Privacy policy
for robojob.app · Last updated: 13 October 2026 · This is a translation for your convenience; the German version is the binding one.
In short: RoboJob processes your data to find jobs that fit you and to write and send applications. For this we store your account, your CVs, your Robos and your applications. The AI runs on our own computers; your data goes to no AI provider and is not used to train AI models. You pay for credits at our payment provider Mollie; we never see your payment details. There is no advertising, no analytics or tracking and no content from third parties; we only set the two cookies the service needs to work.
1. Controller
neocor cloud UG (haftungsbeschränkt)
Kleinbocka 21a, 07589 Bocka, Germany
Represented by: Heike Günther
Email: · Phone:
We are not required by law to appoint a data protection officer. For questions about data protection, please write to the email address above.
2. Hosting and server log files
RoboJob runs on a server of Contabo GmbH, Aschauer Straße 32a, 81549 München, in Germany. We have a data processing agreement with the provider according to Art. 28 GDPR. The database and all data of your account are on this server as well.
When you open the website, the web server automatically processes the following data: IP address, date and time of the request, the page or file requested, the amount of data transferred, the HTTP status code, the referrer URL, and the browser type and operating system (user agent).
Purpose: delivering the website, keeping it stable and secure, and detecting and fending off attacks.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and working service).
Storage period: log files are deleted automatically after 14 days.
3. Cookies
RoboJob sets only two cookies, both over HTTPS only and not readable by scripts:
- __Host-robojob (session): keeps you logged in and protects forms against misuse. It is deleted when you close the browser; the session also ends after two hours without activity or when you log out.
- lang (language): remembers the language you chose at the bottom of the page. It is only set when you switch the language and expires after 12 months.
Both cookies are strictly necessary for the service you asked for (§ 25 (2) no. 2 TDDDG), so no consent is needed. The processing involved is based on Art. 6 (1) (b) and (f) GDPR. We use no cookies for analytics or advertising. Mollie's payment page has its own cookie rules (section 9).
4. Your account
For an account we store your name, your email address, your password (only as a secure hash, Argon2id), your language and the job fields you want jobs from. We send you the emails the account needs (confirming the address, resetting the password, confirming purchases); the links in them expire and are deleted at the latest 7 days after expiry.
Against automated sign-ups we use our own security check (an image with characters, generated on our server, without third-party services). To protect against misuse (e.g. guessing passwords) we store the email address and IP address with the time for logins, sign-ups and similar actions; these entries are deleted after one day.
Legal basis: Art. 6 (1) (b) GDPR (contract of use); for the protection against misuse Art. 6 (1) (f) GDPR (legitimate interest in a secure service).
5. CVs and AI analysis
When you upload a CV, we store the PDF file, the text read from it and a summary of your profile written by an AI model (e.g. work experience, skills, education). The summary is used to select and rate jobs that fit.
The AI models (open-source models run with Ollama) run on our server and on computers owned by neocor cloud UG in Germany. The connection between the server and these computers is encrypted end to end (WireGuard via Tailscale); the provider of this network service, Tailscale Inc. (USA), only receives technical connection data of our devices, not your data. Your data is not passed on to AI providers and is not used to train models.
Please only upload details you want to use for applications. If your CV contains special categories of personal data (e.g. about your health, a severe disability or your religion), we process them only to provide the service to you, based on your explicit consent (Art. 9 (2) (a) GDPR), which you give by ticking the box when uploading; we store the time as proof. You can withdraw your consent at any time with effect for the future by deleting the CV.
Legal basis: Art. 6 (1) (b) GDPR. Storage period: until you delete the CV or your account.
6. Robos, job postings and applications
Every day, a Robo compares new job postings with your CV and rates how well they fit. If you wish, RoboJob writes a cover letter for jobs that fit; for this the AI model uses your CV, the posting and the details in your application settings (e.g. expected salary, earliest start, notes).
Applications are only sent when you send them yourself or have switched on automatic sending for a Robo. They go by email through the mail server of united-domains GmbH, Gautinger Straße 10, 82319 Starnberg (processor according to Art. 28 GDPR), from a sender address at robojob.app to the employer's contact person and to the copy recipients you entered. If you wish, your CV is attached. We keep a copy of every sent application in our mailbox. The recipients are thus the employers you apply to; they are responsible for their own further processing.
The AI's ratings and texts are suggestions. We make no automated decision within the meaning of Art. 22 GDPR; the employer decides on your application.
Legal basis: Art. 6 (1) (b) GDPR. Storage period: ratings and applications not yet sent are deleted with the Robo, jobs that were not shortlisted automatically after a few days; sent applications stay stored for your report and your record until you delete your account.
7. Answers from employers
Answers to your applications go to the sender address at robojob.app and arrive in our mailbox at united-domains GmbH. RoboJob reads this mailbox automatically, assigns each answer to its application and stores the sender, subject, text, the names of attachments and the date, so you see them in your report.
Legal basis: Art. 6 (1) (b) GDPR. Storage period: until you delete your account.
8. Record for the Agentur für Arbeit
When you create the record of your application activities as a PDF, we store your first and last name for it and, if you enter them, your customer number and your date of birth, as well as the result you choose for an application. The PDF is only created for you; we send nothing to the Agentur für Arbeit.
Legal basis: Art. 6 (1) (b) GDPR. Storage period: until you change the details or delete your account.
9. Buying credits and payment
When you buy credits, we send you to the payment page of Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Mollie handles the payment as a controller in its own right and processes your payment details for it (e.g. name, bank account or card details, IP address); Mollie's privacy policy applies to this (mollie.com/en/privacy). We only send Mollie the amount, a description of the pack and an internal number of the purchase, not your name or email address. We neither see nor store your payment details.
For each purchase we store the pack, the amount, the status and type of payment, Mollie's payment reference and the times, and for your balance every credit added and every application that used one. After the purchase we email you a confirmation with the receipt, the terms of use and the cancellation policy.
Legal basis: Art. 6 (1) (b) GDPR (purchase contract) and, for keeping the records, Art. 6 (1) (c) GDPR with § 147 AO and § 257 HGB (German tax and commercial law). Storage period: the purchase details are accounting records and are kept for 8 years, also if you delete your account before (then without a link to your account); the list of credits added and used is deleted with your account.
10. Data of employers' contact persons
This section is for people named as contact persons in job postings (Art. 14 GDPR). We process the contact details given for the contact person in fully publicly accessible job postings (name, salutation, email address, phone number, the employer's address). We show them to our users with the job, use the email address to deliver applications for this job, and assign answers from this address to the application.
Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest and that of our users is to apply for published jobs through the contact given for them. The data is deleted when it is no longer needed for applications; details of sent applications stay stored in the respective user's account until they delete it.
You can object to this processing at any time (Art. 21 GDPR). Write to ; we will then block your address for all further applications through RoboJob.
11. Recipients and third countries
Apart from us, only our processors (Contabo GmbH for hosting, united-domains GmbH for email), Mollie B.V. when you buy credits (section 9) and the employers you apply to receive your data. Beyond that we do not pass your data on to third parties unless we are legally required to. Your data is processed in Germany, and by Mollie in the EU; we do not transfer it to countries outside the EU or EEA unless you apply to an employer based there.
12. Deleting your account
You can delete CVs, Robos and application drafts yourself at any time. You delete your account in the settings under "Delete account": after you enter your password, we email you a confirmation link, and after a last confirmation the account is deleted right away with all its data (CVs, Robos, applications, answers, settings, credits). The copies of your applications and the answers to them in our mailbox are deleted automatically within a few minutes; answers that still arrive afterwards are deleted automatically for 30 days as well. Server log files are deleted after 14 days (section 2), purchase details when the retention period ends (section 9). You can also write to , and we delete your account for you.
13. Your rights
You have the right at any time to:
- access the data we store about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to the processing (Art. 21 GDPR)
- withdraw a consent you gave, with effect for the future (Art. 7 (3) GDPR)
Just write to .
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt, Germany, www.tlfdi.de.
14. Data security
RoboJob is only transmitted encrypted over HTTPS (TLS); we send and read emails encrypted (TLS), and the connection to Mollie is encrypted too. We store passwords only as a hash. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.
15. Changes
We update this privacy policy when RoboJob or the legal requirements change. The version published here applies.