Privacy Policy

Who we are

Rocketlist ("we", "us", "our") is a job matching service operated from Germany. We connect candidates with job opportunities at startups and tech companies using AI-powered matching.

Contact: hello@rocketlist.ai

What data we collect

We collect the following categories of personal data:

• Account data: email address, name (when you sign up via Google or email)
• Profile data: job preferences, skills, experience, desired salary range, preferred locations, and other information you provide during onboarding or profile setup
• LinkedIn/resume data: if you upload a resume or connect LinkedIn, we extract professional information (work history, skills, education) to build your match profile
• Usage data: pages visited, jobs saved, search queries, and interaction patterns (collected via PostHog analytics)
• Technical data: IP address, browser type, device information, collected automatically

How we use your data

• Job matching: we process your profile data to calculate match scores against available job listings (Art. 6(1)(b) GDPR, contract performance)
• Service improvement: we analyze aggregated usage data to improve our matching algorithms and user experience (Art. 6(1)(f) GDPR, legitimate interest)
• Communication: we send service-related emails such as match notifications and account updates (Art. 6(1)(b) GDPR, contract performance)
• Security: we process technical data to protect against fraud and abuse (Art. 6(1)(f) GDPR, legitimate interest)

AI-powered matching

We use AI models (including Google Gemini and OpenAI) to enrich job listings and process your profile for matching purposes. Your profile data may be sent to these AI providers for processing. No automated decisions with legal effects are made solely based on AI processing; match scores are informational and do not determine your eligibility for any position.

Third-party services

We use the following third-party services that may process your data:

• Supabase (database hosting, authentication) – EU region
• Vercel (website hosting) – edge network, global
• PostHog (analytics) – EU region (eu.posthog.com)
• Sentry (error monitoring) – EU region
• Google (authentication via Google Sign-In, Gemini AI for job enrichment)
• OpenAI (embedding generation for skill matching)

Data retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion.
• Profile and matching data: retained while your account is active. Deleted within 30 days of account deletion.
• Usage/analytics data: retained for up to 12 months, then anonymized or deleted.
• Technical logs: retained for up to 90 days for security purposes.

Your rights (GDPR)

Under the GDPR, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate personal data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: request we limit processing of your data in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at hello@rocketlist.ai. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or place of work.

Cookies

We use essential cookies for authentication and session management. We use PostHog for analytics, which sets cookies to understand usage patterns. You can control cookies through your browser settings.

Data transfers

Some of our service providers are located outside the EU/EEA (Vercel, OpenAI). Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Children

Rocketlist is not intended for users under 16. We do not knowingly collect data from children under 16.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes via email or a notice on our website.

Contact

For privacy-related questions or requests, contact us at hello@rocketlist.ai.