Privacy policy
Last updated 8 September 2026.
This is the long version. The one-screen version says the same things in fewer words and does not contradict this.
Who is responsible
VENTURES.EU, UNIPESSOAL, LDA, Rua Rodrigues Sampaio, Nº 31, 4 Dto, 1250-008 Lisboa, Portugal. VAT and company number PT 516502530. We are the controller of your personal data.
Questions, requests and complaints: eric@dealflow.eu. You can also complain to the Comissão Nacional de Proteção de Dados (CNPD), Portugal.
What we hold
Your account: an email address and a password we never see in plain text after you type it.
Your CV and what we read from it: the files you upload, and the structured profile derived from them — employers, titles, dates, skills, languages, education.
What you tell us you want: countries, remote preference, salary floor, right to work, and the companies you watch.
What we worked out: a score and a verdict per role, with the reasons, and what you then did — declined, applied, and what happened after.
How you used the product: which steps you reached, as labels. Never the text of your CV, a job description or a salary figure — that rule is enforced in three places, including a database trigger that refuses the write.
Why we are allowed to
To provide the service you asked for — reading your CV, matching roles, keeping your applications. That is performance of our contract with you, and without it there is no product.
To keep the service working and honest — measuring whether our verdicts actually predict interviews, and keeping the crawl healthy. That is our legitimate interest, and it is served by counts rather than by reading anybody's CV.
Never to advertise to you or to sell you. We do not share your profile with employers or recruiters, and there is no arrangement under which we could.
Employers cannot browse you
Employers can ask us to help them hire. They cannot search for people, and no profile, CV or match is shown to an employer without your explicit consent to that specific role.
This is built rather than promised: the table holding employer enquiries has no route to any table holding your data, and an automated test fails the build if one is ever added.
Where your data goes
Everything we store — the database, your profile, your uploaded files — is held in the European Union. The file bucket is private; files are reachable only through a short-lived link issued to you.
Reading your CV and scoring roles means sending text outside the EU. Our model provider cannot be restricted to Europe — the setting offers the United States or a global pool, and there is no European option. So your data is stored in the EU and processed, for that step, outside it. We would rather tell you than let you assume.
| Who | What they do | Where |
|---|---|---|
| Supabase | Database, authentication, and the files you upload | European Union (Ireland, eu-west-1) |
| Anthropic | Reads your CV and scores roles against it | Outside the EU — United States or a global pool |
| Resend | Sends sign-in, password and notification email | European Union (eu-west-1) |
| OVH | Hosts the website and the crawler | France |
The things we do not want in your CV
CVs sometimes carry health information, union membership, religion, political views or a photograph. We do not ask for any of it, we do not want it, and we do not use it for anything.
Being straight about the state of this: the work to make our CV reader actively discard those categories is being built and is not finished. Until it is, please feel free to remove them before uploading — and if you would like a CV deleted for that reason, ask and it goes immediately.
The scoring, and what it is not
We score roles against your profile automatically and tell you which are worth your time. That is advice to you about jobs, not a decision about you: nobody is refused anything on the strength of it, no employer sees it, and it has no legal effect on you.
You can disagree with any verdict in the product, and doing so changes what we show you next.
How long we keep it
While you have an account, and until you delete it. Deleting your account removes your profile, your uploaded files, every match and verdict, your applications and their history, and the login itself. Nothing is archived and there is nothing to restore.
Being straight about this too: we do not yet have an automated job that deletes old data on a schedule. Today retention means "until you ask, or until you delete your account", both of which work now. A timed policy is being built.
Your rights
You can see and correct your profile in the product, download everything we hold, and delete your account, all without asking anybody:
Export my dataDelete my account
You also have the right to object to processing, to ask us to restrict it, and to complain to the Comissão Nacional de Proteção de Dados (CNPD), Portugal. Write to eric@dealflow.eu and we answer within 30 days, usually the same week.
Cookies
We set none. The cookie page lists the two pieces of browser storage that make signing in work, and there is nothing else.
What this document is not
No lawyer has reviewed this. It was written from what the system actually does, by the people who built it, and every factual claim in it was checked against the running product. It is accurate; it is not professional advice, and it will be reviewed before we charge anybody.