easy-job.ai
AI-powered job application assistant. Land your dream job faster.
Privacy Policy
Last updated: 28.03.2026
1. Guest use, accounts & what we process
1.1 Guests (no account)
- No registration required to generate quizzes (within limits) or to join multiplayer rooms
- We use strictly necessary technical data (e.g. IP address, cookies/session identifiers where needed) for security, rate limiting, and abuse prevention; retention is limited
- We do not operate Google Analytics or Facebook Pixel in the app shell; AdSense may process data as described in section 3
- Uploaded documents are processed to generate quizzes and are not kept longer than necessary for that purpose
- Multiplayer rooms use codes; display names in a room are functional, not a full profile
- We do not use your quiz content to train our own models
1.2 Registered users (optional account)
If you sign up (e.g. email/password or Google OAuth), we process:
- Account data: e.g. email, name, profile image (if provided by OAuth), internal user ID, password hash (never stored in plain text)
- Country of origin: derived from your IP address during registration (ISO code), used for regional settings and analytics
- Subscription tier: role (e.g. Free / Premium / Scholar) after successful Stripe subscription, for feature gating
- Optional quiz history: limited records of completed quiz attempts linked to your account when you play while logged in, as described in our product
- Session cookies for staying logged in (essential for the service you request)
Legal basis: Art. 6(1)(b) GDPR (contract / steps prior to contract) for account and subscription-related processing; Art. 6(1)(f) GDPR for security and abuse prevention where applicable.
1.3 Public quiz rooms, lobby listing & visibility
When you create a quiz room as public (default for hosts who may use public rooms), the following applies in addition to the information above:
- Discoverability: Public rooms may appear on our Join Quiz lobby page and similar listings so that other users can find and join games without a prior direct link.
- Visible metadata: Depending on the product UI, information such as room title, status, approximate player count, and timestamps may be shown to visitors browsing the lobby.
- Quiz content in the room: After joining, participants typically see the same quiz content (e.g. questions, answer options, images where applicable, explanations if enabled) as part of normal gameplay.
- Player display names: The name you choose (or a default) in a room may be visible to other players in that room and can appear on leaderboards during the session.
- Retention: Active room and game state is stored temporarily (currently about three days), then removed automatically when the room expires.
- Private rooms: If the host creates a private room (feature subject to plan), it is intended not to be listed in the public lobby; access is typically by room code or link only. This reduces casual discovery but anyone who knows the code can still join—treat codes like passwords.
Please avoid uploading or generating quizzes that contain highly sensitive personal data (e.g. health data, internal company secrets) especially when using public rooms or public lobby visibility. We process this data to run the service you request (Art. 6(1)(b) GDPR); for security and abuse prevention, limited technical data may also be processed (Art. 6(1)(f) GDPR) as described elsewhere in this policy.
Contact form: Data you send is used to respond to your request and deleted when no longer needed, unless legal retention applies.
2. Payments via Stripe (subscriptions)
3. Advertising
- Purpose: Display of relevant advertisements to finance the platform
- Legal Basis: Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. f GDPR (legitimate interests)
- Data Processing: Google may use cookies and similar technologies for ad personalization
- Control: You can manage ad preferences through your browser settings or Google's ad settings
- Third-party Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Privacy Policy: policies.google.com/privacy
4. Data Processing by AI and External Service Providers
4.1 AI Service Providers
We use multiple AI service providers for quiz generation. You can select which AI model to use when creating a quiz. The following providers may process your document content (text and, where you upload them, images or PDFs sent to vision-capable models):
- Purpose: AI-powered quiz generation from document content
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
- Website: policies.google.com/privacy
- Purpose: AI-powered quiz generation from document content
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
- Website: anthropic.com/privacy
- Purpose: AI-powered quiz generation from document content
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
- Website: openai.com/privacy
- Purpose: AI-powered quiz generation from document content
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: EU (France) - no third-country transfer required
- Privacy Guarantees: GDPR compliant, no storage/training with your data
- Website: mistral.ai/legal/privacy-policy
Premium / Scholar models: If your subscription includes them, the following models may process your content under the same purpose and legal basis (Art. 6 para. 1 lit. b GDPR) as the free-tier models above, subject to each provider's privacy policy and, for US providers, EU standard contractual clauses where applicable:
- Purpose: AI-powered quiz generation (higher-capability model for subscribers)
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Website: policies.google.com/privacy
- Purpose: AI-powered quiz generation (higher-capability model for subscribers)
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Website: anthropic.com/privacy
- Purpose: AI-powered quiz generation (higher-capability model for subscribers)
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: USA with EU standard contractual clauses
- Website: openai.com/privacy
- Purpose: AI-powered quiz generation (higher-capability model for subscribers)
- Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Data Transfer: EU (France) - no third-country transfer required
- Website: mistral.ai/legal/privacy-policy
Image Quiz (Scholar): For illustrated multiple-choice questions, the service fetches matching images from free external image sources based on quiz context.
4.2 Hosting and Infrastructure
- Purpose: Cloud hosting of our application
- Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)
- Server Location: EU West (Amsterdam, Netherlands)
- Security: SOC 2 Type II, ISO 27001, automatic encryption
- Data Processing Agreement: DPA concluded
- GDPR Advantage: No third-country transfer required
4.3 Privacy Guarantees for All Third-Party Providers
- Conclusion of data processing agreements (Art. 28 GDPR) where applicable
- EU standard contractual clauses for third-country transfers
- Regular security audits and certifications
- Encrypted data transmission (TLS 1.3)
- Purpose limitation of data processing
- No use of your data for training AI models without explicit consent
- Right to deletion is passed on to all data processors
5. Legal Basis
Website operation, security, and rate limiting: Art. 6(1)(f) GDPR (legitimate interests). AI quiz generation (including uploads you initiate): Art. 6(1)(b) GDPR. Multiplayer features including public rooms and lobby listing: Art. 6(1)(b) GDPR (performance of the service you use). Optional account and subscription: Art. 6(1)(b) GDPR. Subscriptions via Stripe: Art. 6(1)(b) GDPR. Advertising (AdSense): Art. 6(1)(a) GDPR (consent where required) and Art. 6(1)(f) GDPR (legitimate interests) where applicable.
6. Your Rights
Where GDPR applies, you have rights of access, rectification, erasure, restriction, portability, and objection as appropriate. If you have an account, contact us at the address below to exercise these rights against us; we will respond within statutory timeframes. Some requests may require verification of identity. You may also contact Stripe or Google (ads) directly where they act as controllers.
7. Your Rights as a Data Subject
7.1 Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether we process personal data concerning you and information about the processing.
7.2 Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate rectification of inaccurate or the completion of incomplete personal data.
7.3 Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data if the data is no longer necessary, you have withdrawn consent, or processing is unlawful.
7.4 Right to Restriction (Art. 18 GDPR)
You have the right to request the restriction of processing in certain circumstances.
7.5 Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data based on legitimate interests.
7.6 Right to Withdraw Consent
If processing is based on your consent, you can withdraw it at any time. The lawfulness of processing before withdrawal remains unaffected.
8. Contact and Exercise of Your Rights
Phone: +4915560907868
Address: Westliche Zwingergasse 8, 94469 Deggendorf, Germany
Account deletion: If you have an account, you can start permanent deletion (including cancellation of an active subscription in Stripe) from your Account page. We email you a confirmation link before any data is removed.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
10. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy to changed legal situations or changes in our services. The current version is available on our website.