Privacy

Last updated 12 September 2026

Falco works on your CV, so it holds personal data about you. This page says which data, why, who else sees it, and how to get it deleted. The data controller is Bouzidi Labs, reachable at hello@falco-job.com.

What Falco keeps

• Your account: email, name if you gave one, a hashed password or the identity Google gave us, and the sessions you are signed in on.
• What Falco read from your CV: roles, skills, education, languages, location, and the facts it may write from. The file itself is not kept — it is read and the reading is what is stored.
• Your hunt: the roles, cities and brief you typed, and every posting Falco read and scored for you, with its reasoning.
• Your standing answers: the questions employers ask on every form. Some are sensitive by law — a disability, a criminal record. They are stored only if you typed them, never inferred, and never sent to a language model.
• What was sent: every application, with a fingerprint of exactly what left, and an audit trail of everything Falco did.
• Logins Falco made for you, where you turned that on: one password per employer site, encrypted, shown only to you, deletable one at a time.
• Your mailbox connection, if you connected one: a token that lets Falco read application mail, encrypted. Message bodies are never stored.
• Your plan: whether it is trialing, active or ended. Your card never reaches Falco; Stripe holds it.

Why, and on what legal basis

To do the one thing you asked: find roles that fit and apply to the ones you chose. Legally that is the contract between us — GDPR Art. 6(1)(b). Your standing answers, where they are sensitive, are stored on your explicit instruction — Art. 9(2)(a) — and you can remove any of them at any time.

One honest note. A CV is a document you wrote, and people's CVs sometimes mention a health condition, a union, a nationality or a religious organisation. Falco does not ask for any of that, does not look for it, and does not use it. But if it is in your document it is in what Falco reads, and it goes wherever the document goes. If you would rather it did not, take it out of the file before you upload it. Falco refuses a CV carrying a CPR number outright, and tells you why.

Who else sees it

• Employers you apply to receive your application, exactly as shown to you. From that point they decide what they do with it, and their privacy notice governs it, not ours.
• Language model providers — OpenAI, Anthropic and Google — read your CV and the postings in order to score and tailor. Never your standing answers. All three are on paid business terms under which your data is not used to train their models.
• Stripe handles payment and holds your card and billing address.
• Resend delivers password-reset email.
• Replit and Neon host the application and the database.
• Job boards such as LinkedIn are read the way any visitor reads them, signed out. Nothing about you is sent to them.

Falco does not sell data or run advertising. Optional analytics stay within Falco's application and database. No advertising pixels or third-party analytics services are used.

Cookies and optional analytics

Essential storage keeps you signed in, remembers your cookie choice, and resumes your setup after checkout. It is needed to provide the service. Optional analytics run only after you accept them, on the basis of your consent under GDPR Art. 6(1)(a). Rejecting them does not change what you can do in Falco.

• falco_session: Falco's essential sign-in cookie. It lasts 14 days and renews while you use your account.
• falco_consent: Falco's essential cookie that remembers your choice for 180 days.
• falco_analytics: Falco's optional visit cookie. It lasts 30 minutes and is set only after you accept analytics.
• falco.resume: essential browser storage that resumes an unfinished setup after checkout. It is cleared when Falco resumes the setup, or when you clear browser storage.

With analytics enabled, Falco records visits, signup attempts, completed signups and started hunts, with their time and a broad traffic source such as Google or LinkedIn. A random visit identifier connects those steps within a visit. Analytics records do not contain your account ID, email, CV, form answers, full URLs, IP address or sign-in token. The installation owner can see aggregate reports and a history of consent choices.

Use Cookie settings at any time to change your choice. Turning analytics off stops collection and removes the optional cookie. Withdrawal does not undo processing that took place before it. Analytics records are retained for 90 days and consent records for 180 days, with expired records removed by hourly housekeeping. Expired consent is never treated as permission to track. If the purposes change, Falco asks again.

Where your data is

Your account and everything in it live in the EU — the application runs in Replit's European region and the database is in Frankfurt.

Three things leave it. The language model providers above are in the United States, so your CV and the postings are processed there; that transfer runs on the standard contractual clauses in their data-processing terms. Applications go to the employers you chose, wherever they are. And if you connect a mailbox, Google is in the United States too.

Does a machine decide anything about you

Falco scores postings against your CV and, if you move the dial that far, sends applications on its own to the ones that score above a bar you set. That is a decision about which jobs you apply for, so it is worth being plain about it.

Every score comes with its reasoning — what fits, what to watch, what stopped it — and you can read all of it. Nine kinds of question are never answered by a machine and always come back to you, including anything about disability, a criminal record, relocation or salary. You can move the dial back to "nothing without my tap", pause everything mid-hunt, or turn Falco off, at any moment and without giving a reason. Nothing about you is profiled for anyone but you: Falco never ranks you against another person, and no employer can search Falco for candidates. There is no such thing here.

How long

• Job postings: 180 days, then deleted, along with the scores and documents made from them. Postings you actually applied to are kept, because they are the record of your own application.
• Sign-in sessions: 14 days.
• What each AI call cost us: 400 days. It carries no CV content.
• Optional analytics: 90 days. Cookie choices are retained for 180 days, separately from your account.
• Everything else — your account, your CV reading, your answers, your applications — for as long as your account exists.

Your rights

You can see your data, correct it, take it with you, object to how it is used, and have it deleted. Write to hello@falco-job.com from your account address and we answer within a month.

Deleting really deletes. Settings has a button. It removes your account, every search, your CV reading, your standing answers, the logins Falco made for you, your mailbox connection, every tailored CV and cover letter, and every application record. It also cancels your plan and revokes Falco's access to your mailbox at Google.

Three things you should know, because they are true and most privacy pages would not say them:

• The audit trail cannot be edited or deleted — that is the point of it, and it is enforced by the database itself. So instead, everything it says about you is encrypted under a key held on your account. Deleting your account destroys that key, and those lines become unreadable to anyone, us included. What is left is that something happened, and when.
• Our database keeps seven days of backups. For those seven days a restore could bring your data back; after that it is gone from the backups too.
• Applications already sent cannot be recalled. They are with the employer, and only they can delete them.

If you think we have got any of this wrong, tell us — and you can complain to Datatilsynet (the Danish Data Protection Agency).

Who you are dealing with

Bouzidi Labs
CVR 46752031
Krügersgade 6, 5th, 2200 Copenhagen, Denmark
hello@falco-job.com

Changes

If this page changes in a way that matters, you are told by email before it takes effect.