Privacy Policy

This Policy is issued by MagiCareer (hereinafter “we”, “us”).

• Email: support@magicareer.it
• Website: https://magicareer.it

We act as data controller under the Ukrainian Personal Data Protection Law and GDPR.

We collect only the data needed to operate the Service:

• Account: email, name, hashed password
• Career profile: resume, work history, skills, salary expectations, location — everything you add yourself
• Integrations (with your consent): Google Calendar events related to job search. The Gmail integration is currently disabled — we do not request access to your email and no Gmail data is read (see “Google API — Limited Use”).
• AI interactions: your messages to the assistant and generated responses
• Subscription: type, status, and dates. We do not store card details — payments are processed by Apple.
• Technical data: device model, iOS version, language, time zone, anonymized IP, crash logs

• Provide the Service — match jobs, track applications and interviews, organize your job search
• Manage your account and subscription
• Communicate with you about the Service
• Improve features and fix bugs
• Comply with legal obligations

We may share your data with service providers that help us operate the Service — hosting, payment processing (Apple), integrations (Google), AI processing (Google Cloud Vertex AI — our only AI provider), error monitoring. All providers are required to maintain equivalent data protection standards.

The current list of providers is available upon request at support@magicareer.it.

We do not sell your data to third parties.

Our use of data received from Google APIs (currently Google Calendar only) adheres to the Google API Services User Data Policy, including Limited Use requirements.

Gmail integration status. The Gmail integration is currently disabled. The gmail.readonly scope was removed from our consent screen on August 2, 2026 and is no longer requested, and the feature is switched off in the production environment. Accordingly, Gmail data is not read, received, stored, or processed, and is not sent to any AI model. Should we reintroduce this feature, it will require separate, explicit consent from you and a corresponding update to this Policy.

We use this data solely to surface and organize job-related interview events in the Service. We do not use it for advertising, sale to third parties, or training general-purpose AI models.

Where such data is processed by AI, that processing is performed exclusively by Google Cloud Vertex AI within Google Cloud infrastructure. Data obtained from Google APIs is never used to train AI models and is never shared with any third-party AI provider. See “Automated Processing (AI)” below for details.

You can revoke access in Service settings or at myaccount.google.com/permissions.

MagiCareer uses automated processing (LLMs) to suggest jobs and analyze your profile. AI recommendations are advisory — the final decision is always yours.

AI provider. Our sole AI processor is Google Cloud Vertex AI. All such processing takes place within Google Cloud infrastructure, in an EU region (europe-west4). We use no third-party AI services, models, intermediaries, or gateways.

Google user data is never used for model training. User data obtained from Google APIs (currently Google Calendar only) is processed within Google Cloud and is never used to train or improve AI models, nor is it ever shared with any third-party AI provider.

What Google Calendar data reaches a model. Your calendar events are sent to Vertex AI only when you yourself initiate a request to the in-app assistant, and never more than 5 upcoming events. Only the event title, start and end time, and location are transmitted. Event descriptions, attendee lists, and organizer email addresses are never transmitted.

Tagging events as job-related is performed locally through keyword matching — with no AI involved and no data transmitted anywhere.

You have the right to: know the general logic, contest AI conclusions, and turn AI features off by cancelling your Pro subscription (AI features are part of Pro).

We retain your data while your account is active. After you delete the account, your data is removed within 30 days. Certain technical logs may be retained longer for security and legal compliance.

We use industry-standard safeguards — TLS encryption in transit, password hashing, restricted employee access. No method of transmission is 100% secure; we do our best to minimize risk.

Your data may be processed by providers outside Ukraine and the EU. We work only with providers that offer equivalent data protection.

• Access your data and obtain a copy
• Correct inaccuracies
• Delete your account and data
• Export data in a structured format
• Withdraw consent for integrations (Google Calendar, AI) at any time
• Object to automated decisions
• Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights

Most rights are available in Service settings. Other requests — email support@magicareer.it. We respond within 30 days.

The Service is not intended for users under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us data, contact support@magicareer.it — we will delete it.

We may update this Policy. We will notify you of material changes in the app or by email. The latest version is always available at magicareer.it/privacy.