Privacy Policy

Last updated: October 12, 2026

Who we are

Covesight is operated by Thomas Reinhardt, Solstice Tower 2, 1207 Makati, Philippines ("we"). Contact: hello@covesight.com.

What data we process, and why

• Contact data (your email address): to deliver your letters and the other emails described in this policy, and to manage your subscription. Legal basis: consent for the free daily letter (Art. 6(1)(a) GDPR, given via double opt-in when you sign up and confirm by email), contract performance for paid plans (Art. 6(1)(b) GDPR). If you answer the questions and do not pick a plan, see that item below.
• Alert profile data (the answers you give to the questions on our website: country, timezone preferences, regions or countries you rule in or out, languages, target roles, seniority, a minimum salary if you add one in your account, and an optional note on what makes a job a fit or a dealbreaker): used exclusively to match and rank jobs for you. Legal basis: consent and, for Plus, contract performance. We never sell or share this data, and never use it for advertising.
• Resume or LinkedIn profile export (PDF): optional when you answer the questions. We store the file itself, transfer it (together with any optional "anything else" notes you add) to our processing server, and process it ONCE, at signup (and again if you later upload a new resume or update your notes), with Anthropic's Claude API to extract skills, role signals, and stated preferences into your matching profile. The file, your notes, and the extracted signals are used exclusively to match and rank jobs for you; we never use them for advertising, and Anthropic does not use data sent through its API to train its models. Legal basis: consent and, for Plus, contract performance.
• If you answer the questions and do not pick a plan: we keep your email address, your answers, your resume and whether you ticked "Send me an offer now and then". We use your answers and resume to find your matches and your email address to send you one letter with them. If you ticked the offers box, we may also email you an offer now and then. If you start a plan on our website and it later ends, we email you one offer. Legal basis: consent (Art. 6(1)(a) GDPR) for the answers, the resume, the letter and the offers you tick; legitimate interest (Art. 6(1)(f) GDPR) for the one offer after a plan ends. How long we keep this data is explained under Storage and retention.
• Sign-in data: you sign in with a one-time code we email you, or with Google, Apple or LinkedIn. When you use one of those, the provider sends us only your verified email address and your name, which we use to find or create your Covesight account (the same account on the website and in the app). We receive no password, no contacts, no posts, and we never post or act on your behalf. Legal basis: contract performance (Art. 6(1)(b) GDPR).
• Payment data: processed by Stripe. We never see your full card details. See Stripe's privacy policy.
• Partner referrals: if you arrive through a link from a Covesight partner, we store that partner's code and the time of your visit in a cookie for up to 365 days. If you then answer the questions, we also keep that code and the time with your answers until they are deleted. If you then create a Covesight account, we record which partner referred you, so we can pay them their share of what you pay. Partners see counts and amounts only, never your name or email address. Legal basis: legitimate interest in paying our partners correctly (Art. 6(1)(f) GDPR).
• Partner applications: we store what you send us when you apply to become a partner (your name, email address, links and notes) to review your application. If you join, we also store your payout details to pay you. Legal basis: contract performance (Art. 6(1)(b) GDPR). To limit repeated applications, we keep a one-way hash of your IP address. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
• In-app subscriptions: if you subscribe in the iPhone or Android app, Apple or Google handles the payment under their own terms. RevenueCat tells us which plan your account has and when it renews or ends; we receive no card details. Legal basis: contract performance (Art. 6(1)(b) GDPR).
• Push notifications (app, optional): if you allow notifications, we store your device's push token and basic device details (platform, model, app version, language and time zone) to send you your matches. Expo delivers the messages. You can turn them off at any time in the app or in your phone's settings. Legal basis: consent (Art. 6(1)(a) GDPR).
• Product analytics (website and app): we use PostHog to understand how people use Covesight: which pages and app screens are opened, when the app is opened or closed, and whether a sign-up, a checkout or a subscription purchase was started, completed or cancelled, so we can see where people get stuck. PostHog receives a random identifier stored in your browser or on your device, basic browser or device details (such as browser or phone model, operating system, app version, language and time zone), the page or screen, and your IP address, from which it derives an approximate location (country and city). When you are signed in, these events are linked to your Covesight account ID, so your use of the website and the app is counted once. We never send PostHog your email address, your name, your resume, your answers to the job questions or your searches. We use the results only to improve Covesight, never for advertising, and we never sell them. PostHog processes this data for us in the United States. Legal basis: legitimate interest in understanding and improving the service (Art. 6(1)(f) GDPR).
• Email delivery data: our email provider processes your address to deliver digests, the confirmation email for the free letter and the other emails described in this policy.
• Leaving feedback (optional): if you unsubscribe from the letter, you can tell us why with one tap or a short note; that answer is stored with your unsubscribe record. In the app, before you manage your subscription or delete your account, you can pick one reason or skip; that choice is recorded as an analytics event (see Product analytics). Answers are used only to improve the service, and leaving the question blank changes nothing. Legal basis: legitimate interest in improving the service (Art. 6(1)(f) GDPR).

Storage and retention

Your signup and alert profile are stored with Cloudflare and on our own server infrastructure. Your resume or LinkedIn export is stored as a file in Cloudflare R2, and a copy is transferred to our processing server to build your matching profile. Profile and resume data are retained while your alert or subscription is active. If you cancel or unsubscribe, we delete your matching profile and stored resume within 30 days. You can request immediate deletion of your profile and resume at any time by emailing hello@covesight.com, or withdraw your consent with effect for the future by using the unsubscribe link in any email we send you or, if the link does not work for any reason, by replying "unsubscribe" to that email.

If you answer the questions but do not confirm the free letter or start a plan, we delete your answers and your resume 90 days after the last time you answered the questions, asked for the free letter or signed in. If you have an account, it keeps its own profile and resume while it exists (see below). After that we keep only a short record: your email address, when you answered the questions, when and where you stopped, whether you ticked the offers box, the date we deleted your answers, and whether we have sent you the letter and the offer. Legal basis: legitimate interest in not emailing you twice, keeping your choices and improving our website (Art. 6(1)(f) GDPR). We keep this record until you ask us to delete it by emailing hello@covesight.com.

Your account and app data (your answers to the job questions, saved jobs and registered devices) are stored in our database, hosted by Neon, and on our own server infrastructure while your account exists, and deleted when you delete your account. When you delete your account or ask us to, we also delete your analytics history in PostHog.

Your rights (GDPR)

You have the right to access, rectify, delete, restrict and port your data, and to object to processing. Email hello@covesight.com; we respond within 30 days. You may also lodge a complaint with your supervisory authority.

Processors

Stripe (payments), Cloudflare (website hosting, signup form backend, profile storage, and resume file storage), Resend (email delivery), Anthropic (processes your resume and any dealbreaker notes once, at signup, to extract matching signals), Neon (database hosting for accounts and app data), PostHog (product analytics on the website and in the app), RevenueCat (in-app subscription status), Expo (push notification delivery), Google, Apple and LinkedIn (sign-in, when you choose one of them). PayPal and Wise send payments to our partners. Apple and Google also handle in-app payments in the App Store and Google Play under their own terms. A data processing agreement or the provider's standard data processing terms apply to each.

Cookies and similar storage

The website stores a random analytics identifier for PostHog in a first-party cookie and in your browser's local storage (see Product analytics above), and, when you sign in, cookies that keep you signed in. If you arrive through a partner link, a cookie holds that partner's code for up to 365 days (see Partner referrals above). When you finish the questions, your browser keeps the email address you typed until you close the tab, so the plans page can send you the free letter's confirmation link and the checkout can fill in your email address when you sign in. The app stores the same kind of random analytics identifier on your device. We use no advertising or cross-site tracking cookies. If you pick a light or dark theme, the website remembers your choice in your browser's local storage and the app remembers it on your device. It is not saved to your account.