Privacy Policy

Last updated: 2025-12-14

Data Controller

Responsible for processing personal data on this website:

Bytelope AB
Org.nr: 559317-5986
Sweden
Contact Us

Overview

Consultant.dev values your privacy. This policy explains how we collect, use, and protect information when you use our website.

What data do we collect?

We use Cloudflare Web Analytics to collect anonymous website usage statistics:

  • Page views
  • Referrer source (where you came from)
  • Country (based on IP address, the IP address is not stored)
  • Device type (desktop, mobile, tablet)

Cloudflare Analytics does not use cookies or track IP addresses.

Voluntary Information

We collect the following information when you voluntarily provide it:

  • Purchases - Email address provided during checkout is stored in our database to associate with your purchase and provide access to the service

This data is stored securely on Cloudflare infrastructure. You can request deletion at any time by contacting us.

Local Storage

We use browser localStorage to save your preferences:

  • theme - Your chosen theme (light/dark)
  • preferred-locale - Your chosen language
  • privacy-notice-acknowledged - Whether you have seen the privacy notice

This data is not cookies and is never sent to our servers. It stays in your browser.

Why do we collect data?

  • Improve user experience
  • Understand which pages are most visited
  • Optimize website performance

Who do we share data with?

We use the following service providers:

  • Cloudflare - Hosting, CDN, database, and privacy-friendly web analytics. Data is processed according to their privacy policy: cloudflare.com/privacypolicy
  • Email Delivery - We may use third-party services to deliver transactional emails. These providers process your email address solely for delivery purposes.

AI Search & MCP Server

Our AI Search feature provides an MCP (Model Context Protocol) server that allows AI assistants like Claude Desktop and Cursor to search our job database.

Stateless by Design: The MCP server at mcp.consultant.dev is a stateless pipe. We do not store, log, or retain any queries, resumes, or data sent through this endpoint.

  • No data storage: Queries are processed and immediately discarded
  • No model training: We do not use any data from the MCP endpoint to train AI models
  • No cookies or tracking: The MCP endpoint sets no cookies and performs no user tracking
  • Ephemeral processing: All data is processed in memory and never written to disk

The MCP server acts purely as a bridge between your AI assistant and our public job search API. The same data is available through our website at consultant.dev/assignments.

For Candidates (Talent Pool)

If you join a recruiter's talent pool through an invite link, additional data processing applies.

Data We Collect

When you join a talent pool, we collect:

  • Account information: Email address (managed via Clerk authentication)
  • Profile data: CV/resume, skills, work experience, education
  • Contact details: Phone number, LinkedIn profile (if provided)
  • Preferences: Desired roles, locations, availability, hourly rate expectations

How We Use Your Data

  • Job matching: Connect you with relevant opportunities from the recruiting organization
  • Profile visibility: Make your profile visible to recruiters within the organization that invited you
  • Notifications: Send alerts about matching jobs and important updates

Who Can Access Your Data

Your profile data is only visible to administrators of the recruiting organization that invited you. We do not share your data with other organizations or third parties without your consent.

Authentication

Account authentication is managed by Clerk. Your password and authentication data are handled by Clerk according to their privacy policy.

Your Rights as a Candidate

  • Access: Request a copy of all data we hold about you
  • Correction: Update or correct inaccurate profile information
  • Deletion: Request deletion of your account and all associated data
  • Portability: Export your profile data in a standard format
  • Leave organization: Remove yourself from a talent pool at any time

Data Retention

We retain your candidate data until you request deletion or leave the organization. Inactive accounts may be flagged for review after 24 months of inactivity.

Data Retention

Analytics data is retained for up to 12 months. Waitlist email addresses are retained until you unsubscribe or request deletion. Data in localStorage remains until you clear your browser data.

International Transfers

Cloudflare may process data outside the EU. Transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards under GDPR.

Your Rights

Under GDPR, you have the following rights:

  • Right of access - request a copy of your data
  • Right to rectification - correct inaccurate data
  • Right to erasure - request deletion of data
  • Right to restriction - limit processing
  • Right to data portability - receive data in machine-readable format
  • Right to object - object to processing

To exercise these rights, contact us at the address above.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): imy.se

Changes to this policy

We may update this privacy policy from time to time. The date of the last update is shown at the top of the page.