DEALT ("we", "us", "our") operates the DEALT mobile application and the website at getdealt.app. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Irish data protection law.
01 Data Controller
The data controller is Stellar Screen Films Ltd (CRO 748220), trading as DEALT, based in Dublin, Ireland. Contact: [email protected].
02 What Data We Collect
Job seekers: Name, email, phone number (optional, with explicit sharing consent), location and address, CV content (parsed for skills, experience, education), work experience, skills, certifications, preferences, availability, application history, and device push notification tokens.
Employers: Business name, contact name, email, business location, company logo, job listing details (role, pay, requirements, perks, working conditions), applicant review actions, and device push notification tokens.
03 How We Use Your Data
To provide the DEALT job matching service, including: calculating commute times between your location and job locations; matching skills and experience to job listings using automated scoring; parsing uploaded CVs and job descriptions using AI for profile and listing auto-fill; generating skill embeddings for semantic matching; sending push notifications and transactional emails about application status; and improving our matching algorithms and service quality.
04 Automated Decision-Making
DEALT uses automated matching to calculate a compatibility score between candidates and job listings. This score considers skills (including AI-powered semantic similarity), experience, location proximity, certifications, and availability. The score influences the order in which jobs appear to candidates and the order in which applicants appear to employers. No application is automatically rejected based on match score. All hiring decisions are made by employers. You may contact us to request a human review of how your profile is being matched.
05 Location Privacy
DEALT uses a two-tier location model to protect your privacy. Your full address is stored securely and used only for travel time calculations. Employers see only your general area (for example "Dublin 8"), never your exact address. You control whether your phone number is shared with employers via an explicit opt-in toggle in your profile.
06 Legal Basis for Processing
Contract performance: Processing necessary to provide the job matching service you signed up for. Legitimate interest: Improving our service, preventing fraud, ensuring platform safety, automated matching. Consent: Push notifications, optional CV upload, phone number sharing, marketing communications.
07 Third-Party Services
We use the following third-party processors:
- Supabase (EU-West, Ireland), database hosting, authentication, file storage
- Anthropic Claude API (US), AI parsing of CVs and job descriptions. Content is processed in real time and not stored or used for training by Anthropic.
- OpenAI API (US), generating skill embeddings for semantic matching. Skill labels only (not personal data) are sent. Data is not used for training.
- Resend (US), transactional email delivery for application status updates
- Google Places API, address autocomplete and geocoding, country-restricted to Ireland
- OpenRouteService (Germany), travel time calculations
- Expo Push Notifications, delivering mobile push notifications
- Apple App Store / Google Play, app distribution
08 Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required for legal or regulatory purposes. Job listings are retained for 12 months after closing for statistical purposes, with personal applicant data anonymised.
09 Your Rights (GDPR)
You have the right to: access your data, rectify inaccuracies, request erasure ("right to be forgotten"), data portability, restrict processing, object to processing based on legitimate interest, object to automated decision-making, and withdraw consent at any time. Contact [email protected] to exercise these rights. We will respond within 30 days.
10 Data Security
We use encryption in transit (TLS), database-level security policies, secure authentication via Supabase Auth, and access controls. Passwords are hashed and never stored in plain text.
11 Cookies
The DEALT mobile app does not use cookies. The getdealt.app website uses only essential cookies for basic functionality. We do not use tracking or advertising cookies.
12 Children's Privacy
DEALT is not intended for anyone under 16. We do not knowingly collect data from children under 16. Contact [email protected] if you believe a child has provided us with personal data.
13 International Transfers
Your data is primarily stored within the EU (Supabase EU-West, Ireland). Where data is processed outside the EU (Anthropic, OpenAI, Resend), appropriate safeguards including Standard Contractual Clauses are in place.
14 Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via the app or email. The latest version is always available at getdealt.app/privacy.
15 Contact
Email: [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.