDoc website at mybluedoc.com and our related applications. It does not cover third-party sites or services we link to, which have their own policies.

We collect the following categories of personal data:

• Account data, such as your email address and, if you sign in with Google, the basic profile details Google shares (your name and email).
• The content you create, including your CV details, vacancy text, profile information, generated documents, and application records. These can include personal data such as employment history, education, and contact details.
• Usage and technical data, such as log data, device and browser information, and your IP address, which we collect to operate and secure the Service.
• Cookies that are strictly necessary to keep you signed in (see “Cookies” below).

Please do not upload special-category data (e.g. health, religion) unless it is necessary for your application.

We use your personal data for the following purposes and legal bases under Article 6 GDPR:

• Providing the Service, such as creating your account, parsing vacancies, scoring fit, and generating and exporting documents. Our legal basis is performance of our contract with you (Article 6(1)(b)).
• Securing and improving the Service, including preventing abuse, debugging, and understanding how it is used. Our legal basis is our legitimate interest in running a safe, reliable product (Article 6(1)(f)).
• Communicating with you, for example service messages about beta updates or changes to these terms. Our legal basis is our contract with you or our legitimate interests.
• Complying with the law, where we have a legal obligation (Article 6(1)(c)).

We do not sell your personal data, and we do not use it for advertising profiling.

To generate AI features, we send the relevant parts of Your Content (such as your CV and the vacancy text) to our AI provider, Google, via the Gemini API. This processing happens only to produce your results.

Your Content is not used by us, or to our knowledge by our AI provider, to train their general-purpose models. AI output can be inaccurate; you should review every result before relying on it.

We use third-party processors to run the Service on our behalf:

We maintain data processing agreements with our processors and only share what they need to perform their role.

Some of our processors may handle data outside the European Economic Area. Where they do, we rely on appropriate safeguards under the GDPR to protect your data, typically the European Commission’s Standard Contractual Clauses (SCCs) together with additional measures where needed.

We keep your personal data for as long as your account is active, so the Service works for you. You can delete individual documents, or close your account, at any time. When you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to comply with a legal obligation or to resolve disputes.

Routine backups may retain copies for a limited period before they are overwritten.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict or object to certain processing;
• data portability, to receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these, email hello@mybluedoc.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We use strictly necessary cookies to keep you signed in and to keep the Service secure. These are required for the Service to function, so they are not subject to consent. We do not use advertising or third-party tracking cookies.

The Service is not directed to children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by a reasonable means before they take effect, and we will update the effective date above.

Questions about your privacy? Contact Future Visuals at hello@mybluedoc.com.