Privacy Notice
Effective: September 14, 2026
Controller
Journey.One is operated by Mareke Solutions s.r.o. The controller contact for privacy requests is support@journey.one.
What We Process
Journey.One processes a pseudonymous account identifier, access and security records, CV-derived matching signals, your optional preferences and notification email, dashboard job records, decisions such as Applied and Not Interested, limited technical logs, and support messages you send to us. We do not request your LinkedIn contacts or store your LinkedIn access token.
CV Data Minimisation
By default, Journey.One reads an uploaded CV only to derive search and matching signals such as roles, skills, domains, keywords, and search phrases. The full CV file and full extracted CV text are not stored in cloud storage by default. Full CV storage should only be enabled where the user has clearly opted in.
Purposes And Legal Bases
We process account, matching, dashboard and job-decision data because it is necessary to provide the service you request (Article 6(1)(b) GDPR). We process proportionate security and abuse-prevention records for our legitimate interests in protecting the service and users (Article 6(1)(f)). Optional email alerts are sent only when you enable them and can be disabled at any time. We process records required by law under Article 6(1)(c).
Data Sharing
We use contracted providers for web hosting, managed database services, identity sign-in, source-code automation, domain and email delivery. They receive only the data needed for their role. We do not sell personal data or use CV-derived data for advertising.
International Transfers
Some providers may process data outside the European Economic Area. We assess the transfer and rely on an adequacy decision where available or contractual safeguards such as the European Commission's Standard Contractual Clauses, together with supplementary security measures where appropriate. You may request information about applicable safeguards from support@journey.one.
Retention
CV-derived profiles remain until you replace or delete them or delete the account. Discovery and activity data use your selected 90, 180 or 365-day retention setting; 180 days is the default. Completed scan events are removed after 180 days, completed scan summaries after 365 days, and short-lived rate-limit records after 48 hours. A deletion request removes active dashboard data promptly, subject only to narrow legal or security retention duties.
Your Rights
You may have rights to access, correct, delete, restrict or object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing. You can export or delete dashboard data inside the app, or contact support@journey.one. We normally respond within one month after verifying the request.
Automated Matching
Journey.One ranks opportunities using clear remote and contract eligibility rules, overlap with roles, domains and skills derived from your CV, listing freshness, and preferences you provide. The dashboard displays match reasons and remains under your control. It does not make hiring decisions, automatically apply, or make a solely automated decision that produces legal or similarly significant effects.
Complaints
If you believe your data protection rights have not been respected, you may contact us first at support@journey.one. You may also have the right to lodge a complaint with your local EU data protection authority.
Security
Journey.One is designed to minimise CV data retention, restrict dashboard access, and avoid logging full CV text, access codes, credentials, or source credentials. No online service can guarantee perfect security, but we work to keep data protected and limited.
Contact
For privacy requests, contact support@journey.one. For business inquiries, contact hello@journey.one.
Questions about this notice or the service's data protection controls can be sent to support@journey.one.