Privacy Policy

1.Controller

The controller is PIXAWEB sagl, Cantonale 19, 6900 Lugano, Switzerland. For any data protection question, write to legal@pixawebch.com.

2.Scope and legal bases

SpeedyJob.ai processes personal data and sensitive personal data of users and companies resident in Switzerland. Data is processed in full compliance with the Swiss Federal Act on Data Protection (FADP) and its ordinance (DPO) and, for people located in the European Union or the European Economic Area, with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

The legal bases for processing are:

• Performance of a contract (Art. 6(1)(b) GDPR): account creation, CV analysis, sending applications, subscription.
• Consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR; Art. 6(6)–(7) FADP): analytics and marketing cookies, optional emails, processing of sensitive data contained in the CV.
• Legal obligations (Art. 6(1)(c) GDPR): accounting and tax record keeping.
• Legitimate interest (Art. 6(1)(f) GDPR; Art. 31 FADP): platform security, abuse prevention, anonymous statistics.

3.Data processed

Candidates

• Account data: name, email, password (stored only in encrypted form), preferences.
• Curriculum vitae and extracted data: experience, education, skills, languages, suggested roles.
• Applications: saved or applied-for jobs, cover letters, messages exchanged with companies through the SpeedyJob mailbox.
• Subscription and credit data. Payment card data is processed directly by the payment provider and is never stored by SpeedyJob.

Companies and employers

• Company name, contact person, business email address, content of job offers and of replies sent to candidates.

Technical data

• Pages visited, device type and country. IP address, approximate city and referrer only if you accept analytics cookies; otherwise the visit is recorded anonymously.
• Security and error logs required to operate the service.

4.Processing of sensitive data

A CV may contain sensitive personal data within the meaning of Art. 5(c) FADP and Art. 9 GDPR (for example health data, religious or trade union membership, photographs). Please do not include such data unless it is necessary for the application. If you upload it, we process it solely to provide the service, based on your explicit consent, with enhanced safeguards and without commercial profiling.

In communications with companies through SpeedyJob, personal email addresses and phone numbers are hidden automatically: companies receive applications from cv_proposta@speedyjob.ch.

5.Purposes of processing

• Providing job search, the compatibility score and AI tools for CVs and letters.
• Sending applications to companies and receiving their replies in the inbox («Busta»).
• Sending service notices (new jobs, reminders, company replies), which you can turn off in your profile.
• Managing subscriptions, payments and support.
• Ensuring security, preventing fraud and improving the service through statistics.

6.Artificial intelligence

For CV analysis, job summaries, scores and the Genius.ai assistant we use artificial intelligence models from specialised providers. We only send them the data needed for each request. AI results are indicative and do not constitute automated individual decisions with legal effects: the decision to apply always remains yours.

7.Usage limits and access security

To apply the AI usage limits described in the Terms and Conditions and to protect accounts, we process the following technical data:

• AI action counter: account identifier, day, number and type of feature used (without the content of the requests). Kept for 60 days, then deleted automatically.
• Failed login attempts: email address entered, IP address and time. They are used to block repeated wrong passwords for 15 minutes and are deleted automatically after 1 hour.
• Security alerts for the administration area: if a staff account is locked, we record the email, IP address, device and time and send them to authorised staff.

The legal basis is the performance of the contract and our legitimate interest in platform security and abuse prevention (Art. 31 FADP, Art. 6(1)(b) and (f) GDPR). This data is not used for advertising or profiling.

8.Retention and third parties

Data may be shared with technology partners solely to provide the service and under agreements that guarantee its confidentiality:

• AI service providers: CV analysis, job summaries, Genius.ai assistant.
• Payment providers: secure handling of subscriptions and payments.
• Email delivery services: delivery of applications, replies and notices.
• Job aggregation services: collection of public job advertisements.
• Hosting, backup and CDN: operation, availability and security of the platform.
• Recipient companies: only the applications you choose to send.

We do not sell your data or share it with third parties for advertising purposes.

9.Server locations

For transparency on data sovereignty, the infrastructure and servers used to provide the service are located in:

• America: artificial intelligence and job aggregation services.
• Switzerland: main database and sensitive data.
• Germany: backup and CDN services.

For transfers to countries that do not ensure an adequate level of protection according to the list of the Federal Council (Annex 1 DPO) or of the European Commission, we put appropriate safeguards in place, in particular the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) and the European Commission, or we rely on recognised certifications such as the Swiss-U.S. Data Privacy Framework.

10.Retention periods

• Account, CV and applications: for as long as the account exists. After deletion they are erased within 30 days; backups are overwritten within the following 12 months.
• Messages with companies and visit statistics: no longer than 12 months.
• Accounting and billing data: 10 years, as required by Art. 958f of the Swiss Code of Obligations.

11.Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS/TLS), hashed passwords, data access limited to authorised staff, logging of administrative access, separation of roles and regular backups. In the event of a data security breach resulting in a high risk, we will notify the FDPIC and the persons concerned as required by Art. 24 FADP and Arts. 33–34 GDPR.

12.Your rights

You may exercise the following rights at any time by writing to legal@pixawebch.com:

• Access to your data (Art. 25 FADP, Art. 15 GDPR).
• Rectification of inaccurate data (Art. 32 FADP, Art. 16 GDPR).
• Erasure and restriction of processing (Art. 32 FADP, Arts. 17–18 GDPR).
• Data portability in a common electronic format (Art. 28 FADP, Art. 20 GDPR).
• Objection to processing and withdrawal of consent, without affecting the lawfulness of prior processing (Art. 21 GDPR).

We reply within 30 days. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or, if you live in the EU, with the supervisory authority of your country.

13.Changes

We may update this policy to reflect new features or changes in the law. The date of the last update is shown at the top. We will inform you of significant changes by email or through a notice on the platform.