Last updated: February 24, 2026 ยท Effective immediately
The short version: Kitsuno collects only what's needed to run your job search. We don't track you, don't sell your data, don't show ads, and don't use your career data to train AI models. You can export or delete everything at any time.
Kitsuno is operated by SF4L S.R.L., a company registered in Romania (CUI 49409572, J2024000638403), with its registered office at ศoseaua Nicolae Titulescu Nr. 10, Bl. 20, Sc. A, Et. 9, Ap. 41, Sector 1, Bucureศti, Romania.
For any privacy-related questions, contact us at hello@kitsuno.ai.
When you create an account, we collect your email address, name, and authentication credentials. If you sign in via a third-party provider (e.g. Google), we receive your name and email from that provider.
You provide this voluntarily to power your job search:
Your career data belongs to you. We process it solely to operate your job search. We never sell it, share it with advertisers, or use it to train AI models.
As Kitsuno operates your job search, we store:
If you join the waitlist before creating an account, we collect your email address, IP address (for abuse prevention), and any UTM parameters from the referring link.
We store minimal technical data required for security and operations: IP addresses in server logs (retained for 30 days), user agent strings, and login timestamps.
Kitsuno does not use cookies for tracking. We do not use analytics services. We do not embed tracking pixels, social media widgets, or advertising scripts. The only browser storage we use is localStorage for your light/dark theme preference.
| Purpose | Legal basis (GDPR) |
|---|---|
| Operating your job search and generating applications | Contract performance (Art. 6(1)(b)) |
| Account creation and authentication | Contract performance (Art. 6(1)(b)) |
| Email notifications and digests | Contract performance (Art. 6(1)(b)) |
| Waitlist registration | Consent (Art. 6(1)(a)) |
| Security, fraud prevention, abuse detection | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
We use a limited number of third-party services to operate Kitsuno. Each processes only the minimum data required for its function:
| Service | Purpose | Data processed | Location |
|---|---|---|---|
| Hetzner | Server hosting | All application data (encrypted at rest) | Germany ๐ฉ๐ช |
| OVHcloud | AI scoring & extraction | Job descriptions, anonymized profile context | France ๐ซ๐ท |
| Groq | AI document generation | Career context for CV/CL generation | United States ๐บ๐ธ * |
| Resend | Email delivery | Email address, message content | United States ๐บ๐ธ * |
| Telegram | Push notifications (opt-in) | Telegram user ID, notification content | Various |
| Google Fonts | Typography | IP address (standard web request) | United States ๐บ๐ธ * |
* International transfers: Where data is processed outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's adequacy certification. Groq and Resend process data under SCCs. We are evaluating self-hosting fonts to eliminate this third-party dependency.
Kitsuno uses AI models to score job matches, generate tailored documents, and power the Kitso career agent. Important details:
| Data | Retention |
|---|---|
| Account & career data | Until you delete your account |
| Generated documents | Until you delete them or your account |
| AI conversation history | Until you delete it or your account |
| Server logs (IP, user agent) | 30 days |
| Waitlist entries | Until beta launch or upon request |
| Deleted account data | Permanently removed within 30 days |
Under the GDPR, you have the following rights. To exercise any of them, email hello@kitsuno.ai. We respond within 30 days.
You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at www.dataprotection.ro.
You can export your entire career library, configuration, and application history at any time from your dashboard in JSON and PDF formats. To delete your account and all associated data, use the account settings page or email us. Deletion is permanent and completed within 30 days.
We protect your data with encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. Our infrastructure is hosted on dedicated servers in Germany with no shared tenancy.
Kitsuno is designed for professionals and is not directed at anyone under 16. We do not knowingly collect data from children.
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.