Privacy policy

Who is responsible

The data controller is Zimeng Wu (individual beta project, brand: KnockDor). Contact for any question or request: knockdor99@proton.me.

Data we process

Account: e-mail address, password (hashed by our authentication provider), language.

Profile: the content of your CV, your questionnaire answers (goals, countries, residence or visa situation, languages, preferences, target companies), your "fact bank".

Usage: postings, scores, applications, notes, generated documents and the number of AI calls used.

Messages you send through the feedback form (with the page and language).

Purposes and legal bases

Providing the service you asked for (search, scores, documents, tracking): performance of the terms of use.

Sending your CV and profile to AI providers to produce those results: your explicit consent, asked before any use and withdrawable at any time.

Security and abuse prevention (usage limits): legitimate interest.

Your data is not sold and not used for advertising.

AI providers and transfers outside the EU

To produce results, your CV text, profile and the postings are sent by our server to an AI provider: DeepSeek (servers located in China) and/or Google (Gemini API). If you add your own key, they are sent to that key's provider.

These providers are located or process data outside the European Union, including in China and the United States, where the level of protection may differ. By consenting you accept this transfer. Each provider applies its own terms, including on the use of content to improve its models; read them before consenting. KnockDor does not use your data to train its own models.

Other processors

Vercel (application hosting, USA) and Supabase (database and authentication). The database location depends on the region chosen for the project.

Retention

Your data is kept while your account exists. "Delete my data" erases your profile content, CVs, postings and applications and keeps the account; "Delete my account" erases everything, permanently. Technical copies, if any, disappear with the provider's backup cycle.

Your rights

Access, rectification, erasure, portability (JSON export in Settings), restriction, objection and withdrawal of consent at any time. To withdraw consent, delete your data or your account, or write to us. You can also complain to your data protection authority (in France, the CNIL: cnil.fr).

Cookies and local storage

KnockDor only uses strictly necessary cookies and local storage: sign-in session, display language, a few interface preferences. No advertising or audience-measurement cookies are used, which is why no consent banner is shown.

Security

Personal API keys you add are encrypted. Access to data is limited to your account. No service is 100% safe: do not import information you do not need (ID documents, document numbers).

Updates

We will ask for your agreement again if this text changes in a significant way. Version: 2026-10-15.