Privacy Policy

Overview

GetDesq (“we”, “us”, “our”) is operated by GetDesq Limited, a New Zealand company. We are committed to protecting your personal information and handling it in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).

Our fundamental position is simple: we do not sell, share, or distribute your personal information to any third parties for commercial purposes — ever. Your data exists solely to provide you with the GetDesq service.

What information we collect

We collect only what is necessary to provide the service:

• Account information — your name and email address, provided when you sign in with Google.
• Profile information — your location and current job title, which you provide voluntarily during onboarding.
• Job application data — job listings, notes, tasks, and application stages you add to your board.
• CV and cover letter content — documents you create or upload within the platform.
• Usage data — login sessions, IP addresses, and user agent strings, collected for security and analytics purposes.
• Communications — any correspondence you send to us directly.

We do not collect payment information directly. If payment processing is introduced in future, it will be handled entirely by a PCI-compliant third-party provider.

How we use your information

Your information is used exclusively to:

• Provide, operate, and improve the GetDesq platform
• Authenticate your identity and maintain account security
• Send you product emails and onboarding communications you have opted into
• Enable recruiters you have explicitly connected with to view your profile and job search progress
• Conduct internal analytics to improve the product (using aggregated, de-identified data only)
• Comply with our legal obligations under New Zealand law

Recruiter access

GetDesq allows you to connect with recruiters. If you choose to connect with a recruiter or their organisation, they will be able to view your profile information (name, email, location, job title) and your job search board. You control this connection entirely — you can revoke access at any time from your settings.

Recruiters may add private notes to your profile that are visible only to their organisation. These notes are not visible to you, but they are subject to the same data protection obligations under this policy.

Third-party services

We use a small number of trusted third-party services to operate the platform. These providers act as data processors on our behalf and are contractually obligated to protect your data:

• Supabase — database and authentication infrastructure, hosted on AWS in the Sydney region (Australia)
• Vercel — web hosting and deployment, with servers in the Sydney region
• Resend — transactional email delivery
• Anthropic (Claude) — AI features including CV analysis, cover letter generation, and interview question generation. Content you submit for AI processing is governed by Anthropic’s Privacy Policy
• Google OAuth — sign-in authentication only

We do not sell, rent, or share your personal information with any third party for marketing, advertising, or commercial purposes.

Data storage and security

Your data is stored on servers located in Australia (Sydney region), which is subject to the Australian Privacy Act. We use industry-standard security measures including:

• Encryption in transit (TLS) and at rest
• Row-level security on all database tables
• Role-based access controls
• Regular security reviews

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security.

Your rights under the Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct any inaccurate information
• Deletion — request that we delete your account and associated data
• Portability — request your data in a machine-readable format
• Opt out — unsubscribe from marketing emails at any time using the unsubscribe link in any email

To exercise any of these rights, email us at vivek@getdesq.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.

Cookies

GetDesq uses only essential session cookies required for authentication and security. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Children’s privacy

GetDesq is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email. Continued use of GetDesq after any changes constitutes your acceptance of the updated policy.

Contact and complaints

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

GetDesq Limited
Email: vivek@getdesq.co.nz
Website: getdesq.co.nz

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.