Privacy Policy

This Privacy Policy explains the policies of https://owlapply.com on the collection, use, disclosure and protection of personal data we collect when you access https://owlapply.com (the "Service"). This Privacy Policy defines and describes your privacy rights and how you are protected under applicable privacy laws.

By using our Service, you are consenting to the collection and use of your personal data in accordance with this Privacy Policy. Please do not access or use our Service if you do not consent to the collection and use of your information as outlined in this Privacy Policy.

What information do we collect, for what purposes, and on what legal basis.

The definitions of legal basis used below are understood as follows:

• Legitimate interest: interest of the Company or of a third party, provided that your interests or the fundamental rights and freedoms are not overriding, and such use of your persona; details balanced against your human rights and freedoms.
• Contract performance: processing your personal data where it is necessary for the performance of a contract to which you are a party or to take pre-contractual measures before entering such a contract.
• Legal Obligations: processing your personal data where it is necessary for compliance with a legal or regulatory obligations that we are subject to.
• Consent: your consent shall mean any freely given, specific, informed, and unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify your agreement to the processing of personal data relating to you. We can request your consent for processing when we do not have another legal basis for processing your data.

Usage Data.

What We Collect: Information on how users interact with our website or application, including pages visited, time spent on pages, click paths, and browser details.
Purpose: To analyze user behavior, optimize performance, and enhance the user experience.
Retention Period: 365 days
Legal Basis: Legitimate Interests

Personal Identification Information.

What We Collect: Full Name, Email Address, Mobile Phone Number, Social Media Profiles
Purpose: To manage user accounts, support secure access, and provide personalized content.
Retention Period: Until Account Deletion
Legal Basis: Contractual Necessity

Payment & Financial Information.

What We Collect: Billing Information, Transaction History
Purpose: To securely process transactions and maintain compliant financial operations.
Retention Period: 3650 days
Legal Basis: Legal Obligation

Online Identifiers & Device Information.

What We Collect: IP Address, Browser Type and Version, Operating System
Purpose: To secure our platform, optimize performance, and understand technical usage.
Retention Period: 365 days
Legal Basis: Legitimate Interests

Location Data.

What We Collect: Geolocation (GPS coordinates, location based on IP)
Purpose: To personalize experiences and services based on your location.
Retention Period: 365 days
Legal Basis: Consent

Demographic Data.

What We Collect: Gender, Education Level
Purpose: To tailor services and marketing campaigns.
Retention Period: 3650 days
Legal Basis: Consent

Communication Data.

What We Collect: Customer Support or Inquiry Messages, Chat Logs, Email Correspondence
Purpose: To provide customer support and maintain a record of correspondence.
Retention Period: 730 days
Legal Basis: Legitimate Interests

Preferences and Behavioral Data.

What We Collect: User Interests and Preferences
Purpose: To personalize recommendations, ads, and content.
Retention Period: 365 days
Legal Basis: Legitimate Interests

Professional Information.

What We Collect: Job Title, Company Name, Work Email
Purpose: To support business relationships and tailor content to professional users.
Retention Period: 3650 days
Legal Basis: Contractual Necessity

User-Generated Content.

What We Collect: Uploaded CV, Cover Letters, Documents
Purpose: To foster user engagement and display feedback.
Retention Period: 3650 days
Legal Basis: Consent

Consent and Legal Documents.

What We Collect: Cookie consent, Agreements
Purpose: To fulfill legal and regulatory obligations.
Retention Period: 1825 days
Legal Basis: Legal Obligation

Browser Extension Data.

What We Collect: Job posting text (title, description, requirements, company information), page URLs of job listings, and form field labels from job application pages. This data is collected by our Google Chrome browser extension when activated on third-party job listing websites.
Purpose: To provide AI-powered job analysis, skill matching, resume optimization, form auto-fill, cover letter generation, and career coaching features.
Retention Period: Session-based processing; job posting data is not permanently stored after analysis is complete.
Legal Basis: Contractual Necessity

How do we obtain your Personal Data.

We collect information you provide directly to us when you:

• Fill in any forms
• Use our Services
• Use our browser extension on third-party job listing websites (job posting text, page URLs, and form field labels are extracted and transmitted to our servers for AI processing)
• Correspond with us
• Contact us for other reasons

We may also obtain your personal data from other legitimate sources:

• We may receive personal data from entities with which we collaborate

Requirements to Provide Personal Data:

In certain cases, the provision of personal data is either a legal or contractual requirement, or a requirement necessary to enter into a contract.
Contractual requirement: Name, email, payment info
If you do not provide the requested data: User cannot register an account.

How do we share your information.

Self Hack Oy may disclose your personal data to the recipients of the following categories:

• With your consent. Self Hack Oy will share your information for any purpose with your explicit consent.
• For transfers of business. Your information will be shared in the event of connection, negotiation, merger, sale of business assets, financing, or acquisition of all or a portion of our business with another company.

We do not transfer personal data to any third countries outside the European Economic Area (EEA).

Data Subject Rights.

You have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): Under certain conditions, you may request the deletion of your personal data.
• Right to Restrict Processing: You can request the limitation of processing of your personal data under specific circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another controller
• Right to Object: In some cases, you may object to the processing of your personal data.
• Right to be Informed: You have the right to be provided with clear, transparent and easily understandable information about how we process your personal data.

Withdrawal of Consent:

In accordance with Article 13(2)(c) of the GDPR, you have the right to withdraw your consent to the processing of your personal data at any time. As a visitor to this website, you can easily adjust or withdraw your consent directly via the consent banner provided on the site. Alternatively, if you prefer, you may contact the website operator using the contact details provided in this privacy policy. Please note that withdrawing your consent does not affect the lawfulness of any processing carried out before your withdrawal.

To exercise these rights, please contact us at [email protected].

We will exercise your rights only after receives your written request to exercise a particular right indicated above and only after confirming the validity of your identity.

Your requests shall be fulfilled, or fulfilment of your requests shall be refused by specifying the reasons for such refusal, within one month from the date of submission of the request meeting our internal rules and GDPR. The period may be extended by two further months if the request is related to a great scope of personal data or other simultaneously examined requests. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. A response to you will be provided in a form of your choosing as the requester.

We may refuse to satisfy your request if the exceptions and/or limitations to the exercise of data subjects' rights set out in the GDPR apply, and/or if your request is found to be manifestly unfounded or disproportionate. If we refuse to satisfy your request, we will give you our reasons for such refusal in writing.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a competent supervisory authority, if you believe that your personal data is processed in a way that violates your rights and legitimate interests stipulated by applicable legislation. You may apply in accordance with the procedures for handling complaints that are established by Office of the Data Protection Ombudsman of the Republic of Finland and which may be found by this link: http://www.tietosuoja.fi/en/.

Please note that, although no system of technology is completely secure, we have to implement appropriate security measures in order to minimize the risks of unauthorized access to or improper use of your personal information.

Security

Please note that, although no system of technology is completely secure, we have to implement appropriate security measures in order to minimize the risks of unauthorized access to or improper use of your personal information.

• We and our third-party service providers that may be engaged in the processing of personal data on our behalf (for the purposes indicated above) are contractually obligated to respect the confidentiality of the personal data.
• We implement reasonable security practices and procedures to help protect the confidentiality and security of your information, including any non-public personal information. We protect your information using reasonable physical, technical, and administrative security measures, including by limiting access to your information to employees with a need to know such information.

Changes to this policy

We regularly review this Privacy Policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes will take effect immediately upon their publication on our Website.

Please review this Privacy Policy from time to time to stay updated regarding any changes.

Contact Us

For any questions, please contact us through the following methods:

• Name: Self Hack Oy
• Address: Lapinlahdenkatu 16, Helsinki, Filand
• Email: [email protected]
• Website: https://owlapply.com

For any queries or concerns you have related to the processing of your information, you may contact our Privacy Officer at Tufan Yavaş, [email protected] .